QuickBooks Online Integration
hewi333/Mom-n-Pop-Skills
Connects a small business to QuickBooks Online for customers, estimates, invoices and payments, using Intuit OAuth 2.0 with token refresh and sandbox or production setups.
Creates, updates, and monitors Privacy.com virtual payment cards with spending limits for an agent making controlled purchases.
$ npx skills add dylanfeltus/skills --skill privacy-cards -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install dylanfeltus/skills privacy-cards --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/dylanfeltus/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/privacy-cards .claude/skills/privacy-cards && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "privacy-cards" agent skill from https://github.com/dylanfeltus/skills/tree/main/privacy-cards into .claude/skills/privacy-cards/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "privacy-cards", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/dylanfeltus/skills/tree/main/privacy-cardsType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add dylanfeltus/skills --skill privacy-cards -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install dylanfeltus/skills privacy-cards --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dylanfeltus/skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/privacy-cards .agents/skills/privacy-cards && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "privacy-cards" agent skill from https://github.com/dylanfeltus/skills/tree/main/privacy-cards into .agents/skills/privacy-cards/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "privacy-cards", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add dylanfeltus/skills --skill privacy-cards -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install dylanfeltus/skills privacy-cards --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dylanfeltus/skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/privacy-cards .cursor/skills/privacy-cards && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "privacy-cards" agent skill from https://github.com/dylanfeltus/skills/tree/main/privacy-cards into .cursor/skills/privacy-cards/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "privacy-cards", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/dylanfeltus/skills.git --path privacy-cards--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add dylanfeltus/skills --skill privacy-cards -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install dylanfeltus/skills privacy-cards --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dylanfeltus/skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/privacy-cards .gemini/skills/privacy-cards && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "privacy-cards" agent skill from https://github.com/dylanfeltus/skills/tree/main/privacy-cards into .gemini/skills/privacy-cards/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "privacy-cards", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install dylanfeltus/skills privacy-cardsInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add dylanfeltus/skills --skill privacy-cards -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/dylanfeltus/skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/privacy-cards .github/skills/privacy-cards && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "privacy-cards" agent skill from https://github.com/dylanfeltus/skills/tree/main/privacy-cards into .github/skills/privacy-cards/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "privacy-cards", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add dylanfeltus/skills --skill privacy-cards -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install dylanfeltus/skills privacy-cards --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/dylanfeltus/skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/privacy-cards .opencode/skills/privacy-cards && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "privacy-cards" agent skill from https://github.com/dylanfeltus/skills/tree/main/privacy-cards into .opencode/skills/privacy-cards/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "privacy-cards", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
privacy-cardsCreates, updates, and monitors Privacy.com virtual payment cards with spending limits for an agent making controlled purchases.
A single Privacy.com API, reached with an API key, backs the whole skill: creating a single-use, merchant-locked, or digital-wallet card with an optional spend limit and duration, updating a card's state or limit afterward, and listing cards or their recent transactions. A sandbox base URL is available for testing separately from the production API, and closing a card is explicitly permanent.
6 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit b97a48f. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
curlpython3From the folder's file list and the shell code blocks in SKILL.md.
Hosts in commands or code, which the agent is likely to contact:
api.privacy.comsandbox.privacy.comAlso links to:
privacy-com.readme.ioFrom URLs in SKILL.md, links to its own repository left out.
Names these keys or tokens, usually read from environment variables:
PRIVACY_API_KEYCARD_TOKENFrom names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Privacy.com Virtual Cards loads about 2.2k tokens when it runs. Until then it costs about 62 tokens; SKILL.md has 749 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from dylanfeltus/skills at commit b97a48f, republished under its MIT licence (© dylanfeltus). 749 words, ~2,213 tokens.
.claude/skills/privacy-cards/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.Create, manage, and monitor virtual cards via the Privacy.com API. Designed for AI agents that need to make purchases with controlled spending limits.
Requires the PRIVACY_API_KEY environment variable. Get an API key from your Privacy.com account settings.
Plans and card limits:
Sandbox: Use https://sandbox.privacy.com/v1 for testing. Production: https://api.privacy.com/v1.
Base URL: https://api.privacy.com/v1
Auth Header: Authorization: api-key YOUR_API_KEY
Content-Type: application/json
All monetary amounts are in cents (e.g., $25.00 = 2500).
POST https://api.privacy.com/v1/cards
{
"type": "SINGLE_USE",
"memo": "Domain purchase - example.com",
"spend_limit": 2500,
"spend_limit_duration": "TRANSACTION",
"state": "OPEN"
}Parameters:
| Field | Required | Description |
|---|---|---|
type | Yes | SINGLE_USE (auto-closes after one charge), MERCHANT_LOCKED (locks to first merchant), DIGITAL_WALLET (Apple/Google Pay) |
memo | No | Label for the card (what it's for) |
spend_limit | No | Max spend in cents. Must be whole dollars (e.g., 2500 not 2550) |
spend_limit_duration | No | TRANSACTION (per charge), MONTHLY, ANNUALLY, FOREVER |
state | No | OPEN (ready to use) or PAUSED |
exp_month | No | Two-digit expiry month (auto-generated if omitted) |
exp_year | No | Four-digit expiry year (auto-generated if omitted) |
Response includes: pan (16-digit card number), cvv, exp_month, exp_year, token (card ID), last_four.
PATCH https://api.privacy.com/v1/cards/{card_token}
{
"state": "PAUSED",
"spend_limit": 5000,
"memo": "Updated memo"
}Can update: state, memo, spend_limit, spend_limit_duration, funding_token.
Setting state to CLOSED is permanent and cannot be undone.
GET https://api.privacy.com/v1/cards/{card_token}
GET https://api.privacy.com/v1/cards
GET https://api.privacy.com/v1/cards?begin=2024-01-01&end=2024-12-31&page=1&page_size=50Query parameters: begin, end (date filters), page, page_size (pagination).
GET https://api.privacy.com/v1/transactions?card_token={token}&result=APPROVED&page=1&page_size=50Query parameters:
| Field | Description |
|---|---|
card_token | Filter by card |
result | APPROVED or decline reason |
page | Page number (1-indexed) |
page_size | Results per page |
begin | Start date (YYYY-MM-DD) |
end | End date (YYYY-MM-DD) |
Transaction statuses: PENDING, SETTLING, SETTLED, VOIDED, BOUNCED, DECLINED
SINGLE_USEMERCHANT_LOCKED# Create card and extract only safe fields for logging
RESPONSE=$(curl -s https://api.privacy.com/v1/cards \
-X POST \
-H "Authorization: api-key $PRIVACY_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"type": "SINGLE_USE",
"memo": "Purpose of purchase",
"spend_limit": AMOUNT_IN_CENTS,
"spend_limit_duration": "TRANSACTION",
"state": "OPEN"
}')
# Log only safe fields (no PAN/CVV)
echo "$RESPONSE" | python3 -c "
import sys, json
card = json.load(sys.stdin)
print(json.dumps({
'token': card.get('token'),
'last_four': card.get('last_four'),
'exp_month': card.get('exp_month'),
'exp_year': card.get('exp_year'),
'spend_limit': card.get('spend_limit'),
'state': card.get('state'),
'memo': card.get('memo')
}, indent=2))
"# Extract card details for checkout (DO NOT print to chat)
PAN=$(echo "$RESPONSE" | python3 -c "import sys,json; print(json.load(sys.stdin)['pan'])")
CVV=$(echo "$RESPONSE" | python3 -c "import sys,json; print(json.load(sys.stdin)['cvv'])")
EXP_MONTH=$(echo "$RESPONSE" | python3 -c "import sys,json; print(json.load(sys.stdin)['exp_month'])")
EXP_YEAR=$(echo "$RESPONSE" | python3 -c "import sys,json; print(json.load(sys.stdin)['exp_year'])")curl -s https://api.privacy.com/v1/cards/CARD_TOKEN \
-H "Authorization: api-key $PRIVACY_API_KEY"curl -s https://api.privacy.com/v1/cards/CARD_TOKEN \
-X PATCH \
-H "Authorization: api-key $PRIVACY_API_KEY" \
-H "Content-Type: application/json" \
-d '{"state": "PAUSED"}'curl -s https://api.privacy.com/v1/cards/CARD_TOKEN \
-X PATCH \
-H "Authorization: api-key $PRIVACY_API_KEY" \
-H "Content-Type: application/json" \
-d '{"state": "CLOSED"}'curl -s "https://api.privacy.com/v1/transactions?page=1&page_size=10" \
-H "Authorization: api-key $PRIVACY_API_KEY"SINGLE_USE by default. Only use MERCHANT_LOCKED if explicitly needed for recurring charges.SINGLE_USE cards auto-close, but MERCHANT_LOCKED cards stay open. Close them when no longer needed.When creating a card, report to the user:
Created Privacy.com card (****1234)
Type: Single-use
Limit: $25.00
Memo: Domain purchase - example.com
Status: Ready to useWhen listing transactions:
Recent transactions:
1. $12.99 at NAMECHEAP.COM - SETTLED (Jan 15, 2024)
Card: ****1234 (Domain purchase)
2. $49.00 at GITHUB.COM - PENDING (Jan 14, 2024)
Card: ****5678 (GitHub Pro subscription)PRIVACY_API_KEY env var.For testing without real money, use the sandbox environment:
https://sandbox.privacy.com/v1POST https://sandbox.privacy.com/v1/simulate/authorize and POST https://sandbox.privacy.com/v1/simulate/clearingPrivacy.com Developer API - RESTful API, requires API key from a Privacy.com account.
© dylanfeltus, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file in privacy-cards of dylanfeltus/skills.
Open the folder on GitHubat commit b97a48f
Privacy.com Virtual Cards next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Privacy.com Virtual Cards this skilldylanfeltus/skills | 179 | — | ~2.2k | Automated safety check: Pass | MIT | |
| QuickBooks Online Integrationhewi333/Mom-n-Pop-Skills | 122 | — | ~1.9k | Automated safety check: Pass | MIT | |
| PayRam Payment AnalyticsPayRam/payram-mcp | 158 | — | ~4.1k | Automated safety check: Pass | None | |
| Billing Automationwshobson/agents | 40k | 13 repos | ~473 | Automated safety check: Pass | MIT | |
| Stripe Best Practicesfossasia/eventyay | 1.7k | 1 repos | ~1.7k | Automated safety check: Pass | Apache-2.0 | |
| Pinme Uniwebpayglitternetwork/pinme | 3.8k | — | ~7.3k | Automated safety check: Pass | MIT |
hewi333/Mom-n-Pop-Skills
Connects a small business to QuickBooks Online for customers, estimates, invoices and payments, using Intuit OAuth 2.0 with token refresh and sandbox or production setups.
PayRam/payram-mcp
Queries a PayRam server's dashboard data through its REST APIs with a Bearer token: payment search, daily volume, unswept balances, sweep history and on-ramp metrics.
wshobson/agents
Covers building subscription billing: billing cycles, subscription states, invoice generation, proration, tax handling and dunning for failed payments.
fossasia/eventyay
Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents)…
glitternetwork/pinme
A skill your agent uses when generating, modifying, or reviewing PinMe Worker (Cloudflare Worker TypeScript) code that accepts payments through UniwebPay — payment links, products/prices, checkout…
aws/agent-toolkit-for-aws
Deploys, queries, and debugs AWS Marketplace usage-based (PAYG) metering — the pipeline (ResolveCustomer, BatchMeterUsage, EventBridge via SAM) and querying/debugging metering records, statuses…
dylanfeltus/skills
Looks up app details, ratings and reviews and searches the iOS and Mac App Stores through Apple's free iTunes APIs, with a web-search fallback for Google Play.
dylanfeltus/skills
Gives prompt templates, a model-selection guide and anti-generic rules for AI-generated visuals: hero images, feature illustrations, OG cards, icons and backgrounds.
dylanfeltus/skills
Generates type scales, color palettes, spacing systems, WCAG contrast checks and dark mode palettes from formulas, as CSS custom properties, a Tailwind config or JSON tokens.
dylanfeltus/skills
Searches and monitors Hacker News stories, comments and users through the free Algolia HN Search API, with tag, points and date filters.
dylanfeltus/skills
Framer Motion (Motion) patterns for React: spring presets, staggers, layout animations, micro-interactions, scroll effects and page transitions, with performance rules.
dylanfeltus/skills
Looks up Product Hunt launches, products and makers through its GraphQL API: daily top posts, topic browsing and per-post details, using a free developer token.
Categories
Creates, updates, and monitors Privacy.com virtual payment cards with spending limits for an agent making controlled purchases. com API, reached with an API key, backs the whole skill: creating a single-use, merchant-locked, or digital-wallet card with an optional spend limit and duration, updating a card's state or limit afterward, and listing cards or their recent transactions. A sandbox base URL is available for testing separately from the production API, and closing a card is explicitly permanent.
Privacy.com Virtual Cards fits situations like: setting up a spend-limited card for one specific purchase; checking a card's status or recent transactions; pausing or permanently closing a virtual card.
Run `npx skills add dylanfeltus/skills --skill privacy-cards -a claude-code`. Or copy the skill folder (privacy-cards in dylanfeltus/skills) into .claude/skills/privacy-cards in your project. Claude Code loads it when a task matches its description.
Run `npx skills add dylanfeltus/skills --skill privacy-cards -a codex`. Or copy the skill folder (privacy-cards in dylanfeltus/skills) into .agents/skills/privacy-cards in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add dylanfeltus/skills --skill privacy-cards -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/privacy-cards, .gemini/skills/privacy-cards, .github/skills/privacy-cards and .opencode/skills/privacy-cards in your project.
Going by SKILL.md and its folder, Privacy.com Virtual Cards needs the command-line tools its instructions call (curl and python3) and credentials named PRIVACY_API_KEY and CARD_TOKEN. Our summary lists: A Privacy.com account and API key (`PRIVACY_API_KEY`).
SKILL.md names 3 domains. In commands or code: api.privacy.com and sandbox.privacy.com; the agent is likely to contact these when it follows the instructions. As links in the text: privacy-com.readme.io. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Privacy.com Virtual Cards is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 2.2k tokens (SKILL.md is roughly 8.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Privacy.com Virtual Cards: QuickBooks Online Integration (hewi333/Mom-n-Pop-Skills, 122 stars), PayRam Payment Analytics (PayRam/payram-mcp, 158 stars), Billing Automation (wshobson/agents, 40k stars) and Stripe Best Practices (fossasia/eventyay, 1.7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
dylanfeltus (a GitHub user) maintains it in dylanfeltus/skills, which has 179 GitHub stars. The repository holds 10 skills in this directory. The repository was last updated on September 17, 2026.
Source: dylanfeltus/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.