← 返回 Skills 市场
chrischall

Tmp.QxTMN6G9ww

作者 chrischall · GitHub ↗ · v2.0.7 · MIT-0
cross-platform ⚠ suspicious
168
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install creditkarma-mcp
功能描述
Access Credit Karma transaction data via MCP. Use when the user asks about their Credit Karma transactions, spending by category or merchant, account summari...
使用说明 (SKILL.md)

creditkarma-mcp

MCP server for Credit Karma — syncs transactions into a local SQLite database and provides natural-language querying tools.

Setup

Option A — npx (recommended)

Add to .mcp.json in your project or ~/.claude/mcp.json:

{
  "mcpServers": {
    "creditkarma": {
      "command": "npx",
      "args": ["-y", "creditkarma-mcp"],
      "env": {
        "CK_COOKIES": "CKTRKID=...; CKAT=eyJ...%3BeyJ...; ..."
      }
    }
  }
}

Option B — from source

git clone https://github.com/chrischall/creditkarma-mcp
cd creditkarma-mcp
npm install && npm run build

Then add to .mcp.json:

{
  "mcpServers": {
    "creditkarma": {
      "command": "node",
      "args": ["/path/to/creditkarma-mcp/dist/index.js"],
      "env": {
        "CK_COOKIES": "CKTRKID=...; CKAT=eyJ...%3BeyJ...; ..."
      }
    }
  }
}

Or use a .env file in the project directory with CK_COOKIES=\x3Cvalue>.

Getting CK_COOKIES

Scripted (recommended — source install):

npm run auth               # prints the Cookie header to the console
npm run auth -- .env       # writes CK_COOKIES=\x3Cheader> to .env

Launches Chrome with a dedicated profile, waits for sign-in at creditkarma.com, then captures the full session Cookie header (CKAT carries the access + refresh JWTs; CKTRKID and friends are needed by the refresh endpoint). Use the printed value with Claude Desktop / MCPB, or the .env form when running from source.

Manual (DevTools):

  1. Log in to creditkarma.com in Chrome
  2. DevTools → Network → any creditkarma.com request → Request Headers
  3. Right-click the cookie header → Copy value

Authentication

Call ck_set_session with your Cookie header to store credentials and enable auto-refresh.

  • Access token: ~15 min TTL, auto-refreshed transparently
  • Refresh token: ~8 hours TTL
  • When expired: re-run npm run auth (or grab a fresh Cookie header) and call ck_set_session

Tools

Auth

Tool Description
ck_set_session(cookies) Store credentials — paste the full Cookie header from a signed-in creditkarma.com request

Sync

Tool Description
ck_sync_transactions(force_full?) Sync transactions to local SQLite. Incremental by default (since last sync − 30 days). force_full=true re-fetches everything.

Query

Tool Description
ck_list_transactions(start_date?, end_date?, account?, category?, merchant?, status?, min_amount?, max_amount?, limit?, offset?) Filtered, paginated transaction list
ck_get_recent_transactions(limit?) N most recent transactions (default 20)
ck_get_spending_by_category(start_date?, end_date?) Spending totals grouped by category
ck_get_spending_by_merchant(start_date?, end_date?, limit?) Spending totals grouped by merchant
ck_get_account_summary Transaction counts and totals per account
ck_query_sql(sql) Read-only SQL query against the local database (SELECT only)

Workflows

First-time setup:

  1. Run npm run auth (or grab the Cookie header manually from a creditkarma.com request in DevTools)
  2. Paste into CK_COOKIES env var, or call ck_set_session(cookies) from within Claude
  3. ck_sync_transactions → initial full sync

Regular use:

  • ck_sync_transactions → pull latest transactions
  • Then query with any of the query tools

Spending analysis:

ck_sync_transactions
ck_get_spending_by_category(start_date: "2026-01-01", end_date: "2026-03-31")
ck_get_spending_by_merchant(start_date: "2026-01-01", limit: 10)

Custom analysis with SQL:

-- Monthly spending totals
SELECT strftime('%Y-%m', date) AS month, SUM(ABS(amount)) AS total
FROM transactions WHERE amount \x3C 0
GROUP BY month ORDER BY month DESC

-- Spending by category this year
SELECT c.name, SUM(ABS(t.amount)) AS total
FROM transactions t JOIN categories c ON t.category_id = c.id
WHERE t.date >= '2026-01-01' AND t.amount \x3C 0
GROUP BY c.name ORDER BY total DESC

Database schema

transactions (id, date, description, status, amount, account_id, category_id, merchant_id, raw_json)
accounts     (id, name, type, provider_name, display)
categories   (id, name, type)
merchants    (id, name)
sync_state   (key, value)

Notes

  • All query tools run against the local SQLite database — sync first
  • Amounts: negative = expense/debit, positive = credit/income
  • ck_query_sql only allows SELECT — no writes to Credit Karma data
  • Sync saves a resume cursor — interrupted syncs can be resumed automatically
安全使用建议
Review this carefully before installing. It may be useful for Credit Karma spending analysis, but only use it if you trust the external creditkarma-mcp package with your logged-in Credit Karma session and are comfortable storing detailed financial transactions on your local machine.
功能分析
Type: OpenClaw Skill Name: creditkarma-mcp Version: 2.0.7 The skill requires users to provide highly sensitive Credit Karma session cookies (`CK_COOKIES`) and includes a script (`npm run auth`) to capture them via a browser profile, as documented in SKILL.md. While the stated purpose is local financial analysis, the handling of full session tokens and the execution of an external npm package (creditkarma-mcp) pose a significant risk of credential theft or data exfiltration if the package is compromised.
能力标签
requires-oauth-tokenrequires-sensitive-credentials
能力评估
Purpose & Capability
The described tools and workflows are coherent with Credit Karma transaction syncing and spending analysis, but the purpose inherently involves sensitive personal financial data.
Instruction Scope
The instructions ask for a full Credit Karma Cookie header containing access and refresh tokens and store it for auto-refresh, without showing a scoped credential boundary or a clear credential-clearing process.
Install Mechanism
This is an instruction-only skill that tells users to run an external npm/MCP package via unpinned npx or build from source; the reviewed artifacts do not include that runnable code.
Credentials
Registry requirements declare no env vars or primary credential, while SKILL.md instructs use of CK_COOKIES containing a logged-in Credit Karma session.
Persistence & Privilege
The skill stores credentials for refresh and syncs transaction data, including raw JSON, into a local SQLite database without specifying database location, retention, encryption, or cleanup.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install creditkarma-mcp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /creditkarma-mcp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.7
- No user-facing changes in this release. - Documentation and configuration remain unchanged.
v2.0.6
- Clarified that the full session Cookie header (including CKAT, CKTRKID, etc.) is now required for authentication, not just CKAT. - Updated setup, authentication, and environment variable instructions to reference the full Cookie header format. - Revised auth workflow and tool documentation to emphasize use of the complete cookie string from browser requests. - Provided updated steps for extracting the session cookie via browser DevTools and the provided script. - Cleaned up language and examples throughout to match the new cookie requirements.
v2.0.5
- Added comprehensive setup and usage instructions for accessing Credit Karma transaction data via MCP. - Clarified authentication flow, including how to obtain and store CK_COOKIES. - Listed all available tools for syncing, querying, and managing transaction data. - Provided example workflows for common financial queries and custom analysis. - Included details about the local database schema and important usage notes.
元数据
Slug creditkarma-mcp
版本 2.0.7
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Tmp.QxTMN6G9ww 是什么?

Access Credit Karma transaction data via MCP. Use when the user asks about their Credit Karma transactions, spending by category or merchant, account summari... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 168 次。

如何安装 Tmp.QxTMN6G9ww?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install creditkarma-mcp」即可一键安装,无需额外配置。

Tmp.QxTMN6G9ww 是免费的吗?

是的,Tmp.QxTMN6G9ww 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Tmp.QxTMN6G9ww 支持哪些平台?

Tmp.QxTMN6G9ww 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Tmp.QxTMN6G9ww?

由 chrischall(@chrischall)开发并维护,当前版本 v2.0.7。

💬 留言讨论