McMates

Before you start: read this whole install prompt, tell me in a few lines what this skill does and what installing it involves, and wait for my go-ahead before you do anything else. Prerequisites: Account and token required before any real use: a McDonald's China MCP token. The listing is free, and activating the token is described upstream as free. Get the token yourself, in person, because it needs mobile phone number verification: go to https://open.mcd.cn/mcp , sign in with your mobile phone number, open the console at the top right, click Activate, agree to the service agreement, and copy the token. Then configure the McDonald's China MCP server: name mcd-mcp, type streamablehttp, URL https://mcp.mcd.cn , header Authorization: Bearer <your token>, or set the MCD_MCP_TOKEN environment variable where the skill reads it that way. Keep the token only in your own private client configuration or environment: never commit it, never share it, and never paste it into a shared chat. Upstream states a limit of 600 requests per minute per token (429 above that). This skill has no code and no software of its own to install: it is one SKILL.md instruction file plus local data files (data/memory.json and the daily price snapshots under data/snapshots/), used through any MCP client that can run the mcd-mcp connector. The token is read from the MCD_MCP_TOKEN environment variable and, per the SKILL.md red lines, is never written into a file or a conversation. Install "McMates" for me. It answers a McDonald's China craving with one single priced recommendation plus two memory based backups, keeps a local memory of your orders in the skill folder, and adds one Big Mac price fact a day from its own local price snapshots. Repository: https://github.com/zhuxian518/mcd-1024-skill (the skill is the whole repository at the pinned commit, SKILL.md at its root: 11 files, listed in the fingerprints below) Pinned version: install the code at commit 8a059dc7a417bdf1e63fcdf9d149f838b8d56caa exactly. Do not substitute a newer version. If this commit is unreachable, stop and tell me. 1. Clone https://github.com/zhuxian518/mcd-1024-skill into a temporary folder, check out commit 8a059dc7a417bdf1e63fcdf9d149f838b8d56caa, and and copy the whole repository folder from that checkout, excluding the .git folder. Then compare every file in the folder with the fingerprints recorded for this listing on 2026-10-18: [FINGERPRINTS] - .gitignore: SHA-256 720ad80501a211a6dad6dbef5376c489899bc6260e8e48ea57e1b2a48b5957d4 - CONTEST_DECLARATION.md: SHA-256 cd28101bcb29cc8fb24b372fe91ce6b42c4a1487a54e01f7ade0c8c6a84241b7 - LICENSE: SHA-256 c01f3ff6adb0974b08db540c339fab3a29444eac7e412bf43d85f7a52eb85757 - MCP_INTEGRATION.md: SHA-256 0fb6e11ea8cfeed5c8470db47a79a5617f2b8d3d6597c8eb586b53d884352ea3 - README.md: SHA-256 961eafd3afc2e5dac759489abeebdef3c109a4a69228b65f81c3cfcc759e78d4 - SKILL.md: SHA-256 cdd194bb57522f05269278339f0b5951c8bb36bdef9aa4dcd19b9d65812e2846 - data/memory.json: SHA-256 54f1ef6ac532dde203c6b14127eeb36ec922b173187491237e876d9462b39f1d - data/snapshots/2026-10-09.json: SHA-256 93d250808125ae98bd05bc6b1c4c6afa9f829f36d551deb50aa048f320318eb7 - data/snapshots/2026-10-10.json: SHA-256 62b4ba58dbff36ad48cd40050eb61b479c052a6af52bd94772dc4ab00bbf5757 - mcp-config.example.json: SHA-256 7644e429708a6aa8ceb09505dcd0fc9a092b3608e974767360f4c158cb1047dd - workbuddy.md: SHA-256 15cbc8826abcfb03aec7a35e9b6baa53a8ada39a7c29285dd4ea4068dc27978a If a file does not match, it changed since the listing was prepared: do not install it yet, tell me what you found and let me decide. 2. Read SKILL.md in full (and every other file in the folder) and tell me in plain words: what the skill does when used, which services it connects to, whether it reads or sends any personal information or keys, and anything that seems unusual. Stop on any red flag and tell me before going further. Confirm these points from the files: - The folder holds no executable code at all: SKILL.md (frontmatter name mcmates), README.md, MCP_INTEGRATION.md (a short integration note whose tool table is left as a template in this version), CONTEST_DECLARATION.md, LICENSE, workbuddy.md (the upstream development log), mcp-config.example.json (the connector example, token as an environment placeholder only), .gitignore, and the data files: data/memory.json (the empty memory bank template) and two upstream price snapshots (data/snapshots/2026-10-09.json and 2026-10-10.json, sampled city prices for a Big Mac and medium fries). Everything the skill does is done by the agent following SKILL.md through the MCP connector. - At use time, data goes only to the McDonald's China MCP server at https://mcp.mcd.cn (Streamable HTTP, Authorization: Bearer token on every call). A recommendation sends: query-nearby-stores with the city and landmark you give (or your favourite store code read from the local memory), query-meals and list-nutrition-foods for that store, query-store-coupons, and calculate-price with the candidate item codes, so the server receives your token, the store, your city or landmark words, your budget and nutrition words as conversation context, and the item codes being priced. On a cold start it can also call order-list to import your last ten orders into the local memory. Once a day, on the first recommendation, it silently samples prices in two or three cities (query-nearby-stores on core district keywords, then calculate-price on a Big Mac, code 1100, and medium fries, code 4810) and appends the result to that day's local snapshot file: read only calls, no account assets touched. The SKILL.md states the memory data is never sent to any third party interface, and the token is read from the MCD_MCP_TOKEN environment variable and never written into a file or the conversation. - Three write actions on your McDonald's account exist in this skill, and the SKILL.md red lines gate every one of them the same way: claiming coupons (auto-bind-coupons), ordering (create-order) and cancelling (cancel-order) must each be listed to you item by item before they run, and run only after you explicitly agree; it must never silently spend, order, draw or redeem. Its local writes are part of normal use and happen without a separate gate in the SKILL.md: after each real order it appends the order to data/memory.json, recomputes your taste profile after every three orders, and appends the daily price sample to data/snapshots/. The answer ends by telling you to say the confirmation phrase before any order is placed. - Nothing is sent anywhere during installation itself; the only download at install time is the repository from GitHub at the pinned commit. The listing and the token are free; you pay only a McDonald's order you confirm, at the official price returned by calculate-price. 3. When I say "yes, install", install it as a skill: copy the whole folder into the agent's skills directory, in a folder named "mcmates", keeping every file (.gitignore, CONTEST_DECLARATION.md, LICENSE, MCP_INTEGRATION.md, README.md, SKILL.md, data/memory.json, data/snapshots/2026-10-09.json, data/snapshots/2026-10-10.json, mcp-config.example.json, workbuddy.md). 4. Verify with no network calls: frontmatter valid, files in place. 5. Report what was installed, where, and what I still need to do myself (for example: get the McDonald's China MCP token myself at https://open.mcd.cn/mcp with my mobile phone number if I do not have one, put it only in my own private MCP client configuration or environment variable and never paste it into a shared chat, install Python if it is missing, and set up the mcd-mcp connector to https://mcp.mcd.cn if it is not configured; using the skill is a separate step that only starts when I ask for it, and any order, coupon claim or booking happens only as disclosed above). GitHub is optional: if I have a GitHub account or the gh CLI, you may use it; otherwise public access is fine. Never require it unless it's in the prerequisites above. Rules: don't touch anything outside the temp folder and the install target. If anything looks off, stop and ask me.