Code Pluginsource linked

StayFinderv0.1.1

OpenClaw plugin for live hotel and vacation rental search via the StayFinder service. Returns real-time pricing, availability, and Expedia booking redirect links — no scraping, no browser automation.

@riverintel/stayfinder·runtime stayfinder·by @gueritopollito
Community code plugin. Review compatibility and verification before install.
openclaw plugins install clawhub:@riverintel/stayfinder
Latest release: v0.1.1Download zip

Capabilities

configSchema
Yes
Executes code
Yes
HTTP routes
0
Runtime ID
stayfinder

Compatibility

Built With Open Claw Version
2026.4.5
Min Gateway Version
>=2026.4.5
Plugin Api Range
>=2026.4.5
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (live hotel/rental search via StayFinder/Expedia/Vrbo) match the code and runtime behavior: HTTP client (adapter-client) calls the configurable adapter_url, tools implement search/signup/verify, and results and Expedia redirect links are returned. No unrelated cloud credentials, binaries, or system-level privileges are requested.
Instruction Scope
SKILL.md instructs installing the plugin, adding the three tools to openclaw.json, and the one-time email/code signup flow. The runtime instructions and code operate only on the declared flows: network calls to the adapter API and reading/writing a local credential file. There are no instructions to read arbitrary files, shell-history, or exfiltrate other data.
Install Mechanism
This is instruction-only for OpenClaw (install via openclaw plugins install). The package contains source/dist files but there is no remote arbitrary-download-and-extract installer in the manifest. No suspicious install URLs or third-party package pulls were requested in the SKILL.md.
Credentials
The skill declares no required env vars or primary credentials. It does use OPENCLAW_HOME if present (reasonable for isolating state) and writes an API token to ~/.openclaw/credentials/stayfinder.json (explicitly documented). That local credential file (mode 0600) is proportional to the described signup/verify flow.
Persistence & Privilege
always:false (normal). The plugin writes its own credential file in the user's OpenClaw directory and can update it during verify; this is expected and scoped to its own path. It does not request system-wide config changes or modify other skills.
Assessment
This plugin appears internally consistent with its description. Before installing: (1) confirm you trust the provider (api.stayfinder.riverintel.com is the default adapter_url and will receive your search parameters and the one-time signup email); (2) note the plugin will store an API token and the signup email at ~/.openclaw/credentials/stayfinder.json (mode 0600) — review that file if you need to revoke access; (3) if you host your own adapter, change adapter_url in the plugin config; (4) the agent may perform the signup flow (send verification emails) during use — run it in an environment you control if you have sensitive operational constraints. If you want higher assurance, inspect the remaining source files (search-stays, signup, verify) or run the plugin in an isolated test profile (set OPENCLAW_HOME) to observe network traffic and file writes.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
84b31440b7f6
Tag
main
Provenance
No
Scan status
clean

Tags

latest
0.1.1

StayFinder

OpenClaw plugin for live hotel and vacation rental search. Ask your agent for a hotel and get back real prices, real availability, and real booking redirect links. No web scraping. No browser automation. No fabricated URLs.

Install

openclaw plugins install @riverintel/stayfinder

Add the tools to your ~/.openclaw/openclaw.json:

{
  "tools": {
    "alsoAllow": ["search_stays", "stayfinder_signup", "stayfinder_verify"]
  }
}

Restart the gateway:

openclaw gateway restart

How it works

Ask your agent about hotels or vacation rentals:

"Find me a hotel in Manhattan for next weekend, two adults"

The first time, the agent walks you through a one-time setup — it asks for your email, sends you a 6-digit code, and you paste the digits back into the chat. The whole thing takes about two minutes. After that, searches just work.

Your access stays active as long as you keep using it. If you go about a week without searching, the agent sends you a fresh code automatically — you don't have to re-enter your email.

What you get back

The agent presents real-time results from Expedia and Vrbo with prices, ratings, and direct booking links:

The Plaza ⭐⭐⭐⭐⭐ · 9.0/10 (1,000 reviews) $1,258/night · $2,894 total Iconic NYC landmark on Central Park & 5th Ave. Full-service spa, family-friendly. 👉 Book on Expedia

You can refine with follow-ups like "only 5-star", "pet-friendly", "under $300/night", or "show me vacation rentals instead" — the agent re-searches with updated filters each time.

Tools

ToolPurpose
search_staysSearch hotels and vacation rentals with filters, sorting, and an optional trip-intent description
stayfinder_signupSend a 6-digit verification code to your email (first-time setup or re-auth)
stayfinder_verifyExchange the code for an API token, saved automatically to your credential store

The bundled lodging-search skill tells the agent when and how to use each tool — including the setup flow, re-authentication after inactivity, error handling, and output formatting.

Configuration

All configuration is optional. The plugin defaults to the public hosted StayFinder service and US pricing.

{
  "plugins": {
    "entries": {
      "stayfinder": {
        "enabled": true,
        "config": {
          "adapter_url": "https://api.stayfinder.riverintel.com",
          "default_pos_country": "US",
          "default_currency": "USD",
          "request_timeout_ms": 10000
        }
      }
    }
  }
}

Self-hosters can point adapter_url at their own deployment.

Privacy

StayFinder receives the search parameters needed to find lodging — destination, dates, party size, filters, and (optionally) a one-sentence description of what kind of trip you're planning. It does not see your browsing history, the rest of your conversation with the agent, or anything you didn't tell the agent about your trip.

Your email address is used once during signup verification and stored only as a tenant identifier on the StayFinder service. The API token is written to ~/.openclaw/credentials/stayfinder.json (mode 0600, readable only by you) and is never shown to the user or the agent.

Issues and contributions

Bug reports, feature requests, and PRs welcome at github.com/RiverIntel/stayfinder/issues.

License

Apache 2.0 — see LICENSE.