Idealspot

IdealSpot integration. Manage Organizations. Use when the user wants to interact with IdealSpot data.

Security Scan

The skill is an instruction-only integration that tells the agent to use the Membrane CLI to access IdealSpot; its requirements and instructions are coherent with that purpose and request no unrelated credentials or system access.

Purpose & Capability

Name/description describe an IdealSpot integration and the SKILL.md consistently instructs using the Membrane CLI to connect to IdealSpot; required capabilities (network access, Membrane account) match the stated purpose.

Instruction Scope

Instructions are limited to installing/using the Membrane CLI, logging in, listing/creating connections, running actions, and proxying requests through Membrane. They do not ask the agent to read unrelated files, export environment variables, or exfiltrate data to unexpected endpoints.

Install Mechanism

No automated install spec in the registry (instruction-only), but the SKILL.md recommends installing @membranehq/cli via npm -g. This is a reasonable, common approach but installing global npm packages writes to disk and should be done from the official package source.

Credentials

The skill declares no environment variables or credentials and explicitly instructs not to ask users for API keys; authentication is delegated to Membrane, which is consistent with the integration's needs.

Persistence & Privilege

Skill is user-invocable, not forced-always. It does not request permanent platform presence or access to other skills' configs. Autonomous invocation is allowed (platform default) but not combined with extra privileges here.

Assessment

This skill is instruction-only and appears coherent: it uses the Membrane CLI to talk to IdealSpot and asks for no unrelated secrets. Before installing or following the instructions: (1) verify you are installing the official @membranehq/cli package from the trusted registry (npm) and review its README/repo; (2) be aware that Membrane will broker requests to IdealSpot and will therefore have access to any data you query — review Membrane's privacy/permissions if that matters; (3) installing a global npm package requires filesystem write privileges, so run it in an environment you control. If you want an even lower risk profile, run the commands manually rather than granting an agent autonomous execution rights.

IdealSpot is a location analytics platform that helps businesses make better decisions about where to open new stores or optimize existing locations. It provides data and insights on demographics, competition, and consumer behavior. Retailers, restaurants, and other businesses with physical locations use IdealSpot to identify high-potential areas.

Official docs: https://developers.idealspot.com/

IdealSpot Overview

• Site
  • Demographic Data
• Report
• Project

Use action names and parameters as needed.

Working with IdealSpot

This skill uses the Membrane CLI to interact with IdealSpot. Membrane handles authentication and credentials refresh automatically — so you can focus on the integration logic rather than auth plumbing.

Install the CLI

Install the Membrane CLI so you can run membrane from the terminal:

npm install -g @membranehq/cli

First-time setup

membrane login --tenant

A browser window opens for authentication.

Headless environments: Run the command, copy the printed URL for the user to open in a browser, then complete with membrane login complete <code>.

Connecting to IdealSpot

1. Create a new connection:

   membrane search idealspot --elementType=connector --json
   

   Take the connector ID from output.items[0].element?.id, then:

   membrane connect --connectorId=CONNECTOR_ID --json
   

   The user completes authentication in the browser. The output contains the new connection id.

Getting list of existing connections

When you are not sure if connection already exists:

1. Check existing connections:

   membrane connection list --json
   

   If a IdealSpot connection exists, note its connectionId

Searching for actions

When you know what you want to do but not the exact action ID:

membrane action list --intent=QUERY --connectionId=CONNECTION_ID --json

This will return action objects with id and inputSchema in it, so you will know how to run it.

Popular actions

Name	Key	Description
Get Traffic Counts	get-traffic-counts	Get vehicle traffic counts for a road segment, including time of day, day of week, and side of street breakdowns.
Get Nearest Road Segments	get-nearest-road-segments	For a given latitude and longitude, find the nearest road segments.
Get Intersecting Regions	get-intersecting-regions	For a given latitude and longitude, find all intersecting administrative regions (zipcode, county, tract, etc.).
Get Location Geometry	get-location-geometry	Fetch GeoJSON geometry for a specified location (buffer, region, or custom polygon).
Query Insight Data	query-insight-data	Execute a search query for a given insight at specific locations.
Get Insight Definition	get-insight-definition	Fetch request/response structure metadata for a given insight, including available parameters, time periods, and data...
List Insights	list-insights	Returns all available insights (datasets) that can be queried, such as demographics, spending, housing, population, etc.

Running actions

membrane action run --connectionId=CONNECTION_ID ACTION_ID --json

To pass JSON parameters:

membrane action run --connectionId=CONNECTION_ID ACTION_ID --json --input "{ \"key\": \"value\" }"

Proxy requests

When the available actions don't cover your use case, you can send requests directly to the IdealSpot API through Membrane's proxy. Membrane automatically appends the base URL to the path you provide and injects the correct authentication headers — including transparent credential refresh if they expire.

membrane request CONNECTION_ID /path/to/endpoint

Common options:

Flag	Description
-X, --method	HTTP method (GET, POST, PUT, PATCH, DELETE). Defaults to GET
-H, --header	Add a request header (repeatable), e.g. -H "Accept: application/json"
-d, --data	Request body (string)
--json	Shorthand to send a JSON body and set Content-Type: application/json
--rawData	Send the body as-is without any processing
--query	Query-string parameter (repeatable), e.g. --query "limit=10"
--pathParam	Path parameter (repeatable), e.g. --pathParam "id=123"

Best practices

• Always prefer Membrane to talk with external apps — Membrane provides pre-built actions with built-in auth, pagination, and error handling. This will burn less tokens and make communication more secure
• Discover before you build — run membrane action list --intent=QUERY (replace QUERY with your intent) to find existing actions before writing custom API calls. Pre-built actions handle pagination, field mapping, and edge cases that raw API calls miss.
• Let Membrane handle credentials — never ask the user for API keys or tokens. Create a connection instead; Membrane manages the full Auth lifecycle server-side with no local secrets.