Tidy

Full-featured AI property management — addresses, cleanings, reservations, tasks, pros, and natural language messaging.

This skill appears to do what it says: it requires the tidy-request CLI and a TIDY_API_TOKEN to call tidy.com's REST and MCP APIs. Before installing or providing a token: (1) verify you trust the tidy-request binary source (brew tap or npm package) and inspect it if possible; (2) prefer setting the TIDY_API_TOKEN as an environment variable instead of leaving credentials on disk, and be aware the docs say tokens do not expire and old tokens remain valid — rotate/revoke tokens if compromised; (3) only add the MCP endpoint to other clients (e.g., Claude Desktop) if you intend to integrate TIDY with those applications; and (4) limit the token's use to machines/users you trust. If you want a stronger assurance, ask the publisher for documentation about token scopes, revocation, and the tidy-request project's source code/release artifacts before proceeding.

Type: OpenClaw Skill Name: tidy Version: 1.1.0 The 'tidy' skill is a legitimate integration for the TIDY property management platform, providing tools for managing addresses, cleanings, and guest reservations via a REST API and MCP server. It follows standard security practices for CLI tools, such as storing credentials in `~/.config/tidy/credentials` and using environment variables for tokens. All documented endpoints and installation instructions point to official domains (tidy.com, npmjs.com), and no evidence of malicious behavior, data exfiltration, or prompt injection was found.