← Back to Skills Marketplace
6059
Downloads
3
Stars
1
Active Installs
9
Versions
Install in OpenClaw
/install squareup
Description
Square API integration with managed OAuth. Install only if you need Square administration. Connect with the least-privileged Square account and OAuth scopes...
Usage Guidance
Install only if you intend to let an agent administer Square through Maton. Use the least-privileged Square account and OAuth scopes, keep MATON_API_KEY secret, avoid printing the full key in shared outputs, verify the connection ID before requests, and approve each payment, refund, invoice, customer, catalog, inventory, card, terminal, or delete action only after checking the account, resource ID, amount, and consequence.
Capability Analysis
Type: OpenClaw Skill
Name: squareup
Version: 1.0.8
The 'squareup' skill provides a legitimate integration with the Square API via the Maton API gateway (api.maton.ai). It includes comprehensive documentation for managing OAuth connections and interacting with various Square endpoints (Payments, Customers, Orders, etc.). The SKILL.md file contains explicit safety instructions for the AI agent, such as requiring user confirmation for write operations and protecting the MATON_API_KEY environment variable. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.
Capability Assessment
Purpose & Capability
The stated purpose is Square administration through Maton-managed OAuth, and the documented capabilities include high-impact actions such as payments, refunds, invoices, customer updates, catalog changes, cards, bank accounts, and terminal checkouts.
Instruction Scope
The instructions disclose the API gateway, require documented endpoint paths, recommend read-only verification first, and require explicit user approval with exact identifiers and consequences before POST, PUT, or DELETE operations.
Install Mechanism
The artifact is an instruction-only Markdown skill with no executable scripts, dependencies, or automatic install-time behavior; it declares the required MATON_API_KEY environment variable.
Credentials
Network access to api.maton.ai and use of MATON_API_KEY are proportionate to the OAuth gateway design, but Square data and actions are routed through a third-party service.
Persistence & Privilege
The skill supports persistent Square OAuth connection creation and deletion, which is expected for managed OAuth and is paired with least-privilege and revocation guidance.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install squareup - After installation, invoke the skill by name or use
/squareup - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.8
squareup 1.0.8
- Refined security and approval language to clarify that this integration mutates Square data, and emphasize explicit approval for each write action.
- Shortened and clarified the description and introductory notes for easier reading.
- Trimmed detailed feature lists in the introduction; now directs users to the API Reference for supported endpoints.
- Strengthened language on least-privilege, account selection, and resource verification before write operations.
- No functional changes to API endpoints or usage.
v1.0.7
- Clarified the base URL usage to ensure only documented API endpoints are supported—arbitrary endpoint paths are no longer accepted.
- Added a prominent security note under Authentication emphasizing the importance of treating the API key as a secret and including rotation instructions.
- Updated the proxy description to clarify request flow and endpoint restrictions.
- No functional or code changes; documentation only.
v1.0.6
- Clarified and strengthened the description with more direct security and usage guidance.
- Emphasized that all write operations require explicit user approval, showing the exact endpoint, resource, and consequences.
- Recommended using the least-privileged Square account/scopes and verifying connection IDs before each request.
- Streamlined language for admin-focused installation and advised promptly revoking unused connections.
- No changes to API endpoints or functionality.
v1.0.5
- Clarified that this skill has write capability for Square business data, including financial and operational actions.
- Updated description and security section to emphasize explicit user approval is required for all create, update, and delete operations, with verification of specific resources and effects.
- Enhanced guidance to default to read-only actions, requiring confirmation and summary of consequences before performing sensitive operations.
- Warned about the breadth of account access, urging least-privilege and prompt OAuth revocation when not needed.
- No changes to API endpoints or core functionality.
v1.0.4
- Switched all documentation and API endpoints from gateway.maton.ai/ctrl.maton.ai to api.maton.ai.
- Updated instructions for connection management and quick start to use the new api.maton.ai URLs.
- Clarified usage of the Maton-Connection header and recommended always including it when multiple Square connections exist.
- Added a new Security & Permissions section with guidance on user approval for write operations.
- Removed the LICENSE.txt file.
v1.0.3
- Expanded description to include support for loyalty programs, team members, and payment links.
- Updated usage guidance to reflect new Square API capabilities.
- No code changes; documentation only.
v1.0.2
- Added metadata field for "clawdbot" specifying an emoji and required environment variable.
- Now explicitly documents that MATON_API_KEY must be set as an environment variable.
- No changes to functionality or API; documentation and metadata update only.
v1.0.1
- No user-facing changes in this version.
- Internal SKILL.md file was updated only; there are no functional or documentation changes visible to users.
v1.0.0
Initial release of Square API integration skill.
- Provides access to Square API for payments, customers, orders, catalog, inventory, and invoices.
- Supports managed OAuth authentication and connection management via Maton.
- Includes sample code for Python to list locations and manage OAuth connections.
- Covers usage of the Maton API key and specifying active Square connections.
- Detailed API reference for common Square endpoints and operations.
- Designed for point-of-sale, payment processing, inventory, and invoicing workflows through Square.
Metadata
Frequently Asked Questions
What is Square?
Square API integration with managed OAuth. Install only if you need Square administration. Connect with the least-privileged Square account and OAuth scopes... It is an AI Agent Skill for Claude Code / OpenClaw, with 6059 downloads so far.
How do I install Square?
Run "/install squareup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Square free?
Yes, Square is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Square support?
Square is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Square?
It is built and maintained by byungkyu (@byungkyu); the current version is v1.0.8.
More Skills