Description

Gate MCP and Gate skills installer for Codex. Use when the user asks to add Gate MCP or skills to Codex. Triggers on 'install Gate MCP Codex', 'Gate skills C...

README (SKILL.md)

Gate One-Click Installer (Codex: MCP + Skills)

Name: Gate Codex One-Click Installer (MCP + Skills)
Author: gate-exchange

General Rules

⚠️ STOP — You MUST read and strictly follow the shared runtime rules before proceeding. Do NOT select or call any tool until all rules are read. These rules have the highest priority. → Read gate-runtime-rules.md

Only call MCP tools explicitly listed in this skill. Tools not documented here must NOT be called, even if they exist in the MCP server.

MCP Dependencies

Required MCP Servers

MCP Server	Status
Gate (main)	✅ Required
Gate-Dex	✅ Required
Gate-Info	✅ Required
Gate-News	✅ Required

Authentication

API Key Required: No

Installation Check

Required: Gate (main), Gate-Dex, Gate-Info, Gate-News
Install: Run installer skill for your IDE
- Cursor: gate-mcp-cursor-installer
- Codex: gate-mcp-codex-installer
- Claude: gate-mcp-claude-installer
- OpenClaw: gate-mcp-openclaw-installer

MCP Mode

Read and strictly follow references/mcp.md, then execute this installer workflow.

SKILL.md keeps product scope, install behavior, and user-facing guidance.
references/mcp.md is the authoritative execution layer for preflight checks, config merge safety, and install verification steps.

CEX MCP modes

See gate-mcp: Local = stdio gate-mcp with API keys; Remote Public = https://api.gatemcp.ai/mcp (no auth); Remote Exchange = https://api.gatemcp.ai/mcp/exchange (Gate OAuth2). Dex/Info/News are separate endpoints on the same host.

Resources

Type	Name	Endpoint / Config
MCP	Gate (`main`)	stdio `command = "npx"`, `args = ["-y", "gate-mcp"]`, optional `env` for keys
MCP	gate-cex-pub (`cex-public`)	`url = "https://api.gatemcp.ai/mcp"`
MCP	gate-cex-ex (`cex-exchange`)	`url = "https://api.gatemcp.ai/mcp/exchange"` (OAuth2 in client)
MCP	gate-dex (`dex`)	`https://api.gatemcp.ai/mcp/dex`, `http_headers` x-api-key + Bearer token
MCP	gate-info (`info`)	`https://api.gatemcp.ai/mcp/info`
MCP	gate-news (`news`)	`https://api.gatemcp.ai/mcp/news`
Skills	gate-skills	https://github.com/gate/gate-skills (installs all under `skills/`)

Behavior Rules

Default: When the user does not specify which MCPs to install, install all MCPs (main, cex-public, cex-exchange, dex, info, news) + all gate-skills.
Selectable MCPs: Users can choose to install only specific MCPs; follow the user's selection.
Skills: Unless --no-skills is passed, always install all skills from the gate-skills repository's skills/ directory.

Installation Steps

1. Confirm User Selection (MCPs)

If the user does not specify which MCPs → install all: main, cex-public, cex-exchange, dex, info, news.
If the user specifies "only install xxx" → install only the specified MCPs.

2. Write Codex MCP Config

User-level config: ~/.codex/config.toml (or $CODEX_HOME/config.toml). Creates the file and writes [mcp_servers] with corresponding tables if it does not exist.
If it already exists, merge: only append Gate MCP sections that don't already exist; do not overwrite existing config.
Config details:
- Gate (main): stdio, command / args / optional env for GATE_API_KEY / GATE_API_SECRET
- gate-cex-pub / gate-cex-ex: url as above (no http_headers for remote CEX)
- gate-dex: url + http_headers for x-api-key and Bearer
- gate-info / gate-news: url

3. Install gate-skills (all)

Pull all subdirectories under skills/ from https://github.com/gate/gate-skills and copy them to $CODEX_HOME/skills/ (default ~/.codex/skills/).
Add --no-skills when using the script to install MCP only without skills.

4. Post-Installation Prompt

Inform the user of the installed MCP list and "all gate-skills have been installed" (unless --no-skills was used).
Prompt to restart Codex to load MCP servers and skills.
Local API Key: For Gate (main) trading via API keys → https://www.gate.com/myaccount/profile/api-key/manage
gate-cex-ex: Complete Gate OAuth2 when Codex prompts on first use.
Gate-Dex: If auth required, open https://web3.gate.com/ for wallet, then complete OAuth via the assistant link.

Script

Use the scripts/install.sh in this skill directory for one-click installation.

Usage:
./scripts/install.sh [--mcp main|cex-public|cex-exchange|dex|info|news] ... [--no-skills]
Installs all MCPs when no --mcp is passed; pass multiple --mcp to install only specified ones; --no-skills installs MCP only.
The DEX x-api-key is fixed as MCP_AK_8W2N7Q and written to config.toml.

After downloading this skill from GitHub, run from the repository root:
bash skills/gate-mcp-codex-installer/scripts/install.sh
Or (MCP only):
bash skills/gate-mcp-codex-installer/scripts/install.sh --no-skills

Usage Guidance

This installer does what it claims (wires MCP entries into Codex config and installs gate-skills), but take precautions: 1) Backup ~/.codex/config.toml and your existing $CODEX_HOME/skills/ before running. 2) If you only want config changes, use --no-skills so the script won't clone/copy hundreds of third-party skills. 3) Inspect the cloned gate-skills repository locally (or clone manually) before copying to ensure you trust the code being installed. 4) Note the hardcoded DEX API key (MCP_AK_8W2N7Q) and the Authorization = "Bearer ${GATE_MCP_TOKEN}" placeholder — ask the maintainer how GATE_MCP_TOKEN is obtained and whether that fixed key is intended for production. 5) Be aware the script may attempt a global npm install (npm install -g npx) which modifies your system environment and may require privileges. 6) If unsure, run the script in an isolated environment (container or VM) or set CODEX_HOME to a temporary path so you can validate outcomes before changing your real Codex configuration.

Capability Analysis

Type: OpenClaw Skill Name: gate-mcp-codex-installer Version: 1.0.2 The skill 'gate-mcp-codex-installer' automates the setup of MCP servers but performs high-risk actions such as requesting sensitive financial API keys (GATE_API_KEY/SECRET) and executing remote code via 'npx' and 'git clone' in 'scripts/install.sh'. It also modifies the local 'config.toml' and uses prompt injection in 'SKILL.md' to enforce strict execution rules. While these behaviors are aligned with the stated purpose of a crypto-tool installer, the combination of credential handling and remote execution poses a significant security risk.

Capability Assessment

ℹ Purpose & Capability

The name/description match the code: the script writes ~/.codex/config.toml entries and copies the gate-skills repository into $CODEX_HOME/skills. Requesting Node/npm/git and interacting with Codex config is coherent with an installer. However, installing 'all skills' (cloning and copying every subdirectory) is broad and can introduce arbitrary third-party code into the user's skills directory — this is expected for an installer but high-impact.

⚠ Instruction Scope

SKILL.md + install.sh operate only on CODEX_HOME (default ~/.codex) and the cloned gate-skills repo. They prompt the user for GATE_API_KEY/GATE_API_SECRET (only for Gate main) and then append/merge TOML fragments into config.toml. Surprising behaviors: 1) the script will rm -rf existing skill directories with the same name (overwrite without interactive confirmation), 2) the gate-dex TOML fragment includes an Authorization = "Bearer ${GATE_MCP_TOKEN}" placeholder but the installer never prompts for or sets GATE_MCP_TOKEN, and 3) the DEX x-api-key is hardcoded into the fragment (MCP_AK_8W2N7Q). There are no instructions to inspect cloned skills before copying.

ℹ Install Mechanism

The script clones a public GitHub repository (well-known host) and copies files locally — this is a normal install mechanism. The script will also attempt npm install -g npx if npx is missing, which modifies the system global npm state; that action is documented in the script but can be surprising and may require elevated privileges. No downloads from obscure/personal URLs are used.

⚠ Credentials

No required env vars are declared, which matches the metadata. The installer optionally asks interactively for GATE_API_KEY/GATE_API_SECRET and writes them into config.toml in plaintext if provided — expected but sensitive. Two items stand out: a fixed x-api-key (MCP_AK_8W2N7Q) is embedded into the gate-dex fragment, and the gate-dex fragment contains Authorization = "Bearer ${GATE_MCP_TOKEN}" but the installer does not capture or explain how GATE_MCP_TOKEN is obtained or set. The presence of an unresolved token placeholder and an embedded fixed key should be clarified.

ℹ Persistence & Privilege

The installer persistently modifies the user's Codex config and skills directory (default ~/.codex). It is not marked always: true and does not alter other skills' configs beyond copying/overwriting directories in $CODEX_HOME/skills. Because it can overwrite existing skill directories and append to config.toml, users should consider backing up those locations before running the script.

Version History

v1.0.2

- Added new `references/mcp.md` for authoritative technical install and safety specifications. - Updated SKILL.md: improved user-facing descriptions, clarified purpose, and moved execution, preflight, and verification details to the new reference file. - Install workflow guidance now directs implementers to strictly follow `references/mcp.md` for preflight, config merging, and verification. - No changes to the installer logic or script usage; default and advanced install behaviors unchanged.

v1.0.1

- Added initial implementation of gate-mcp-codex-installer skill and supporting files. - Supports one-click installation of all Gate MCP servers (local CEX, remote public/exchange, Dex/Info/News) and all gate-skills for Codex. - Provides selectable installation for specific MCPs and an option to skip skill installation. - Includes sample MCP configuration fragments and an installation script. - Added detailed documentation on MCP modes and authentication behaviors.

v1.0.0

- Initial release: one-click installer for Gate MCP servers and all Gate Skills in Codex. - Installs all MCPs (main, dex, info, news) and every skill from the gate-skills repository by default. - Users can optionally choose specific MCP servers to install or skip skill installation with `--no-skills`. - Automatically updates `~/.codex/config.toml`, merging newly installed MCPs without overwriting existing configuration. - Provides clear post-install prompts for completing setup, including API key and authorization steps.

Metadata

Slug gate-mcp-codex-installer

Version 1.0.2

License MIT-0

All-time Installs 0

Active Installs 0

Total Versions 3

Frequently Asked Questions

What is Gate Codex One-Click Installer (MCP + Skills)?

Gate MCP and Gate skills installer for Codex. Use when the user asks to add Gate MCP or skills to Codex. Triggers on 'install Gate MCP Codex', 'Gate skills C... It is an AI Agent Skill for Claude Code / OpenClaw, with 318 downloads so far.

How do I install Gate Codex One-Click Installer (MCP + Skills)?

Run "/install gate-mcp-codex-installer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Gate Codex One-Click Installer (MCP + Skills) free?

Yes, Gate Codex One-Click Installer (MCP + Skills) is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Gate Codex One-Click Installer (MCP + Skills) support?

Gate Codex One-Click Installer (MCP + Skills) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Gate Codex One-Click Installer (MCP + Skills)?

It is built and maintained by Gate (@gate-exchange); the current version is v1.0.2.

More Skills

Gate Codex One-Click Installer (MCP + Skills)