← 返回 Skills 市场

[Outdated] CoinMarketCap Onchain Data

Name: [Outdated] CoinMarketCap Onchain Data
Author: bryan-cmc

作者 CoinMarketCap · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

439

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cmc-api-dex

功能描述

API reference for CoinMarketCap DEX endpoints including token lookup, pools, transactions, trending, and security analysis. Use this skill whenever the user...

使用说明 (SKILL.md)

CoinMarketCap DEX API

This skill covers CoinMarketCap's DEX (Decentralized Exchange) APIs for on-chain token data. Unlike CEX endpoints, these APIs fetch data directly from blockchain DEXs like Uniswap, PancakeSwap, and Raydium.

Authentication

All requests require an API key in the header:

curl -X GET "https://pro-api.coinmarketcap.com/v1/dex/platform/list" \
  -H "X-CMC_PRO_API_KEY: your-api-key"

Get your API key at: https://pro.coinmarketcap.com/login

Base URL

https://pro-api.coinmarketcap.com

POST vs GET Endpoints

Many DEX endpoints use POST for complex queries with body parameters. Always check the method:

GET endpoints pass parameters as query strings
POST endpoints pass parameters in JSON body with Content-Type: application/json

Common Use Cases

See use-cases.md for goal-based guidance on which endpoint to use:

Get DEX token price by contract address
Find a token's contract address by name
Get prices for multiple tokens at once
Check token security before trading
Find liquidity pools for a token
Find trending DEX tokens
Find today's biggest DEX gainers
Find newly launched tokens
Detect potential rug pulls (liquidity removal)
Get recent trades for a token
Get supported networks and DEXs
Get meme coins

API Overview

Endpoint	Method	Description	Reference
/v1/dex/token	GET	Token details by platform/address	tokens.md
/v1/dex/token/price	GET	Latest DEX price for a token	tokens.md
/v1/dex/token/price/batch	POST	Batch token prices	tokens.md
/v1/dex/token/pools	GET	Liquidity pools for a token	tokens.md
/v1/dex/token-liquidity/query	GET	Token liquidity over time	tokens.md
/v1/dex/tokens/batch-query	POST	Batch token metadata	tokens.md
/v1/dex/tokens/transactions	GET	Recent DEX transactions	tokens.md
/v1/dex/tokens/trending/list	POST	Trending DEX tokens	tokens.md
/v4/dex/pairs/quotes/latest	GET	Latest DEX pair quotes	pairs.md
/v4/dex/spot-pairs/latest	GET	DEX spot pairs listing	pairs.md
/v1/dex/platform/list	GET	List supported DEX platforms	platforms.md
/v1/dex/platform/detail	GET	Platform details	platforms.md
/v1/dex/search	GET	Search DEX tokens/pairs	platforms.md
/v1/dex/gainer-loser/list	POST	Top DEX gainers/losers	discovery.md
/v1/dex/liquidity-change/list	GET	Tokens with liquidity changes	discovery.md
/v1/dex/meme/list	POST	Meme tokens on DEX	discovery.md
/v1/dex/new/list	POST	Newly discovered DEX tokens	discovery.md
/v1/dex/security/detail	GET	Token security/risk signals	security.md

Common Workflows

Get DEX Token Information

Search for token: /v1/dex/search?keyword=PEPE
Get token details: /v1/dex/token?network_slug=ethereum&contract_address=0x...
Check security risks: /v1/dex/security/detail?network_slug=ethereum&contract_address=0x...

Analyze Token Liquidity

Get token pools: /v1/dex/token/pools?network_slug=ethereum&contract_address=0x...
Get liquidity history: /v1/dex/token-liquidity/query?network_slug=ethereum&contract_address=0x...

Find Trending Tokens

Get trending tokens: POST /v1/dex/tokens/trending/list with filters
Get gainers/losers: POST /v1/dex/gainer-loser/list
Find new tokens: POST /v1/dex/new/list

Monitor DEX Activity

Get recent transactions: /v1/dex/tokens/transactions?network_slug=ethereum&contract_address=0x...
Get pair quotes: /v4/dex/pairs/quotes/latest?network_slug=ethereum&contract_address=0x...

Key Parameters

Most DEX endpoints require:

network_slug or platform_crypto_id: Identifies the blockchain (ethereum, solana, bsc)
contract_address: The token's on-chain contract address

Use /v1/dex/platform/list to get valid network slugs and platform IDs.

Error Handling

Code	Meaning
400	Bad request (invalid parameters)
401	Unauthorized (invalid or missing API key)
403	Forbidden (endpoint not in your plan)
429	Rate limit exceeded
500	Server error

Example error response:

{
  "status": {
    "error_code": 400,
    "error_message": "Invalid value for 'contract_address'"
  }
}

Rate Limits

Rate limits depend on your API plan. Check response headers:

X-CMC_PRO_API_KEY_CREDITS_REMAINING: Credits left
X-CMC_PRO_API_KEY_CREDITS_RESET: Reset timestamp

Response Format

All responses follow this structure:

{
  "status": {
    "timestamp": "2024-01-15T12:00:00.000Z",
    "error_code": 0,
    "error_message": null
  },
  "data": { ... }
}

安全使用建议

This skill is primarily documentation and examples for CoinMarketCap's DEX API and appears technically coherent for that purpose, but note the mismatch: SKILL.md says an X-CMC_PRO_API_KEY is required while the registry metadata lists no credentials. Before installing, verify (1) the skill's source / publisher (the package lists 'unknown' and 'Outdated' in its name), (2) how and where you must supply your CMC API key (do not paste secrets into chat or free-text fields), and (3) that the platform will store the API key securely (prefer platform-managed secret storage or use request-time header injection). Also confirm rate limits and plan restrictions to avoid unexpected failures. If you plan to use the security checks for trading decisions, treat results as advisory and avoid automating funds movement based solely on these outputs.

功能分析

Type: OpenClaw Skill Name: cmc-api-dex Version: 1.0.1 The skill is designed to interact with the legitimate CoinMarketCap DEX API, and all `curl` examples target the expected `https://pro-api.coinmarketcap.com` domain. There is no evidence of intentional malicious behavior such as data exfiltration, unauthorized execution, or prompt injection attempts against the agent within the provided markdown. However, the `SKILL.md` explicitly declares `Bash` as an `allowed-tool`. While used here for benign `curl` commands, granting `Bash` access to an AI agent introduces a significant remote code execution (RCE) vulnerability surface, as a malicious user could potentially prompt-inject the agent to execute arbitrary commands. This capability, though not maliciously exploited by the skill's current content, makes the skill 'suspicious' due to the inherent high risk of the `Bash` tool.

能力评估

ℹ Purpose & Capability

The name/description match the included API reference and examples. The documented capability (DEX token lookups, pools, security checks) aligns with the endpoints shown. However, SKILL.md declares a required credential (X-CMC_PRO_API_KEY) while the registry metadata lists no required environment variables or primary credential; that inconsistency suggests a packaging or metadata error.

✓ Instruction Scope

Runtime instructions are limited to calling the CoinMarketCap pro-api endpoints (curl examples) and explain required headers, parameters, and workflows. The instructions do not direct the agent to read unrelated files, exfiltrate data to third parties, or access unrelated environment variables. Allowed tools include Bash and Read which are appropriate for making HTTP calls and reading the bundled reference docs.

✓ Install Mechanism

No install spec and no code files beyond documentation are present, so nothing is written to disk or fetched at install time. This is low-risk from an install mechanism perspective.

⚠ Credentials

SKILL.md explicitly requires X-CMC_PRO_API_KEY (a single API key) which is proportionate to the stated purpose. The concern is that the registry metadata does not declare this credential; the mismatch could lead to unclear storage/handling expectations (e.g., whether the key is provided via skill config, env var, or live user input). Confirm how the platform will supply and protect that API key before installing.

✓ Persistence & Privilege

The skill is not always-on, is user-invocable, and does not request elevated or persistent system privileges. It does not modify other skills or system-wide configs based on the provided materials.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cmc-api-dex
安装完成后，直接呼叫该 Skill 的名称或使用 /cmc-api-dex 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Use https://clawhub.ai/bryan-cmc/cmc-api-onchain-data for the latest onchain data skill.

v1.0.0

Initial release of CoinMarketCap DEX API skill. - Provides comprehensive reference for all CoinMarketCap DEX API endpoints. - Includes guides for token lookup, price checks, security analysis, trending data, and liquidity monitoring. - Lists endpoint details, common parameters, authentication, error codes, and usage workflows. - Designed for easy integration and troubleshooting of on-chain token and DEX data queries. - User-invocable with clear triggers for specific DEX and token information requests.

元数据

Slug cmc-api-dex

版本 1.0.1

许可证 —

累计安装 1

当前安装数 1

历史版本数 2

常见问题