← Back to Skills Marketplace
byungkyu

API Gateway

by byungkyu · GitHub ↗ · v1.0.124 · MIT-0
cross-platform ✓ Security Clean
82991
Downloads
389
Stars
621
Active Installs
125
Versions
Install in OpenClaw
/install api-gateway
Description
Connect to external services through Maton-managed API routes. Use this skill only after the user names the target app, account, and task. Start with read/li...
Usage Guidance
Install only if you trust Maton with routed access to the external accounts you connect. Use least-privilege OAuth scopes, verify the exact connection and resource before each action, require explicit confirmation before writes or sharing, and delete connections when the task is complete.
Capability Assessment
Purpose & Capability
The stated purpose is to route user-requested calls to connected external services, and the documented capabilities, including files, messaging, calendar, billing, webhooks, and business apps, align with that purpose.
Instruction Scope
The skill has broad authority across many services, but it explicitly requires the user to name the app, account, and task, start with read/list verification where possible, and obtain explicit approval for modifying operations.
Install Mechanism
Installation uses the Maton CLI via npm or Homebrew and requires a Maton API key; this is expected for the gateway model and the skill gives credential-handling guidance.
Credentials
Network access, OAuth/API-key connections, and third-party data transfer are necessary for this integration skill, but users should understand that connected services may expose sensitive account data through the gateway.
Persistence & Privilege
Service connections can persist in the Maton account until deleted, but connection creation requires explicit approval and the skill advises deleting unused connections and using least-privilege scopes.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install api-gateway
  3. After installation, invoke the skill by name or use /api-gateway
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.124
- Removed the file skill-card.md. - No other functional or documentation changes in this version.
v1.0.123
No visible changes were detected in this release. - Version bumped to 1.0.123, but no file modifications or user-facing changes present. - All usage protocols, examples, and documentation remain unchanged.
v1.0.122
No user-facing changes in this version. - No file changes detected between versions 1.0.121 and 1.0.122.
v1.0.121
No functional or documentation changes in this release. - Version bump to 1.0.121 with no file or content updates detected.
v1.0.120
No user-facing changes in this release; no file or documentation changes detected.
v1.0.119
No user-visible changes in this version; documentation and file contents remain unchanged.
v1.0.118
- Removed the references/meta-ads/README.md file from the project. - No user-facing changes to core skill behavior or documentation. - Use this version if you no longer need the Meta Ads reference file included in your distribution.
v1.0.117
No user-facing changes in this version. - Version bumped to 1.0.117. - No file or documentation changes detected.
v1.0.116
- Stricter user consent protocols for non-GET (write, modify, or delete) API calls; require explicit user approval with all request details before proceeding. - Updated instructions: Never infer approval for non-GET requests from the original user request—always prompt for confirmation first. - New connection creation now explicitly requires user approval specifying the service; do not create connections without user direction. - Scope selection guidance tightened: during OAuth, choose only scopes necessary for the current task. - Reminders to immediately remove connections after their use if no longer needed.
v1.0.115
- Clarified security and usage protocols: all write operations are now blocked by default and require explicit user confirmation with resource details and intended effect. - Expanded authentication and credential safety instructions, emphasizing key secrecy and minimum-privilege principles. - Added stricter guidance for read/list-first workflow and explicit confirmation before any modification or high-impact operation. - Reordered and updated instructions for connection management and specifying connections. - Improved "Routing" and "Security & Permissions" sections for greater clarity and caution.
v1.0.114
- Added explicit instructions to require user confirmation before executing non-read (POST, PUT, PATCH, DELETE) operations, especially those that are destructive, public-facing, financial, or purchase-related. - Clarified that all route invocations must happen only after the user specifies the exact app, account, and task. - Updated Routing section for stronger language around operation safety, explicit confirmation, and context verification. - No functional or CLI/API changes; documentation and security usage guidance improvements only.
v1.0.113
- Added CLI usage examples for quick start, connection management, and specifying connections. - Documented CLI installation methods (NPM, Homebrew). - Updated authentication and connection management sections to include CLI and Python usage side-by-side. - Added five new reference files for Google Apps Script, Google Tag Manager, LinkedIn Community Management, YouTube Analytics, and YouTube Reporting. - Clarified the need to specify connections using CLI flags (`--connection`) or headers.
v1.0.112
- Updated route usage instructions: Section on base URL and path construction is simplified and clarified. - Emphasized use of app-specific reference and read/list calls before making any changes. - Minor change in the description field, stressing to always consult the app-specific reference before changes. - No functional or interface changes; documentation is now clearer and more concise.
v1.0.111
- Clarified skill purpose and usage rules, emphasizing starting with read/list calls and explicit user confirmation for changes. - Updated documentation to specify that API route paths must begin with the connection's app name (e.g., `/google-mail/...`) for correct routing. - Improved authentication and security guidance, including the handling of API keys and scope minimization. - Enhanced change operation requirements: now require confirmation of the exact app, connection, resource, payload, and expected result before any non-read action. - Streamlined language throughout for readability and precision.
v1.0.110
Version 1.0.110 – Security and confirmation requirements clarified - Updated the description to explicitly require verification of connection and target resource, plus explicit user confirmation before performing any changes. - Clarified language regarding confirmation for data-modifying operations. - Revised authentication and compatibility notes for clarity. - No functional changes to code examples or API behavior.
v1.0.109
- Updated security guidance to emphasize specifically choosing the intended connection before taking actions. - Clarified that the MATON_API_KEY should be read from the environment and never printed or logged. - Improved instructions throughout to reinforce use only for user-identified app, account, and task. - Minor language clarifications in authentication and security sections.
v1.0.108
- Clarified security instructions: emphasized to keep MATON_API_KEY secret, never log or print it, and always use the environment for the Authorization header. - Updated recommendation to use Maton-Connection header when multiple connections exist for the same service. - Improved descriptions around connection targeting and account selection based on the user's choice. - No API or functional changes; documentation only.
v1.0.107
Version 1.0.107 - Clarified and simplified the skill description, emphasizing required user selection and security. - Updated guidance about API route formatting and use of the app identifier in paths. - Improved security messaging: clearer instructions on API key secrecy and prudent connection management. - Streamlined and clarified examples for authentication and connection management. - Updated the "Supported Services" table headers for greater clarity. - Removed redundant or overly detailed content to make documentation more concise and user-friendly.
v1.0.106
- Clarified description to emphasize routing only when the user specifies a service, account, and task. - Refined language in the description for greater precision and clarity on usage. - No functionality or API changes; documentation improvements only.
v1.0.105
- Updated the skill description to clarify that API access is provided “when the user names a specific service and task.” - Clarified authentication details: Maton API key only identifies the Maton account (not third-party services). - Tweaked documentation wording for base URL section and read-only route examples for better clarity. - No functional or API changes; documentation improvements only.
Metadata
Slug api-gateway
Version 1.0.124
License MIT-0
All-time Installs 2490
Active Installs 621
Total Versions 125
Frequently Asked Questions

What is API Gateway?

Connect to external services through Maton-managed API routes. Use this skill only after the user names the target app, account, and task. Start with read/li... It is an AI Agent Skill for Claude Code / OpenClaw, with 82991 downloads so far.

How do I install API Gateway?

Run "/install api-gateway" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is API Gateway free?

Yes, API Gateway is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does API Gateway support?

API Gateway is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created API Gateway?

It is built and maintained by byungkyu (@byungkyu); the current version is v1.0.124.

💬 Comments