okx

Summary

---
name: okx
version: 1.1.0
description: |
  OKX OnChainOS: on-chain trading, analytics, security, DeFi across 20+ chains.

  Use when running OKX-routed on-chain ops (e.g. swap on Ethereum, scan token risk, track smart money, check wallet portfolio).

  Wallet: default to the user's Agent Wallet (via the `wallet` skill). Only use the OnchainOS TEE wallet (`onchainos wallet login <email>`) when the user explicitly asks for it.
metadata:
  starchild:
    emoji: "⛓️"
    skillKey: okx-onchainos
    requires:
      bins:
        - npx
        - node
user-invocable: true
disable-model-invocation: false

---

# OKX OnChainOS — Skills Directory

> **What this file is:** a directory page that points to OKX's official
> `onchainos-skills` repo. It contains **no logic of its own** — every sub-skill
> below lives upstream at [`okx/onchainos-skills`](https://github.com/okx/onchainos-skills)
> and is fetched fresh on install, so you always get the latest version.

OKX OnChainOS is a suite of **8 specialized sub-skills** covering on-chain
trading, market analytics, smart-money signals, DeFi investing & positions,
wallet ops, security scanning, payment protocols, agent identity & task
marketplace, and crypto news & sentiment across 20+ blockchains (Ethereum, Solana, XLayer, Base, BSC, Arbitrum, Polygon,
Optimism, Avalanche, TRON, …).

Most sub-skills drive a single binary, `onchainos`, which is downloaded on first
use. A subset of capabilities (read-only data) can also be accessed without the
binary, via Starchild's sc-proxy — see **Authentication options** below.

---

## How install actually works

```bash
# Install one sub-skill (recommended — pulls just what you need)
npx skills add okx/onchainos-skills@<sub-skill-name>

# Or via long form
npx skills add https://github.com/okx/onchainos-skills --skill <sub-skill-name>

# Install everything (auto-detects your environment and installs accordingly)
npx skills add okx/onchainos-skills
```

Each sub-skill ships its own SKILL.md + reference docs + trigger phrases, so you
can pull just what you need.

**Plugin marketplace** (alternative):

```text
/plugin marketplace add okx/onchainos-skills
/plugin install onchainos-skills
```

**CLI install** (the `onchainos` binary — auto-detects platform, verifies SHA256,
installs to `~/.local/bin` or `%USERPROFILE%\.local\bin`):

```bash
# macOS / Linux
curl -sSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | sh
# add `-s -- --beta` for the latest pre-release (opt-in only; never downgrades)
```

```powershell
# Windows
irm https://raw.githubusercontent.com/okx/onchainos-skills/main/install.ps1 | iex
```

---

## Wallet — default to the user's Agent Wallet

Use the platform `wallet` skill for signing and broadcasting. OKX DEX
endpoints return unsigned calldata (`{to, value, data, ...}`); feed it to
`wallet_transfer(data=<calldata>)` and you're done. No separate OKX wallet
needed.

Only use the OnchainOS TEE wallet (`onchainos wallet login <email>`) when
the user explicitly asks for it.

---

## Authentication options (read this before invoking anything)

There are two distinct paths. Pick based on what the agent needs to do:

### Path A — Direct HTTP via Starchild sc-proxy (no API Key needed)

For read-only data lookups (prices, K-line, smart-money signals, token
analytics, security checks, public-address portfolios — **≈ 80 % of OnchainOS
capabilities**), the agent can skip the CLI entirely and call
`https://web3.okx.com/...` directly through sc-proxy:

```python
from core.http_client import proxied_get
r = proxied_get(
    "https://web3.okx.com/api/v6/dex/aggregator/supported/chain",
    headers={"SC-CALLER-ID": f"chat:{thread_id}"},
)
```

sc-proxy auto-injects platform OKX credentials, signs each request with
HMAC-SHA256, and bills the caller's Starchild credits.

- **Cost**: $0.001 / request
- **Rate limit**: 60 req/min
- **Setup**: none
- **Limits**: data only — cannot send transactions or manage wallets

### Path B — `onchainos` CLI with your own OKX Web3 API Key

For wallet ops (`wallet login`, `wallet send`, `wallet contract-call`), DEX
swaps that need execution, payments, and any other CLI-driven workflow.

The `onchainos` CLI ships with **built-in sandbox API keys** that work out of the
box for local testing — no setup required. These keys are **shared, rate-limited,
and for evaluation only**: do NOT use them in production or with real assets. Any
failures or losses from using the built-in keys are the caller's responsibility.

For production, bring your own credentials:

1. Apply at [web3.okx.com → OnchainOS → Dev Portal](https://web3.okx.com/onchain-os/dev-portal)
2. Set env vars (or a `.env` in the project root — never commit it):
   ```bash
   export OKX_API_KEY=<your key>
   export OKX_SECRET_KEY=<your secret>
   export OKX_PASSPHRASE=<your passphrase>
   ```
3. Run any sub-skill's CLI commands.

### Why the CLI can't use sc-proxy

The `onchainos` binary uses Rust's `rustls` TLS stack with **bundled
`webpki-roots`** — a compile-time copy of the Mozilla root CA list. It ignores
the system trust store, ignores `SSL_CERT_FILE`, and has no documented env
override. As a result, sc-proxy's MITM CA is rejected as `UnknownIssuer`, and
the CLI cannot be transparently proxied. Path A (direct HTTP from agent
scripts) is the only way to use platform credentials with OnchainOS today.

Wallet creation (`onchainos wallet login <email>`) gives you a fresh TEE-managed
account — it does NOT import your existing OKX App / extension wallet.

---

## Sub-skills by category

### 📊 Discovery & Market Data (2)

| Sub-skill | Use for |
|---|---|
| `okx-dex-market` | Read-only on-chain DEX data: real-time prices / K-line / index / wallet PnL, address tracker activities, smart money / whale / KOL signal tracking + leaderboard rankings, token search / metadata / market cap / rankings / liquidity / hot tokens / holder & cluster analysis / top traders / trade history, crypto news / sentiment / vibe / KOL leaderboard, meme pump / trenches scanning / dev reputation / bundle detection, and WS/script real-time streaming |
| `okx-dapp-discovery` | Third-party DApp discovery and direct plugin routing — currently supports Polymarket, Aave V3, Hyperliquid, PancakeSwap V3 AMM, Morpho V1 Optimizer |

### 💼 Wallet, Trading & Security (1)

| Sub-skill | Use for |
|---|---|
| `okx-agentic-wallet` | Wallet lifecycle (auth, balance, portfolio PnL, send, tx history, contract call), Gas Station, DEX swap, cross-chain bridge, limit-order strategy, transaction gateway (gas / simulate / broadcast / track order), public-address portfolio, security scanning (token risk, DApp phishing, tx & signature checks, approvals), audit log |

### 🏦 DeFi (1)

| Sub-skill | Use for |
|---|---|
| `okx-defi` | OKX-aggregated DeFi: product discovery, deposit, withdraw, claim rewards across Aave, Lido, PancakeSwap, Kamino, NAVI and more, plus positions and holdings overview across protocols and chains |

### 💸 Payments (1)

| Sub-skill | Use for |
|---|---|
| `okx-agent-payments-protocol` | Unified payment dispatcher across x402 (`exact` / `aggr_deferred` schemes — TEE or local-key sign), MPP (`charge` / `session` intents — open / voucher / topUp / close, transaction or hash mode), and a2a-pay (paymentId-based create / pay / status). Routes to per-scheme/intent references. |

### 🤖 Agent & AI (2)

| Sub-skill | Use for |
|---|---|
| `okx-ai` | ERC-8004 on-chain Agent identity (register / update / search / rate / service-list) + agent task marketplace (publish / accept / deliver / dispute) + live task-progress monitor |
| `okx-guide` | Onboarding & guide hub: Onchain OS onboarding + welcome banner, OKX.AI intro & role-registration routing, customer-support / Help Center guidance |

### 🛠️ Ops (1)

| Sub-skill | Use for |
|---|---|
| `okx-growth-competition` | Agentic Wallet exclusive trading competitions: list, join, view leaderboard, claim rewards |

---

## Quick task → sub-skill map

| I want to… | Sub-skill | Suggested path |
|---|---|---|
| Check a token price or chart | `okx-dex-market` | A (no key) |
| Search / analyze a token's holders | `okx-dex-market` | A (no key) |
| Follow smart money buys | `okx-dex-market` | A (no key) |
| Scan new meme launches | `okx-dex-market` | A (no key) |
| Look at any public wallet | `okx-agentic-wallet` (public-address portfolio) | A (no key) |
| Scan a token / dApp for risk | `okx-agentic-wallet` (security scanning) | A (no key) |
| Estimate gas / simulate a tx | `okx-agentic-wallet` (gateway) | A or B |
| Manage / send from my own wallet | `okx-agentic-wallet` | B (requires login) |
| Swap tokens | `okx-agentic-wallet` (DEX swap) REST + sign with the `wallet` skill (Agent Wallet) |
| Find best DeFi yield (any protocol) | `okx-defi` | B (signing) |
| View my DeFi positions | `okx-defi` | A (no key) |
| Use a specific DApp (Aave, Polymarket, …) | `okx-dapp-discovery` | B (full DApp flow) |
| Pay an x402 / MPP / a2a-pay gated resource | `okx-agent-payments-protocol` | B (signing) |
| Register / rate an on-chain agent, agent task marketplace | `okx-ai` | B (signing) |
| Onboarding, OKX.AI intro, customer support | `okx-guide` | A (no key) |
| Join a trading competition | `okx-growth-competition` | B (wallet required) |
| Debug a CLI failure | `okx-agentic-wallet` (audit log) | B (local CLI logs) |

---

## Workflows — pre-built multi-skill orchestrations

Beyond individual sub-skills, the repo ships **workflow orchestrations** under
`workflows/` that compose several skills into one complete operation. The agent
reads `workflows/INDEX.md` to route a request, then follows the step-by-step
instructions in the matched workflow file.

| Workflow | What it does | CLI command |
|---|---|---|
| Token Research | Price, security, holders, cluster, smart-money signals, optional launchpad deep-dive | `onchainos workflow token-research --address <addr>` |
| Daily Brief | Market pulse + smart money + new-token activity + portfolio alerts | — |
| Smart Money Signals | SM signal list aggregated by token + per-token due diligence | `onchainos workflow smart-money` |
| New Token Screening | MIGRATED launchpad scan + safety & dev enrichment for top 10 | `onchainos workflow new-tokens` |
| Wallet Analysis | 7d/30d PnL, trading behaviour, recent on-chain activity | `onchainos workflow wallet-analysis --address <addr>` |
| Portfolio Check | Balances, total value, 30d PnL overview | `onchainos workflow portfolio --address <addr>` |
| Wallet Monitor | In-session polling — alert on new trades from watched wallets | — |
| Wallet Monitor (WS) | Background WebSocket session for offline wallet monitoring | — |

### Composite CLI commands

Single commands that replace multiple individual tool calls:

```bash
# Token report: info + price + advanced-info + security scan (parallel)
onchainos token report --address <addr> --chain solana

# Full workflow commands
onchainos workflow token-research --address <addr> [--chain solana]
onchainos workflow smart-money [--chain solana]
onchainos workflow new-tokens [--chain solana] [--stage MIGRATED]
onchainos workflow wallet-analysis --address <addr> [--chain ethereum]
onchainos workflow portfolio --address <addr> [--chains ethereum,solana]
```

### Typical skill flows

- **Search & buy**: `okx-dex-market` (find token) → `okx-agentic-wallet` (check funds + execute trade)
- **Portfolio overview**: `okx-agentic-wallet` (holdings) → `okx-dex-market` (enrich with analytics + price charts)
- **Market research**: `okx-dex-market` (trending/rankings + candles/history) → `okx-agentic-wallet` (trade)
- **Swap & broadcast**: `okx-agentic-wallet` (get quote → swap → broadcast → track order)
- **Full trading flow**: `okx-dex-market` (search + price/chart) → `okx-agentic-wallet` (check balance → swap → simulate + broadcast + track)
- **Leaderboard → research → trade**: `okx-dex-market` (top traders by PnL/win rate + token analytics) → `okx-agentic-wallet` (execute trade)
- **Follow smart money**: `okx-dex-market` (KOL/smart money buys + token details + holder cluster + price chart) → `okx-agentic-wallet` (trade)

---

## MCP server

The `onchainos` CLI doubles as a native MCP server, exposing its tools to any
MCP-compatible client. Start it with:

```bash
onchainos mcp
```

---

## Important notes

- **Chain identifiers**: both human names (`ethereum`, `solana`, `xlayer`) and
  numeric IDs are accepted. Run `onchainos swap chains` or
  `onchainos gateway chains` for the full list.
- **Read-only ops** (market data, signals, security scan, public-address
  portfolios) work via Path A without any user-supplied API Key.
- **Trading & sending** default to the user's Agent Wallet via the `wallet`
  skill. Only fall back to `onchainos wallet login` when the user asks.
- **Security gate**: when `okx-agentic-wallet`'s security scanning reports a
  fail, the calling agent MUST block the related operation rather than proceed.

---

## Resources

- **Upstream repo**: [okx/onchainos-skills](https://github.com/okx/onchainos-skills)
- **OnchainOS docs**: [OKX Web3 Build — OnchainOS](https://www.okx.com/web3/build/docs/onchain-os/introduction)
- **Skills registry**: [skills.sh/okx/onchainos-skills](https://skills.sh/okx/onchainos-skills)
- **Dev portal (API Key)**: [web3.okx.com/onchain-os/dev-portal](https://web3.okx.com/onchain-os/dev-portal)

Security audits