← Back to Skills Marketplace
emcro

CardPointers

cross-platform ✓ Security Clean
384
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install cardpointers
Description
Query CardPointers card recommendations, wallet cards, and offers via the CardPointers CLI. Use when the user asks about which credit card to use for a purch...
README (SKILL.md)

CardPointers CLI

Query your CardPointers wallet — cards, offers, recommendations — from the terminal.

Setup

  • Config: ~/.cardpointers/config (JWT token, auto-created on login)
  • Requires: curl, jq, bash
  • Auth: Run cardpointers login to authenticate (email/password or browser-based Apple/Google/passkey)

Commands

recommend — Best card for a purchase

cardpointers recommend groceries
cardpointers recommend "gas stations"
cardpointers recommend --merchant amazon
cardpointers recommend -m "whole foods" --amount 150
cardpointers recommend gas -p all        # best gas card across all profiles

cards — List wallet cards

cardpointers cards                       # approved cards (default)
cardpointers cards --status all          # all statuses
cardpointers cards --bank chase          # filter by bank
cardpointers cards -b amex -s all -l 5  # combine filters + limit

offers — List and filter offers

cardpointers offers                          # active offers
cardpointers offers -s redeemed              # redeemed offers
cardpointers offers --expiring               # expiring within 7 days
cardpointers offers -e 14                    # expiring within 14 days
cardpointers offers --bank amex              # filter by bank
cardpointers offers --card "gold"            # filter by card name
cardpointers offers --category dining        # filter by category
cardpointers offers --type personal          # personal offers only
cardpointers offers --favorite               # favorited offers only
cardpointers offers --sort value --limit 10  # top 10 by value

search — Search offers by keyword

cardpointers search "whole foods"
cardpointers search "streaming" --favorite
cardpointers search "gas" --limit 5

profiles — List linked profiles

cardpointers profiles

Utility

cardpointers status    # account info + connection test
cardpointers ping      # test MCP connection
cardpointers tools     # list available MCP tools
cardpointers login     # authenticate
cardpointers logout    # clear saved token
cardpointers --version # print version

Global Options

All data commands accept these flags:

Flag Description
--profile, -p Query by profile: number (-p 2), name (-p caroline), or all/any
--limit, -l Cap number of results
--json, -j Raw JSON output (for scripting / AI agents)

Environment Variables

Variable Description
CARDPOINTERS_API Override API base URL (default: https://mcp.cardpointers.com)
CARDPOINTERS_DEBUG Set to 1 for verbose output
NO_COLOR Disable ANSI colors

Reference

  • Card statuses: approved, applied, denied, closed, all
  • Offer statuses: active, snoozed, redeemed, expired, expiring_soon, all
  • Offer bank filter (enum): amex, chase, citi, boa, usbank, wellsfargo
  • Card bank filter: freeform text (partial match)
  • Offer sort options: expiring, value, card
  • Cards include approval_date (YYYY-MM-DD)

Common Use Cases

  • "What card should I use at Costco?" → recommend -m costco
  • "Show my Amex cards" → cards -b amex
  • "Offers expiring this week?" → offers -e 7
  • "Any Whole Foods offers?" → search "whole foods"
  • "Best dining card across all profiles?" → recommend dining -p all
  • "Top 5 offers by value" → offers --sort value -l 5
  • "Show redeemed offers as JSON" → offers -s redeemed -j
Usage Guidance
This skill is a straightforward integration with the CardPointers CLI. Before installing: (1) verify you trust the cardpointers Homebrew tap (review the formula/tap contents) because third‑party taps can run install scripts; (2) expect the CLI to create and read a JWT token at ~/.cardpointers/config when you run 'cardpointers login' — that token grants the CLI access to your CardPointers account, so treat that file as sensitive; (3) no extra credentials are required by the skill itself, but the login flow may use email/password or browser-based SSO (Apple/Google/passkey); (4) if you prefer extra isolation, run the CLI in a sandboxed environment or inspect the tap before installing. If you need me to fetch the brew formula URL or show exact install steps to inspect, I can do that first.
Capability Analysis
Type: OpenClaw Skill Name: cardpointers Version: 1.0.0 The skill bundle is benign. The `SKILL.md` file primarily serves as documentation for the `cardpointers` CLI, detailing its commands, options, and common use cases. It requires standard tools like `curl`, `jq`, and `bash`, which are common for CLI interactions but are not instructed to be used maliciously. While a JWT token is stored locally at `~/.cardpointers/config`, there are no instructions for the AI agent to read, exfiltrate, or otherwise misuse this file. The `CARDPOINTERS_API` environment variable is documented as an override, but no malicious endpoint is specified or instructed to be used. There is no evidence of prompt injection attempts, data exfiltration, persistence mechanisms, or other malicious intent within the provided files.
Capability Assessment
Purpose & Capability
Name/description match the runtime instructions: the skill just runs the CardPointers CLI to query cards/offers. Declared required binaries (cardpointers, jq) are appropriate. Minor inconsistency: SKILL.md also lists 'curl' and 'bash' as required but the registry metadata only declared cardpointers and jq; this is a small documentation mismatch, not a material capability gap.
Instruction Scope
SKILL.md directs the agent to run the cardpointers CLI and related subcommands and to use ~/.cardpointers/config (a JWT token file created on login). All referenced files, variables, and commands are directly relevant to querying the CardPointers service; there are no instructions to read unrelated system files or exfiltrate data elsewhere.
Install Mechanism
Install spec uses Homebrew formulas: cardpointers/tap/cardpointers and jq. jq is a standard formula; cardpointers is provided via a third‑party tap (cardpointers/tap). Installing from a non-official tap is common for CLI tools but carries moderate risk because taps can include install-time scripts—verify the tap/formula before installing.
Credentials
The skill does not require any credentials or sensitive environment variables. SKILL.md documents optional env vars (CARDPOINTERS_API, CARDPOINTERS_DEBUG, NO_COLOR) that are reasonable for a CLI client; no unexplained SECRET/TOKEN/PASSWORD env vars are requested.
Persistence & Privilege
always is false and the skill does not request persistent platform-wide privileges. It stores/reads its own token at ~/.cardpointers/config (normal for a CLI) and does not attempt to change other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install cardpointers
  3. After installation, invoke the skill by name or use /cardpointers
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
First version of the CardPointers skill with the CLI.
Metadata
Slug cardpointers
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is CardPointers?

Query CardPointers card recommendations, wallet cards, and offers via the CardPointers CLI. Use when the user asks about which credit card to use for a purch... It is an AI Agent Skill for Claude Code / OpenClaw, with 384 downloads so far.

How do I install CardPointers?

Run "/install cardpointers" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is CardPointers free?

Yes, CardPointers is completely free (open-source). You can download, install and use it at no cost.

Which platforms does CardPointers support?

CardPointers is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created CardPointers?

It is built and maintained by Emmanuel Crouvisier (@emcro); the current version is v1.0.0.

💬 Comments