← Back to Skills Marketplace
277
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install onchor
Description
API marketplace for AI agents. Browse, buy, sell APIs, and call them — via CLI, MCP, or raw HTTP. USDC on Solana.
Usage Guidance
This skill appears to be what it says: an API marketplace accessible by curl or via an optional onchor npm CLI. Before installing or using it: 1) Treat the 'oat_' agent_token like any API secret — avoid exposing it in public logs and preferably store it in a secure secret store rather than broad agent memory. 2) If you plan to install the onchor CLI (npm), review the package source (npm page / GitHub repo) and run it in an isolated environment (container/VM) if you don't trust it — npm packages execute code on install/run. 3) Funding the returned wallet_address requires on‑chain USDC — ensure you control the funding wallet and never paste private keys into the CLI or elsewhere. 4) If you only need read/call functionality and want minimal risk, use the provided curl examples rather than installing the CLI. 5) If you want higher assurance, ask the publisher for the CLI source URL and verify the package checksum/signature before use.
Capability Analysis
Type: OpenClaw Skill
Name: onchor
Version: 2.0.0
The skill provides a legitimate interface for the Onchor API marketplace (onchor.xyz), enabling AI agents to discover, purchase, and sell APIs using USDC on Solana. The instructions in SKILL.md are consistent with the stated purpose, covering registration, authentication via 'oat_' tokens, and standard API interactions using curl or a dedicated CLI/MCP server. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
The skill describes an API marketplace and provides raw HTTP curl examples that use the documented api.onchor.xyz endpoints; requiring curl (and optionally an npm CLI) is coherent with that purpose. The Solana USDC mint and wallet flows described match the stated 'USDC on Solana' functionality.
Instruction Scope
SKILL.md stays within marketplace operations (register, browse, purchase, call, list services). It instructs the agent/user to save an 'oat_' agent_token in memory/notes and to run third‑party CLI commands (npm/npx) if desired. Asking the agent to persist an auth token to its memory is expected for subsequent calls but is a sensitive action and should be done with care.
Install Mechanism
The skill is instruction-only (no install spec). The doc recommends installing/downloading the onchor CLI via npm (npm install -g onchor / npx onchor). This is not enforced by the skill metadata but is suggested — installing an npm package will execute third‑party code, so the package should be verified before installation. No direct downloads/extracts or unknown URLs are embedded in the SKILL.md.
Credentials
The skill declares no required env vars or external credentials. Runtime authentication uses an agent_token ('oat_') that the service issues after registration — this is proportionate. There are no requests for unrelated secrets, cloud credentials, or system config paths.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges or modify other skills. The only persistence implied is the agent storing the issued 'oat_' token in its memory/notes, which is a normal requirement for an API client but is sensitive.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install onchor - After installation, invoke the skill by name or use
/onchor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
Add CLI & MCP server support. Agents can now use npx onchor or MCP tools instead of raw curl.
v1.0.0
Initial release of Onchor API marketplace skill.
- Enables AI agents to autonomously register, fund with USDC, discover, buy, and sell APIs using Solana.
- Provides step-by-step usage for registration, funding, API browsing, purchasing, and calling.
- Full seller workflow: create and manage listings, add pricing plans, receive revenue, and access analytics.
- Uses API keys for agent authentication and offers detailed example commands for every action.
- Designed for secure proxying of API calls through the Onchor gateway.
Metadata
Frequently Asked Questions
What is Onchor Clawhub?
API marketplace for AI agents. Browse, buy, sell APIs, and call them — via CLI, MCP, or raw HTTP. USDC on Solana. It is an AI Agent Skill for Claude Code / OpenClaw, with 277 downloads so far.
How do I install Onchor Clawhub?
Run "/install onchor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Onchor Clawhub free?
Yes, Onchor Clawhub is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Onchor Clawhub support?
Onchor Clawhub is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Onchor Clawhub?
It is built and maintained by sosa782 (@sosa782); the current version is v2.0.0.
More Skills