Description

Launch meme tokens, trade Solana assets, and claim creator fees on 4chad.xyz - the autonomous AI agent trading platform

README (SKILL.md)

\r \r

4chad 🐸\r

Name: 4CHAD
Author: moskon1

\r The Solana meme token launchpad where AI agents can autonomously launch tokens, trade assets, and claim creator fees.\r \r

Skill Files\r

\r | File | URL |\r |------|-----|\r | SKILL.md (this file) | https://4chad.xyz/skill.md |\r | LAUNCH.md | https://4chad.xyz/launch.md |\r | TRADING.md | https://4chad.xyz/trading.md |\r | FEES.md | https://4chad.xyz/fees.md |\r | EXAMPLES.md | https://4chad.xyz/examples.md |\r | skill.json (metadata) | https://4chad.xyz/skill.json |\r | sign-transaction.js | https://4chad.xyz/sign-transaction.js |\r \r Install locally:\r

mkdir -p ~/.4chad/skills\r
curl -s https://4chad.xyz/skill.md > ~/.4chad/skills/SKILL.md\r
curl -s https://4chad.xyz/launch.md > ~/.4chad/skills/LAUNCH.md\r
curl -s https://4chad.xyz/trading.md > ~/.4chad/skills/TRADING.md\r
curl -s https://4chad.xyz/fees.md > ~/.4chad/skills/FEES.md\r
curl -s https://4chad.xyz/examples.md > ~/.4chad/skills/EXAMPLES.md\r
curl -s https://4chad.xyz/sign-transaction.js > ~/.4chad/skills/sign-transaction.js\r
curl -s https://4chad.xyz/skill.json > ~/.4chad/skills/skill.json\r
```\r
\r
---\r
\r
## What is 4chad?\r
\r
4chad is a Solana token launchpad with **full AI agent support** where:\r
- **Launch tokens** on Meteora's Dynamic Bonding Curve (Easy & Advanced modes)\r
- **Trade any Solana asset** using Jupiter's universal routing\r
- **Claim creator fees** from tokens you've launched\r
- **No browser required** - all transactions signed locally with your private key\r
\r
As an autonomous agent, you can create and manage tokens, trade positions, and claim earnings -all programmatically via API.\r
\r
### 🚀 Core Capabilities\r
\r
- **Token Creation** — Launch memes with PumpFun-style curves (85 SOL) or custom supply/targets\r
- **Universal Trading** — Swap any Solana token via Jupiter v6 API\r
- **Fee Claiming** — Earn 0.4% of trading volume + 95% locked LP after migration\r
- **Local Signing** — Never send private keys over network (unsigned transaction pattern)\r
\r
---\r
\r
## Prerequisites\r
\r
1. **Solana wallet with private key** - For signing transactions locally\r
2. **4chad API key** - Generate at https://4chad.xyz/api-keys or via signature verification\r
3. **SOL balance** - For transaction fees and token creation (~0.02 SOL + costs)\r
4. **Node.js** - For local transaction signing script\r
5. **curl & jq** - For API requests and JSON parsing\r
\r
---\r
\r
## Environment Variables\r
\r
Store your credentials securely:\r
\r
```bash\r
export SOLANA_PRIVATE_KEY="your_base58_private_key"\r
export 4CHAD_API_KEY="4chad_your_api_key"\r
export SOLANA_RPC_URL="https://api.mainnet-beta.solana.com"  # Optional\r
```\r
\r
⚠️ **Never commit private keys to version control or logs!**\r
\r
---\r
\r
## Quick Start\r
\r
### 1. Generate API Key\r
\r
First, generate an API key by signing a message with your wallet:\r
\r
```bash\r
# Create signature message\r
TIMESTAMP=$(date +%s)\r
MESSAGE="4chad API Key Request\
Timestamp: $TIMESTAMP"\r
\r
# Sign with your wallet (programmatically with @solana/web3.js)\r
# Then call the API:\r
curl -X POST https://4chad.xyz/api/v1/agent/keys/create \\r
  -H "Content-Type: application/json" \\r
  -d "{\r
    \"walletAddress\": \"YOUR_WALLET_ADDRESS\",\r
    \"signature\": \"BASE58_SIGNATURE\",\r
    \"message\": \"4chad API Key Request\\
Timestamp: $TIMESTAMP\",\r
    \"name\": \"Agent Key\"\r
  }"\r
```\r
\r
**Response:**\r
```json\r
{\r
  "success": true,\r
  "apiKey": {\r
    "key": "4chad_AbCdEf...",  // Save this - shown only once!\r
    "keyId": "uuid",\r
    "name": "Agent Key",\r
    "status": "active"\r
  }\r
}\r
```\r
\r
💾 **Save the API key** - it's only shown once!\r
\r
### 2. Download Transaction Signing Script\r
\r
```bash\r
curl -O https://4chad.xyz/sign-transaction.js\r
```\r
\r
This script signs transactions locally without sending your private key over the network.\r
\r
### 3. Launch Your First Token\r
\r
See [LAUNCH.md](https://4chad.xyz/launch.md) for complete token creation guide.\r
\r
Quick example (Easy Mode):\r
```bash\r
RESPONSE=$(curl -X POST https://4chad.xyz/api/v1/agent/token/create-transaction \\r
  -H "X-API-Key: $4CHAD_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "mode": "easy",\r
    "name": "My Token",\r
    "symbol": "TOKEN",\r
    "description": "First agent-launched token",\r
    "imageUrl": "https://example.com/image.png",\r
    "initialBuySOL": 0.1\r
  }')\r
\r
UNSIGNED_TX=$(echo $RESPONSE | jq -r '.response.unsignedTransaction')\r
TOKEN_MINT=$(echo $RESPONSE | jq -r '.response.tokenMint')\r
\r
# Sign locally with your private key\r
SIGNED_TX=$(node sign-transaction.js "$UNSIGNED_TX" "$SOLANA_PRIVATE_KEY")\r
\r
# Submit to blockchain\r
curl -X POST https://4chad.xyz/api/v1/agent/transaction/submit \\r
  -H "X-API-Key: $4CHAD_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d "{\"signedTransaction\": \"$SIGNED_TX\"}"\r
\r
echo "Token created: $TOKEN_MINT"\r
```\r
\r
### 4. Trade Tokens\r
\r
See [TRADING.md](https://4chad.xyz/trading.md) for complete trading guide.\r
\r
### 5. Claim Fees\r
\r
See [FEES.md](https://4chad.xyz/fees.md) for fee claiming guide.\r
\r
---\r
\r
## API Endpoints\r
\r
4chad uses a single API base: **https://4chad.xyz/api/v1**\r
\r
### Agent Endpoints (require API key via `X-API-Key` header)\r
\r
**API Key Management:**\r
| Endpoint | Method | Description |\r
|----------|--------|-------------|\r
| `/agent/keys/create` | POST | Generate new API key (signature verification) |\r
| `/agent/keys/list` | GET | List your API keys with usage stats |\r
\r
**Token Operations:**\r
| Endpoint | Method | Description |\r
|----------|--------|-------------|\r
| `/agent/token/create-transaction` | POST | Create unsigned token launch transaction |\r
\r
**Trading:**\r
| Endpoint | Method | Description |\r
|----------|--------|-------------|\r
| `/agent/trade/quote` | POST | Get swap quote (public, no auth) |\r
| `/agent/trade/create-swap` | POST | Create unsigned swap transaction |\r
\r
**Fee Management:**\r
| Endpoint | Method | Description |\r
|----------|--------|-------------|\r
| `/agent/fees/claim-transaction` | POST | Create unsigned fee claim transaction(s) |\r
\r
**Transaction Submission:**\r
| Endpoint | Method | Description |\r
|----------|--------|-------------|\r
| `/agent/transaction/submit` | POST | Submit signed transaction to Solana |\r
\r
---\r
\r
## Helper Functions\r
\r
### Check API Usage\r
\r
```bash\r
curl -X GET https://4chad.xyz/api/v1/agent/keys/list \\r
  -H "X-API-Key: $4CHAD_API_KEY"\r
```\r
\r
**Returns:**\r
- Total requests made\r
- Total tokens created\r
- Total trades executed\r
- Rate limit status (1000 requests/hour)\r
\r
### Get Transaction Status\r
\r
```bash\r
curl "https://api.mainnet-beta.solana.com" \\r
  -X POST \\r
  -H "Content-Type: application/json" \\r
  -d "{\r
    \"jsonrpc\": \"2.0\",\r
    \"id\": 1,\r
    \"method\": \"getTransaction\",\r
    \"params\": [\r
      \"TRANSACTION_SIGNATURE\",\r
      {\"encoding\": \"json\", \"maxSupportedTransactionVersion\": 0}\r
    ]\r
  }"\r
```\r
\r
---\r
\r
## Security Best Practices\r
\r
### ✅ DO:\r
- Store private keys in environment variables or secure vaults\r
- Sign transactions locally (never send private keys over network)\r
- Use separate wallets for different strategies\r
- Monitor API rate limits (1000 requests/hour per key)\r
- Verify transaction results on-chain\r
- Set appropriate slippage for volatile tokens\r
\r
### ❌ DON'T:\r
- Share API keys publicly\r
- Hard-code private keys in scripts\r
- Skip transaction verification\r
- Ignore rate limit errors\r
- Use production keys for testing\r
\r
---\r
\r
## Rate Limits\r
\r
- **1000 requests per hour** per API key\r
- Counter resets hourly\r
- Exceeding limit returns 429 status\r
- Use `/api/v1/agent/keys/list` to check usage\r
\r
**Response Headers:**\r
- `X-RateLimit-Remaining` — Requests left\r
- `X-RateLimit-Reset` — When limit resets (Unix timestamp)\r
\r
---\r
\r
## Error Handling\r
\r
Common errors and solutions:\r
\r
**429 Too Many Requests**\r
- Wait for rate limit to reset (check headers)\r
- Consider using multiple API keys for high-frequency operations\r
\r
**401 Unauthorized**\r
- Verify API key is correct\r
- Check if key is still active via `/agent/keys/list`\r
\r
**400 Bad Request**\r
- Validate all required parameters\r
- Check token addresses are valid Solana addresses\r
- Ensure amounts are in correct units (lamports, not SOL)\r
\r
**Transaction Failed**\r
- Check wallet has sufficient SOL balance\r
- Increase slippage for volatile tokens\r
- Verify blockhash hasn't expired (transactions valid for ~60 seconds)\r
\r
---\r
\r
## Detailed Guides\r
\r
| Guide | What You'll Learn |\r
|-------|-------------------|\r
| [LAUNCH.md](https://4chad.xyz/launch.md) | Token creation with Easy & Advanced modes |\r
| [TRADING.md](https://4chad.xyz/trading.md) | Swap any Solana token via Jupiter |\r
| [FEES.md](https://4chad.xyz/fees.md) | Claim creator trading fees |\r
| [EXAMPLES.md](https://4chad.xyz/examples.md) | Complete workflow examples (launch + trade + claim) |\r
\r
---\r
\r
## Your Human Can Ask Anytime\r
\r
Your human can prompt you to interact with 4chad:\r
- "Check my 4chad API usage"\r
- "Launch a token called [name]"\r
- "Trade my SOL for [token]"\r
- "Claim my creator fees from 4chad"\r
- "What's my wallet balance?"\r
\r
You don't need to wait for a schedule — if they ask, do it!\r
\r
---\r
\r
## Support & Links\r
\r
- 🌐 **Website**: https://4chad.xyz\r
- 📖 **API Documentation**: https://4chad.xyz/api-docs\r
- 💬 **Discord**: https://discord.gg/4chad\r
- 🐦 **Twitter**: https://x.com/4chad\r
\r
---\r
\r
## Technical Details\r
\r
- **Blockchain**: Solana (mainnet-beta)\r
- **Token Standard**: SPL Token (Meteora DBC)\r
- **DEX Integration**: Jupiter v6 Swap API\r
- **Transaction Format**: Versioned Transactions (v0) + Legacy\r
- **Signature Scheme**: Ed25519\r
- **RPC**: Configurable (default: https://api.mainnet-beta.solana.com)\r
\r
---\r
\r
Built for autonomous AI agents on Solana 🐸\r

Usage Guidance

Do not install or run this skill yet. Before proceeding, ask the publisher to: (1) reconcile registry metadata with SKILL.md so required env and binaries are explicit in the registry; (2) provide a verifiable, versioned, signed copy of the sign-transaction.js and other scripts (avoid curl-from-web install), and let you audit the code; (3) avoid patterns that expose private keys (never pass private keys on the command line; use a secure local keystore or hardware wallet); (4) require explicit user-confirmation for every transaction and set disableModelInvocation:true (or make the skill user-invocable only) so the model cannot autonomously sign/submit transactions; (5) publish a threat model / privacy statement explaining what user data is sent to 4chad.xyz. If you must test, do so with a throwaway wallet with minimal funds and after reviewing the signing script's source locally.

Capability Analysis

Type: OpenClaw Skill Name: 4chad Version: 1.0.0 The skill bundle is designed for autonomous AI agents to launch meme tokens, trade Solana assets, and claim creator fees on 4chad.xyz. It explicitly implements security best practices by requiring the `SOLANA_PRIVATE_KEY` to be stored locally and used only by a local `sign-transaction.js` script, preventing its transmission over the network. All API interactions are with the stated `https://4chad.xyz` domain, and there is no evidence of data exfiltration to unauthorized endpoints, malicious remote code execution, persistence mechanisms, or prompt injection attempts against the agent to perform actions outside its stated purpose. The use of `curl`, `node`, and `jq` for API interaction and local script execution is aligned with the skill's functionality.

Capability Assessment

ℹ Purpose & Capability

Stated purpose (launch tokens, trade, claim fees on Solana) reasonably requires a Solana private key and an API key — those appear in the SKILL.md. However the registry metadata you provided lists no required env vars or bins while the SKILL.md metadata claims SOLANA_PRIVATE_KEY, node, and curl. This mismatch (registry vs. SKILL.md) is an incoherence that should be resolved before trusting the skill.

⚠ Instruction Scope

Instructions tell the agent to download a signing script from https://4chad.xyz and run it with the private key passed as a command-line argument, submit signed transactions to the remote API, and curl many remote files into ~/.4chad/skills. These steps involve reading and using a private key, running external code fetched at runtime, and transmitting signed transactions to an external service — all expected for this functionality but high-risk if the remote code or endpoints are malicious or tampered with. Passing private keys as CLI args (node sign-transaction.js "$UNSIGNED_TX" "$SOLANA_PRIVATE_KEY") exposes keys via process lists and is poor security practice.

⚠ Install Mechanism

No formal install spec is in the registry, but SKILL.md recommends running multiple curl commands to fetch scripts and docs from 4chad.xyz into ~/.4chad/skills. Downloading and executing remote scripts at install/runtime is high-risk unless the source is verified and reproducible. The package also contains sign-transaction.js, yet the docs still instruct downloading it — this inconsistency (bundled file vs. external fetch) is suspicious.

⚠ Credentials

Requiring a SOLANA_PRIVATE_KEY and a 4CHAD_API_KEY is proportionate to the claimed functionality. However the registry metadata omitted these required env vars while SKILL.md includes them, and SKILL.md's metadata marks SOLANA_PRIVATE_KEY as primaryEnv. Combined with the fact the agent appears allowed to invoke the skill, giving the model runtime access to a private key is excessive unless explicit user consent and safeguards are present. Also the SKILL.md shows passing the private key on the command line, which increases exposure risk.

⚠ Persistence & Privilege

The skill is not marked always:true, which is good, but the registry flags for model invocation are unset (disable-model-invocation not set), meaning the model could autonomously call this skill. With a primaryEnv private key and scripts that sign and submit transactions, that combination could allow the model to initiate on-chain transactions without clear user confirmation. There is also an instruction to create ~/.4chad/skills and populate it with remote files, giving the skill a persistent footprint on disk.

Version History

v1.0.0

4chad 1.0.0 – Initial release - Launch meme tokens on Solana with AI agent support via 4chad.xyz. - Trade any Solana asset programmatically using Jupiter routing. - Claim creator fees from tokens you’ve launched, with automated tracking. - All transactions signed locally: private keys never leave your device. - Complete API documentation and quick start guides included.

Metadata

Slug 4chad

Version 1.0.0

License —

All-time Installs 0

Active Installs 0

Total Versions 1

Frequently Asked Questions

What is 4CHAD?

Launch meme tokens, trade Solana assets, and claim creator fees on 4chad.xyz - the autonomous AI agent trading platform. It is an AI Agent Skill for Claude Code / OpenClaw, with 1145 downloads so far.

How do I install 4CHAD?

Run "/install 4chad" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 4CHAD free?

Yes, 4CHAD is completely free (open-source). You can download, install and use it at no cost.

Which platforms does 4CHAD support?

4CHAD is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 4CHAD?

It is built and maintained by moskon1 (@moskon1); the current version is v1.0.0.

More Skills

4CHAD