Coder

OKX OnChainOS — Skills Directory

What this file is: a directory page that points to OKX's official

onchainos-skills repo. It contains no logic of its own — every sub-skill

below lives upstream at `okx/onchainos-skills`

and is fetched fresh on install, so you always get the latest version.

OKX OnChainOS is a suite of 16 specialized sub-skills covering on-chain trading, market analytics, smart-money signals, DeFi investing & positions, wallet ops, security scanning, payment protocols, and crypto news & sentiment across 20+ blockchains (Ethereum, Solana, XLayer, Base, BSC, Arbitrum, Polygon, Optimism, Avalanche, TRON, …).

Most sub-skills drive a single binary, onchainos, which is downloaded on first use. A subset of capabilities (read-only data) can also be accessed without the binary, via Starchild's sc-proxy — see Authentication options below.

---

How install actually works

# Install one sub-skill (recommended — pulls just what you need)
npx skills add okx/onchainos-skills@<sub-skill-name>

# Or via long form
npx skills add https://github.com/okx/onchainos-skills --skill <sub-skill-name>

# Install everything (auto-detects your environment and installs accordingly)
npx skills add okx/onchainos-skills

Each sub-skill ships its own SKILL.md + reference docs + trigger phrases, so you can pull just what you need.

Plugin marketplace (alternative):

/plugin marketplace add okx/onchainos-skills
/plugin install onchainos-skills

CLI install (the onchainos binary — auto-detects platform, verifies SHA256, installs to ~/.local/bin or %USERPROFILE%\.local\bin):

# macOS / Linux
curl -sSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | sh
# add `-s -- --beta` for the latest pre-release (opt-in only; never downgrades)

# Windows
irm https://raw.githubusercontent.com/okx/onchainos-skills/main/install.ps1 | iex

---

Wallet — default to the user's Agent Wallet

Use the platform wallet skill for signing and broadcasting. OKX DEX endpoints return unsigned calldata ({to, value, data, ...}); feed it to wallet_transfer(data=<calldata>) and you're done. No separate OKX wallet needed.

Only use the OnchainOS TEE wallet (onchainos wallet login <email>) when the user explicitly asks for it.

---

Authentication options (read this before invoking anything)

There are two distinct paths. Pick based on what the agent needs to do:

Path A — Direct HTTP via Starchild sc-proxy (no API Key needed)

For read-only data lookups (prices, K-line, smart-money signals, token analytics, security checks, public-address portfolios — ≈ 80 % of OnchainOS capabilities), the agent can skip the CLI entirely and call https://web3.okx.com/... directly through sc-proxy:

from core.http_client import proxied_get
r = proxied_get(
    "https://web3.okx.com/api/v6/dex/aggregator/supported/chain",
    headers={"SC-CALLER-ID": f"chat:{thread_id}"},
)

sc-proxy auto-injects platform OKX credentials, signs each request with HMAC-SHA256, and bills the caller's Starchild credits.

• Cost: $0.001 / request
• Rate limit: 60 req/min
• Setup: none
• Limits: data only — cannot send transactions or manage wallets

Path B — onchainos CLI with your own OKX Web3 API Key

For wallet ops (wallet login, wallet send, wallet contract-call), DEX swaps that need execution, payments, and any other CLI-driven workflow.

The onchainos CLI ships with built-in sandbox API keys that work out of the box for local testing — no setup required. These keys are shared, rate-limited, and for evaluation only: do NOT use them in production or with real assets. Any failures or losses from using the built-in keys are the caller's responsibility.

For production, bring your own credentials:

1. Apply at web3.okx.com → Build → Dev Portal 2. Set env vars (or a .env in the project root — never commit it):

   export OKX_API_KEY=<your key>
   export OKX_SECRET_KEY=<your secret>
   export OKX_PASSPHRASE=<your passphrase>

3. Run any sub-skill's CLI commands.

Why the CLI can't use sc-proxy

The onchainos binary uses Rust's rustls TLS stack with bundled `webpki-roots` — a compile-time copy of the Mozilla root CA list. It ignores the system trust store, ignores SSL_CERT_FILE, and has no documented env override. As a result, sc-proxy's MITM CA is rejected as UnknownIssuer, and the CLI cannot be transparently proxied. Path A (direct HTTP from agent scripts) is the only way to use platform credentials with OnchainOS today.

Wallet creation (onchainos wallet login <email>) gives you a fresh TEE-managed account — it does NOT import your existing OKX App / extension wallet.

---

Sub-skills by category

📊 Discovery & Market Data (7)

🔄 Trading & Execution (3)

💼 Wallet (2)

🔐 Security (1)

💸 Payments (1)

🛠️ Ops (2)

---

Quick task → sub-skill map

---

Workflows — pre-built multi-skill orchestrations

Beyond individual sub-skills, the repo ships workflow orchestrations under workflows/ that compose several skills into one complete operation. The agent reads workflows/INDEX.md to route a request, then follows the step-by-step instructions in the matched workflow file.

Composite CLI commands

Single commands that replace multiple individual tool calls:

# Token report: info + price + advanced-info + security scan (parallel)
onchainos token report --address <addr> --chain solana

# Full workflow commands
onchainos workflow token-research --address <addr> [--chain solana]
onchainos workflow smart-money [--chain solana]
onchainos workflow new-tokens [--chain solana] [--stage MIGRATED]
onchainos workflow wallet-analysis --address <addr> [--chain ethereum]
onchainos workflow portfolio --address <addr> [--chains ethereum,solana]

Typical skill flows

• Search & buy: okx-dex-token (find token) → okx-wallet-portfolio (check funds) → okx-dex-swap (execute trade)
• Portfolio overview: okx-wallet-portfolio (holdings) → okx-dex-token (enrich with analytics) → okx-dex-market (price charts)
• Market research: okx-dex-token (trending/rankings) → okx-dex-market (candles/history) → okx-dex-swap (trade)
• Swap & broadcast: okx-dex-swap (get tx data) → sign locally → okx-onchain-gateway (broadcast → track order)
• Pre-flight check: okx-onchain-gateway (estimate gas → simulate → broadcast → track order)
• Full trading flow: okx-dex-token (search) → okx-dex-market (price/chart) → okx-wallet-portfolio (check balance) → okx-dex-swap (get tx) → okx-onchain-gateway (simulate + broadcast + track)
• Leaderboard → research → trade: okx-dex-signal (top traders by PnL/win rate) → okx-dex-token (token analytics) → okx-dex-swap (execute trade)
• Follow smart money: okx-dex-signal (KOL/smart money buys) → okx-dex-token (details + holder cluster) → okx-dex-market (price chart) → okx-dex-swap (trade)

---

MCP server

The onchainos CLI doubles as a native MCP server, exposing its tools to any MCP-compatible client. Start it with:

onchainos mcp

---

Important notes

• Chain identifiers: both human names (ethereum, solana, xlayer) and

numeric IDs are accepted. Run onchainos swap chains or onchainos gateway chains for the full list.

• Read-only ops (market data, signals, security scan, public-address

portfolios) work via Path A without any user-supplied API Key.

• Trading & sending default to the user's Agent Wallet via the wallet

skill. Only fall back to onchainos wallet login when the user asks.

• Security gate: when okx-security reports a fail, the calling agent

MUST block the related operation rather than proceed.

---

Resources

• Upstream repo: okx/onchainos-skills
• OnchainOS docs: OKX Web3 Build — OnchainOS
• Skills registry: skills.sh/okx/onchainos-skills
• Dev portal (API Key): web3.okx.com/build/dev-portal