← Back to Skills Marketplace
nealo

Codex Agentic Gateway

by Neal O'Grady · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
115
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install codex-gateway
Description
Use when the user wants to query the Codex Supergraph and the server returns a 402 challenge. Pays per query via the MPP 402 challenge flow. Only supports qu...
README (SKILL.md)

Codex Machine Payment Protocol (MPP)

Use this skill when the Codex Supergraph returns a 402 Payment Required response. The MPP challenge flow lets you pay per query without needing an API key.

HTTP endpoint https://graph.codex.io/graphql
Credential header Authorization: Payment \x3Cbase64url-credential>

How it works

  1. Send a GraphQL query (no credential).
  2. Server returns 402 Payment Required with WWW-Authenticate: Payment ... challenges.
  3. Client solves one challenge and retries with Authorization: Payment \x3Ccredential>.
  4. Server returns GraphQL data + Payment-Receipt header.

Constraints

  • Query only. Mutations and subscriptions return 403 in MPP mode.
  • If a valid API key or bearer token is also present, API auth takes precedence.

Rules

  • Never print raw credentials.
  • Only use MPP for query operations.
  • Before constructing any query, read references/query-templates.md below for the correct GraphQL schema. Do not guess query or field names.

References

File Purpose
../codex-supergraph/references/query-templates.md GraphQL query schema and examples — read before constructing queries
../codex-supergraph/references/gotchas.md Common query failure points
references/gotchas.md MPP-specific failure points
rules/wallets.md Wallet setup: tempo wallet/request (Tempo)
references/mpp-flow.md Auth matrix, challenge details, error codes
Usage Guidance
This skill appears to do what it says (handle Codex 402 payment challenges), but take these precautions before installing or using it: - Do not blindly run curl ... | bash. Inspect the installer script at https://tempo.xyz/install first or prefer installing Tempo from a trusted package source or OS package manager. - The SKILL metadata did not list the Tempo CLI as a required binary even though the docs depend on it — ensure you have a trusted Tempo binary before relying on the skill. - Understand that using the skill will require funding a wallet (real USDC on Tempo) and performing payments on behalf of queries. Confirm cost and limits with the service. - Verify the external reference files (especially ../codex-supergraph/references/query-templates.md) exist and match the GraphQL schema before constructing queries — the skill explicitly warns not to guess field names. - If you are not comfortable auditing the tempo installer or giving a CLI permission to sign transactions, do not install or run it. Consider requesting an implementation that uses a vetted package or an alternative payment flow. If you want, provide the actual installer script URL contents (or the full tempo installer) and I can help inspect it for obvious issues; that would raise confidence in the assessment.
Capability Assessment
Purpose & Capability
The skill is described as an MPP (402) gateway for GraphQL queries and the instructions consistently focus on that flow. However, SKILL metadata lists no required binaries while the instructions rely on the Tempo CLI for Tempo-chain challenges — a missing declared dependency (incoherence).
Instruction Scope
Instructions stay within the stated purpose (construct query, handle 402, use Tempo to sign/pay). They tell the agent to run tempo wallet/login/whoami/request which are appropriate for the flow. Two caveats: (1) they instruct reading an external reference at ../codex-supergraph/references/query-templates.md (outside the packaged files) — if that file is not present the guidance may be incomplete; (2) the skill implicitly expects the user to fund a wallet and perform on-chain payments (expected for MPP but operationally significant).
Install Mechanism
The docs recommend installing Tempo with curl -fsSL https://tempo.xyz/install | bash. Piping a remote script to bash is high-risk because it executes code fetched from a remote host; the domain is not a standard audited package host (e.g., GitHub releases, official distro repos). This is the largest security concern.
Credentials
The skill declares no environment variables or credentials and the instructions do not request unrelated secrets. Wallet access and funding are required by design for MPP, and the skill explicitly warns not to print private keys.
Persistence & Privilege
The skill does not request persistent presence (always:false) and contains no instructions to modify other skills or system-wide agent settings. It doesn't require elevated privileges in the SKILL.md.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install codex-gateway
  3. After installation, invoke the skill by name or use /codex-gateway
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
codex-gateway 1.0.0 - Initial release enables pay-per-query access to the Codex Supergraph via MPP 402 challenge flow. - Supports GraphQL queries only; mutations and subscriptions are not available through this skill. - No API key required—payment credentials are handled per request. - Consult provided query templates and reference guides before constructing queries. - Includes documentation on endpoints, headers, authentication flow, and usage constraints.
Metadata
Slug codex-gateway
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Codex Agentic Gateway?

Use when the user wants to query the Codex Supergraph and the server returns a 402 challenge. Pays per query via the MPP 402 challenge flow. Only supports qu... It is an AI Agent Skill for Claude Code / OpenClaw, with 115 downloads so far.

How do I install Codex Agentic Gateway?

Run "/install codex-gateway" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Codex Agentic Gateway free?

Yes, Codex Agentic Gateway is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Codex Agentic Gateway support?

Codex Agentic Gateway is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Codex Agentic Gateway?

It is built and maintained by Neal O'Grady (@nealo); the current version is v1.0.0.

💬 Comments