Sure Finance Skill

This skill provides a reliable workflow to interact with Sure's API.

Scope

Use this skill for:

• - Listing and analyzing accounts, categories, tags, imports, chats, and transactions.
• Creating and updating transactions, tags, chats, and imports.
• Building financial summaries from Sure data.
• Helping users connect self-hosted Sure environments (Docker, compose, external assistant) with API usage.

Do not use this skill for:

• - Guessing undocumented endpoints or request shapes.
• Running destructive operations without explicit user confirmation.
• Fabricating financial figures when the API is unavailable.

Compatibility Contract

Follow these rules strictly to maximize compatibility:

• - The skill is instruction-only. Core runtime actions are limited to curl requests against $SURE_BASE_URL using X-Api-Key.
• Optional self-hosting and external-assistant flows (documented in docs/) may reference additional URLs and env vars. These flows run only when the user explicitly requests them and never during normal API usage.
• Always use plain Markdown. Do not include HTML entities like  .
• Keep shell commands copy-paste ready.
• Use only ASCII in examples unless API data requires otherwise.
• Do not require tools beyond curl for core operations.
• Read credentials only from environment variables.
• Never print API keys or tokens in output.
• Do not instruct reading unrelated local files, keychains, or secret stores.
• If SURE_BASE_URL has no scheme, normalize to http:// before use.
• For all list endpoints, support pagination via page and per_page.
• Provide short, deterministic outputs when users request automation-friendly responses.

Environment Setup

Required variables:

CODEBLOCK0

Optional sensitive variables used only for specific self-hosted or external-assistant scenarios:

CODEBLOCK1

These optional variables are intentionally not listed in metadata.clawdbot.requires.env because the core skill runtime does not require them.
Do not request or provide these optional secrets for normal API usage.
Use them only when the user explicitly asks to run self-hosting or external-assistant validation flows.

Validation check:

CODEBLOCK2

If this fails:

• - Verify the base URL and API key.
• Confirm Sure server is running and reachable.
• If self-hosted with Docker, verify containers are healthy.

Authentication

All requests must include:

CODEBLOCK3

Core API Quick Reference

Accounts

List accounts:

CODEBLOCK4

Categories

List categories:

CODEBLOCK5

Retrieve category:

CODEBLOCK6

Chats

List chats:

CODEBLOCK7

Create chat:

CODEBLOCK8

Retrieve chat:

CODEBLOCK9

Update chat:

CODEBLOCK10

Delete chat:

CODEBLOCK11

Create chat message:

CODEBLOCK12

Retry last assistant response:

CODEBLOCK13

Imports

List imports:

CODEBLOCK14

Create import:

CODEBLOCK15

Retrieve import:

CODEBLOCK16

Tags

List tags:

CODEBLOCK17

Create tag:

CODEBLOCK18

Retrieve tag:

CODEBLOCK19

Update tag:

CODEBLOCK20

Delete tag:

CODEBLOCK21

Transactions

List transactions:

CODEBLOCK22

Create transaction:

CODEBLOCK23

Retrieve transaction:

CODEBLOCK24

Update transaction:

CODEBLOCK25

Delete transaction:

CODEBLOCK26

Recommended Agent Workflow

When asked to perform analytics:

1. 1. List accounts and transactions with pagination.
2. Aggregate monthly totals by category and account.
3. Validate suspicious outliers against raw transactions.
4. Return clear assumptions and confidence level.

When asked to mutate data:

1. 1. Confirm target resource ID and intended change.
2. Execute create or update call.
3. Re-fetch the resource to verify success.
4. Summarize fields changed.

Self-Hosted Sure Notes

Scope note: The commands below fetch compose files from the Sure project repository on GitHub. Review any downloaded file before running docker compose up. These flows are optional and only relevant when the user explicitly requests self-hosting setup.

For Docker-based self-hosting:

• - Official image tags include latest and stable.
• Default local URL is http://localhost:3000.
• API key is generated in Sure account settings.

For AI and external assistant mode:

• - Sure supports external assistant integration.
• Pipelock can proxy and inspect AI and MCP traffic.
• In AI compose mode, external agents should target the Pipelock reverse proxy when applicable.

Error Handling

For HTTP 401 or 403:

• - Verify SURE_API_KEY.
• Confirm the key belongs to the active Sure user.

For HTTP 404:

• - Verify resource ID and base URL.

For HTTP 422:

• - Validate JSON payload shape and enum values.

For network errors:

• - Confirm host reachability.
• If self-hosted, verify docker compose ps status.

Data Safety

• - Treat all finance data as sensitive.
• Do not expose full account numbers or secrets in logs.
• Prefer redacting personally identifiable information in shared outputs.

Additional Files

Use the supporting files in this skill package:

• - INLINECODE17
• INLINECODE18
• INLINECODE19