codex-data/codex-gateway
skills/codex-gateway/SKILL.md
Use when the user wants to query the Codex Supergraph and the server returns a 402 challenge. Pays per query via the MPP 402 challenge flow. Only supports queries, not mutations or subscriptions.
development
Updated Jun 10, 2026
$ install --global
skillsauthnpx skillsauth add codex-data/skills codex-gatewayInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 10, 2026, 3:34 AM35.0s4 files scanned
SKILL.md
- name:
- codex-gateway
- description:
- >-
- author:
- codex-data
- version:
- 1.0
Codex Machine Payment Protocol (MPP)
Use this skill when the Codex Supergraph returns a 402 Payment Required response. The MPP challenge flow lets you pay per query without needing an API key. For higher volume, get an API key at dashboard.codex.io/signup — see docs.codex.io for details.
| | |
| --------------------- | --------------------------------------------------------------- |
| HTTP endpoint | https://graph.codex.io/graphql |
| Credential header | Authorization: Payment <base64url-credential> |
How it works
- Send a GraphQL query (no credential).
- Server returns
402 Payment RequiredwithWWW-Authenticate: Payment ...challenges. - Client solves one challenge and retries with
Authorization: Payment <credential>. - Server returns GraphQL data +
Payment-Receiptheader.
Constraints
- Query only. Mutations and subscriptions return
403in MPP mode. - If a valid API key or bearer token is also present, API auth takes precedence.
Rules
- Never print raw credentials.
- Only use MPP for
queryoperations. - Before constructing any query, read
references/query-templates.mdbelow for the correct GraphQL schema. Do not guess query or field names.
References
| File | Purpose | | ---- | ------- | | ../codex-supergraph/references/query-templates.md | GraphQL query schema and examples — read before constructing queries | | ../codex-supergraph/references/gotchas.md | Common query failure points | | references/gotchas.md | MPP-specific failure points | | rules/wallets.md | Wallet setup: tempo wallet/request (Tempo) | | references/mpp-flow.md | Auth matrix, challenge details, error codes |
Links
- Website: www.codex.io
- Documentation: docs.codex.io
- Get an API key: dashboard.codex.io/signup
Related Skills
codex-data/codex-supergraph
development
VerifiedTrustedCommunity
Use when the user asks about token prices, charts, holders, trending tokens, pair data, prediction markets, or any on-chain analytics from Codex. Also use when building GraphQL queries against https://graph.codex.io/graphql. TRIGGERS: token price, token chart, trending tokens, pair data, holders, prediction markets, Polymarket, Kalshi, event odds, prediction event, prediction traders, trader leaderboard, trader PnL, prediction charts, outcome probability, open interest, prediction categories, betting markets, market resolution, prediction positions, prediction trades
SKILL.mdUpdated Jun 5, 2026
openclaw/openclaw-secret-scanning-maintainer
development
VerifiedTrustedCommunity
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
357,764SKILL.mdUpdated Apr 15, 2026
openclaw/openclaw-release-maintainer
development
VerifiedTrustedCommunity
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/openclaw-qa-testing
development
VerifiedTrustedCommunity
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
357,764SKILL.mdUpdated Apr 10, 2026