← Back to Skills Marketplace
chrischall

Tmp.QxTMN6G9ww

by chrischall · GitHub ↗ · v2.0.7 · MIT-0
cross-platform ⚠ suspicious
168
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install creditkarma-mcp
Description
Access Credit Karma transaction data via MCP. Use when the user asks about their Credit Karma transactions, spending by category or merchant, account summari...
README (SKILL.md)

creditkarma-mcp

MCP server for Credit Karma — syncs transactions into a local SQLite database and provides natural-language querying tools.

Setup

Option A — npx (recommended)

Add to .mcp.json in your project or ~/.claude/mcp.json:

{
  "mcpServers": {
    "creditkarma": {
      "command": "npx",
      "args": ["-y", "creditkarma-mcp"],
      "env": {
        "CK_COOKIES": "CKTRKID=...; CKAT=eyJ...%3BeyJ...; ..."
      }
    }
  }
}

Option B — from source

git clone https://github.com/chrischall/creditkarma-mcp
cd creditkarma-mcp
npm install && npm run build

Then add to .mcp.json:

{
  "mcpServers": {
    "creditkarma": {
      "command": "node",
      "args": ["/path/to/creditkarma-mcp/dist/index.js"],
      "env": {
        "CK_COOKIES": "CKTRKID=...; CKAT=eyJ...%3BeyJ...; ..."
      }
    }
  }
}

Or use a .env file in the project directory with CK_COOKIES=\x3Cvalue>.

Getting CK_COOKIES

Scripted (recommended — source install):

npm run auth               # prints the Cookie header to the console
npm run auth -- .env       # writes CK_COOKIES=\x3Cheader> to .env

Launches Chrome with a dedicated profile, waits for sign-in at creditkarma.com, then captures the full session Cookie header (CKAT carries the access + refresh JWTs; CKTRKID and friends are needed by the refresh endpoint). Use the printed value with Claude Desktop / MCPB, or the .env form when running from source.

Manual (DevTools):

  1. Log in to creditkarma.com in Chrome
  2. DevTools → Network → any creditkarma.com request → Request Headers
  3. Right-click the cookie header → Copy value

Authentication

Call ck_set_session with your Cookie header to store credentials and enable auto-refresh.

  • Access token: ~15 min TTL, auto-refreshed transparently
  • Refresh token: ~8 hours TTL
  • When expired: re-run npm run auth (or grab a fresh Cookie header) and call ck_set_session

Tools

Auth

Tool Description
ck_set_session(cookies) Store credentials — paste the full Cookie header from a signed-in creditkarma.com request

Sync

Tool Description
ck_sync_transactions(force_full?) Sync transactions to local SQLite. Incremental by default (since last sync − 30 days). force_full=true re-fetches everything.

Query

Tool Description
ck_list_transactions(start_date?, end_date?, account?, category?, merchant?, status?, min_amount?, max_amount?, limit?, offset?) Filtered, paginated transaction list
ck_get_recent_transactions(limit?) N most recent transactions (default 20)
ck_get_spending_by_category(start_date?, end_date?) Spending totals grouped by category
ck_get_spending_by_merchant(start_date?, end_date?, limit?) Spending totals grouped by merchant
ck_get_account_summary Transaction counts and totals per account
ck_query_sql(sql) Read-only SQL query against the local database (SELECT only)

Workflows

First-time setup:

  1. Run npm run auth (or grab the Cookie header manually from a creditkarma.com request in DevTools)
  2. Paste into CK_COOKIES env var, or call ck_set_session(cookies) from within Claude
  3. ck_sync_transactions → initial full sync

Regular use:

  • ck_sync_transactions → pull latest transactions
  • Then query with any of the query tools

Spending analysis:

ck_sync_transactions
ck_get_spending_by_category(start_date: "2026-01-01", end_date: "2026-03-31")
ck_get_spending_by_merchant(start_date: "2026-01-01", limit: 10)

Custom analysis with SQL:

-- Monthly spending totals
SELECT strftime('%Y-%m', date) AS month, SUM(ABS(amount)) AS total
FROM transactions WHERE amount \x3C 0
GROUP BY month ORDER BY month DESC

-- Spending by category this year
SELECT c.name, SUM(ABS(t.amount)) AS total
FROM transactions t JOIN categories c ON t.category_id = c.id
WHERE t.date >= '2026-01-01' AND t.amount \x3C 0
GROUP BY c.name ORDER BY total DESC

Database schema

transactions (id, date, description, status, amount, account_id, category_id, merchant_id, raw_json)
accounts     (id, name, type, provider_name, display)
categories   (id, name, type)
merchants    (id, name)
sync_state   (key, value)

Notes

  • All query tools run against the local SQLite database — sync first
  • Amounts: negative = expense/debit, positive = credit/income
  • ck_query_sql only allows SELECT — no writes to Credit Karma data
  • Sync saves a resume cursor — interrupted syncs can be resumed automatically
Usage Guidance
Review this carefully before installing. It may be useful for Credit Karma spending analysis, but only use it if you trust the external creditkarma-mcp package with your logged-in Credit Karma session and are comfortable storing detailed financial transactions on your local machine.
Capability Analysis
Type: OpenClaw Skill Name: creditkarma-mcp Version: 2.0.7 The skill requires users to provide highly sensitive Credit Karma session cookies (`CK_COOKIES`) and includes a script (`npm run auth`) to capture them via a browser profile, as documented in SKILL.md. While the stated purpose is local financial analysis, the handling of full session tokens and the execution of an external npm package (creditkarma-mcp) pose a significant risk of credential theft or data exfiltration if the package is compromised.
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The described tools and workflows are coherent with Credit Karma transaction syncing and spending analysis, but the purpose inherently involves sensitive personal financial data.
Instruction Scope
The instructions ask for a full Credit Karma Cookie header containing access and refresh tokens and store it for auto-refresh, without showing a scoped credential boundary or a clear credential-clearing process.
Install Mechanism
This is an instruction-only skill that tells users to run an external npm/MCP package via unpinned npx or build from source; the reviewed artifacts do not include that runnable code.
Credentials
Registry requirements declare no env vars or primary credential, while SKILL.md instructs use of CK_COOKIES containing a logged-in Credit Karma session.
Persistence & Privilege
The skill stores credentials for refresh and syncs transaction data, including raw JSON, into a local SQLite database without specifying database location, retention, encryption, or cleanup.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install creditkarma-mcp
  3. After installation, invoke the skill by name or use /creditkarma-mcp
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.7
- No user-facing changes in this release. - Documentation and configuration remain unchanged.
v2.0.6
- Clarified that the full session Cookie header (including CKAT, CKTRKID, etc.) is now required for authentication, not just CKAT. - Updated setup, authentication, and environment variable instructions to reference the full Cookie header format. - Revised auth workflow and tool documentation to emphasize use of the complete cookie string from browser requests. - Provided updated steps for extracting the session cookie via browser DevTools and the provided script. - Cleaned up language and examples throughout to match the new cookie requirements.
v2.0.5
- Added comprehensive setup and usage instructions for accessing Credit Karma transaction data via MCP. - Clarified authentication flow, including how to obtain and store CK_COOKIES. - Listed all available tools for syncing, querying, and managing transaction data. - Provided example workflows for common financial queries and custom analysis. - Included details about the local database schema and important usage notes.
Metadata
Slug creditkarma-mcp
Version 2.0.7
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Tmp.QxTMN6G9ww?

Access Credit Karma transaction data via MCP. Use when the user asks about their Credit Karma transactions, spending by category or merchant, account summari... It is an AI Agent Skill for Claude Code / OpenClaw, with 168 downloads so far.

How do I install Tmp.QxTMN6G9ww?

Run "/install creditkarma-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Tmp.QxTMN6G9ww free?

Yes, Tmp.QxTMN6G9ww is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Tmp.QxTMN6G9ww support?

Tmp.QxTMN6G9ww is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Tmp.QxTMN6G9ww?

It is built and maintained by chrischall (@chrischall); the current version is v2.0.7.

💬 Comments