← Back to Skills Marketplace
byungkyu

API Gateway

by byungkyu · GitHub ↗ · v1.0.124 · MIT-0
cross-platform ✓ Security Clean
83106
Downloads
390
Stars
624
Active Installs
125
Versions
Install in OpenClaw
/install api-gateway
Description
Connect to external services through Maton-managed API routes. Use this skill only after the user names the target app, account, and task. Start with read/li...
Usage Guidance
Install only if you trust Maton with routed access to the external accounts you connect. Use least-privilege OAuth scopes, verify the exact connection and resource before each action, require explicit confirmation before writes or sharing, and delete connections when the task is complete.
Capability Assessment
✓ Purpose & Capability
The stated purpose is to route user-requested calls to connected external services, and the documented capabilities, including files, messaging, calendar, billing, webhooks, and business apps, align with that purpose.
ℹ Instruction Scope
The skill has broad authority across many services, but it explicitly requires the user to name the app, account, and task, start with read/list verification where possible, and obtain explicit approval for modifying operations.
ℹ Install Mechanism
Installation uses the Maton CLI via npm or Homebrew and requires a Maton API key; this is expected for the gateway model and the skill gives credential-handling guidance.
ℹ Credentials
Network access, OAuth/API-key connections, and third-party data transfer are necessary for this integration skill, but users should understand that connected services may expose sensitive account data through the gateway.
ℹ Persistence & Privilege
Service connections can persist in the Maton account until deleted, but connection creation requires explicit approval and the skill advises deleting unused connections and using least-privilege scopes.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install api-gateway
  3. After installation, invoke the skill by name or use /api-gateway
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.124
- Removed the file skill-card.md. - No other functional or documentation changes in this version.
v1.0.123
No visible changes were detected in this release. - Version bumped to 1.0.123, but no file modifications or user-facing changes present. - All usage protocols, examples, and documentation remain unchanged.
v1.0.122
No user-facing changes in this version. - No file changes detected between versions 1.0.121 and 1.0.122.
v1.0.121
No functional or documentation changes in this release. - Version bump to 1.0.121 with no file or content updates detected.
v1.0.120
No user-facing changes in this release; no file or documentation changes detected.
v1.0.119
No user-visible changes in this version; documentation and file contents remain unchanged.
v1.0.118
- Removed the references/meta-ads/README.md file from the project. - No user-facing changes to core skill behavior or documentation. - Use this version if you no longer need the Meta Ads reference file included in your distribution.
v1.0.117
No user-facing changes in this version. - Version bumped to 1.0.117. - No file or documentation changes detected.
v1.0.116
- Stricter user consent protocols for non-GET (write, modify, or delete) API calls; require explicit user approval with all request details before proceeding. - Updated instructions: Never infer approval for non-GET requests from the original user request—always prompt for confirmation first. - New connection creation now explicitly requires user approval specifying the service; do not create connections without user direction. - Scope selection guidance tightened: during OAuth, choose only scopes necessary for the current task. - Reminders to immediately remove connections after their use if no longer needed.
v1.0.115
- Clarified security and usage protocols: all write operations are now blocked by default and require explicit user confirmation with resource details and intended effect. - Expanded authentication and credential safety instructions, emphasizing key secrecy and minimum-privilege principles. - Added stricter guidance for read/list-first workflow and explicit confirmation before any modification or high-impact operation. - Reordered and updated instructions for connection management and specifying connections. - Improved "Routing" and "Security & Permissions" sections for greater clarity and caution.
v1.0.114
- Added explicit instructions to require user confirmation before executing non-read (POST, PUT, PATCH, DELETE) operations, especially those that are destructive, public-facing, financial, or purchase-related. - Clarified that all route invocations must happen only after the user specifies the exact app, account, and task. - Updated Routing section for stronger language around operation safety, explicit confirmation, and context verification. - No functional or CLI/API changes; documentation and security usage guidance improvements only.
v1.0.113
- Added CLI usage examples for quick start, connection management, and specifying connections. - Documented CLI installation methods (NPM, Homebrew). - Updated authentication and connection management sections to include CLI and Python usage side-by-side. - Added five new reference files for Google Apps Script, Google Tag Manager, LinkedIn Community Management, YouTube Analytics, and YouTube Reporting. - Clarified the need to specify connections using CLI flags (`--connection`) or headers.
v1.0.112
- Updated route usage instructions: Section on base URL and path construction is simplified and clarified. - Emphasized use of app-specific reference and read/list calls before making any changes. - Minor change in the description field, stressing to always consult the app-specific reference before changes. - No functional or interface changes; documentation is now clearer and more concise.
v1.0.111
- Clarified skill purpose and usage rules, emphasizing starting with read/list calls and explicit user confirmation for changes. - Updated documentation to specify that API route paths must begin with the connection's app name (e.g., `/google-mail/...`) for correct routing. - Improved authentication and security guidance, including the handling of API keys and scope minimization. - Enhanced change operation requirements: now require confirmation of the exact app, connection, resource, payload, and expected result before any non-read action. - Streamlined language throughout for readability and precision.
v1.0.110
Version 1.0.110 – Security and confirmation requirements clarified - Updated the description to explicitly require verification of connection and target resource, plus explicit user confirmation before performing any changes. - Clarified language regarding confirmation for data-modifying operations. - Revised authentication and compatibility notes for clarity. - No functional changes to code examples or API behavior.
v1.0.109
- Updated security guidance to emphasize specifically choosing the intended connection before taking actions. - Clarified that the MATON_API_KEY should be read from the environment and never printed or logged. - Improved instructions throughout to reinforce use only for user-identified app, account, and task. - Minor language clarifications in authentication and security sections.
v1.0.108
- Clarified security instructions: emphasized to keep MATON_API_KEY secret, never log or print it, and always use the environment for the Authorization header. - Updated recommendation to use Maton-Connection header when multiple connections exist for the same service. - Improved descriptions around connection targeting and account selection based on the user's choice. - No API or functional changes; documentation only.
v1.0.107
Version 1.0.107 - Clarified and simplified the skill description, emphasizing required user selection and security. - Updated guidance about API route formatting and use of the app identifier in paths. - Improved security messaging: clearer instructions on API key secrecy and prudent connection management. - Streamlined and clarified examples for authentication and connection management. - Updated the "Supported Services" table headers for greater clarity. - Removed redundant or overly detailed content to make documentation more concise and user-friendly.
v1.0.106
- Clarified description to emphasize routing only when the user specifies a service, account, and task. - Refined language in the description for greater precision and clarity on usage. - No functionality or API changes; documentation improvements only.
v1.0.105
- Updated the skill description to clarify that API access is provided “when the user names a specific service and task.” - Clarified authentication details: Maton API key only identifies the Maton account (not third-party services). - Tweaked documentation wording for base URL section and read-only route examples for better clarity. - No functional or API changes; documentation improvements only.
Metadata
Slug api-gateway
Version 1.0.124
License MIT-0
All-time Installs 2493
Active Installs 624
Total Versions 125
Frequently Asked Questions

What is API Gateway?

Connect to external services through Maton-managed API routes. Use this skill only after the user names the target app, account, and task. Start with read/li... It is an AI Agent Skill for Claude Code / OpenClaw, with 83106 downloads so far.

How do I install API Gateway?

Run "/install api-gateway" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is API Gateway free?

Yes, API Gateway is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does API Gateway support?

API Gateway is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created API Gateway?

It is built and maintained by byungkyu (@byungkyu); the current version is v1.0.124.

💬 Comments