← 返回 Skills 市场
chrischall

Tmp.Qs5EOZDgAo

作者 chrischall · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
85
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zola-mcp
功能描述
This skill should be used when the user asks about Zola wedding planning data. Triggers on phrases like "check Zola", "Zola vendors", "wedding budget", "Zola...
使用说明 (SKILL.md)

zola-mcp

MCP server for Zola — 27 tools for managing your entire wedding via the Zola mobile API.

Setup

Option A — Claude Code (direct MCP)

Add to .mcp.json in your project or ~/.claude/mcp.json:

{
  "mcpServers": {
    "zola": {
      "command": "npx",
      "args": ["-y", "zola-mcp"],
      "env": {
        "ZOLA_REFRESH_TOKEN": "your-refresh-token-jwt"
      }
    }
  }
}

Option B — from source

git clone https://github.com/chrischall/zola-mcp
cd zola-mcp
npm install && npm run build

Getting your refresh token

Run the setup script (one-time, token lasts ~1 year):

npm run auth               # prints the token to the console
npm run auth -- .env       # writes ZOLA_REFRESH_TOKEN=\x3Ctoken> to .env

This launches Chrome with a dedicated profile, waits for you to sign in to zola.com, then captures the usr cookie (a ~1-year JWT). Use the printed value with Claude Desktop / MCPB configs, or the .env form when running from source.

If you'd rather not run Chrome via the script, you can also copy the usr cookie manually from DevTools → Application → Cookies after signing in at zola.com.

Credentials

Env var Required Notes
ZOLA_REFRESH_TOKEN Yes Mobile API JWT refresh token (~1 year lifetime)
ZOLA_ACCOUNT_ID No Auto-resolved from API; optional override
ZOLA_REGISTRY_ID No Auto-resolved from API; optional override

Tools

Vendors (5 tools)

Tool Description
list_vendors List all booked vendors with details
search_vendors Search for vendors by name within a category
add_vendor Book a new vendor
update_vendor Update a booked vendor's details
remove_vendor Unbook a vendor

Budget (2 tools)

Tool Description
get_budget Get wedding budget summary with all items
update_budget_item Update a budget item's cost or note

Guests (4 tools)

Tool Description
list_guests List all guest groups with stats
add_guest Add a new guest group (household)
update_guest_address Update a guest group's mailing address
remove_guest Remove a guest group

Seating (4 tools)

Tool Description
list_seating_charts List all seating charts
get_seating_chart Get chart with tables, seats, and occupants
list_unseated_guests List guests not yet assigned a seat
assign_seat Assign a guest to a specific seat

Inquiries (3 tools)

Tool Description
list_inquiries List all vendor inquiries with status
get_inquiry_conversation Get full conversation for an inquiry
mark_inquiry_read Mark an inquiry conversation as read

Events & RSVPs (3 tools)

Tool Description
list_events List all wedding events with RSVP counts
track_rsvps Get RSVP tracking per event
update_event Update event details (time, venue, dress code)

Registry & Gifts (2 tools)

Tool Description
get_registry View the wedding registry with categories
get_gift_tracker View gifts received, values, thank-you status

Discovery (4 tools)

Tool Description
get_wedding_dashboard Get wedding planning dashboard overview
search_storefronts Search vendor marketplace by category/location
get_storefront Get full vendor storefront details
list_favorites List all favorited/saved vendors

Workflows

  • "How's wedding planning going?"get_wedding_dashboard
  • "Who hasn't RSVP'd?"track_rsvps
  • "Find a photographer in Charlotte"search_storefronts with taxonomy_node_id: 2, city: Charlotte, state: NC
  • "Seat Jennifer at Table 1"list_unseated_guestsget_seating_chartassign_seat
  • "Any new vendor messages?"list_inquiries (filter unread) → get_inquiry_conversation
  • "Update the venue cost to $25,000"get_budgetupdate_budget_item
  • "Add my cousin Mike to the guest list"add_guest

Notes

  • All tools use the Zola mobile API (mobile-api.zola.com) with Bearer JWT auth
  • Account and registry IDs are auto-resolved from the API on first use
  • Refresh token expires after ~1 year; re-run setup-auth.sh to renew
安全使用建议
Use this only if you trust the external zola-mcp package and are comfortable giving it a long-lived Zola token. Before installing, review the source, pin a known version, protect the token like a password, and require the agent to ask before making any changes to your Zola account.
功能分析
Type: OpenClaw Skill Name: zola-mcp Version: 1.1.0 The zola-mcp skill (SKILL.md) manages sensitive wedding data, including guest addresses and budgets, and utilizes a browser-automation script to extract session cookies (JWTs) for authentication. While these capabilities are plausibly needed to interface with the Zola mobile API, the handling of PII and the use of 'npx' for remote execution represent high-risk behaviors under the provided criteria. No clear evidence of intentional malice or prompt injection was found, but the authentication method and broad data access are inherently risky.
能力标签
requires-oauth-tokenrequires-sensitive-credentials
能力评估
Purpose & Capability
The stated purpose matches the listed Zola wedding-planning tools, including vendors, guests, budget, seating, events, RSVPs, registry, and gift tracking.
Instruction Scope
The skill exposes many write/delete actions, such as adding/removing guests and vendors or changing budget and event details, but it does not describe confirmation, rollback, or approval boundaries for those mutations.
Install Mechanism
Although the registry says this is instruction-only with no install spec or code files, SKILL.md directs users to install and run an external npm/GitHub MCP server, including npm scripts not present for review.
Credentials
The integration requires a long-lived Zola refresh token/cookie and can access sensitive wedding account data; this is relevant to the purpose but high-impact and under-declared in the registry credential requirements.
Persistence & Privilege
The token is described as lasting about one year and may be stored in MCP config or a .env file, creating durable delegated access to the user's Zola account.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install zola-mcp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /zola-mcp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
zola-mcp v1.1.0 - Expanded SKILL.md with a comprehensive, user-focused overview and setup instructions. - Clearly documents 27 API tools for Zola wedding planning, covering vendors, budget, guests, seating, events, registry, and more. - Includes detailed authentication guidance, environment variable usage, and real-world workflow examples. - Now easier for users to understand triggers, capabilities, and configuration.
元数据
Slug zola-mcp
版本 1.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Tmp.Qs5EOZDgAo 是什么?

This skill should be used when the user asks about Zola wedding planning data. Triggers on phrases like "check Zola", "Zola vendors", "wedding budget", "Zola... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 85 次。

如何安装 Tmp.Qs5EOZDgAo?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install zola-mcp」即可一键安装,无需额外配置。

Tmp.Qs5EOZDgAo 是免费的吗?

是的,Tmp.Qs5EOZDgAo 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Tmp.Qs5EOZDgAo 支持哪些平台?

Tmp.Qs5EOZDgAo 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Tmp.Qs5EOZDgAo?

由 chrischall(@chrischall)开发并维护,当前版本 v1.1.0。

💬 留言讨论