OKX OnChainOS — Skills Directory
What this file is: a directory page that points to OKX's official
onchainos-skillsrepo. It contains no logic of its own — every sub-skill below lives upstream atokx/onchainos-skillsand is fetched fresh on install, so you always get the latest version.
OKX OnChainOS is a suite of 22 specialized sub-skills covering on-chain trading, market analytics, smart-money signals, DeFi investing & positions, cross-chain bridging, wallet ops, security scanning, payment protocols, and real-time data streams across 20+ blockchains (Ethereum, Solana, XLayer, Base, BSC, Arbitrum, Polygon, Optimism, Avalanche, TRON, …).
Most sub-skills drive a single binary, onchainos, which is downloaded on first use. A subset of capabilities (read-only data) can also be accessed without the binary, via Starchild's sc-proxy — see Authentication options below.
---
How install actually works
# Install one sub-skill (recommended — pulls just what you need)
npx skills add okx/onchainos-skills@<sub-skill-name>
# Or via long form
npx skills add https://github.com/okx/onchainos-skills --skill <sub-skill-name>There is no batched "install all" — install the sub-skills you actually need. Each sub-skill ships its own SKILL.md + reference docs + trigger phrases.
---
Wallet — default to the user's Agent Wallet
Use the platform wallet skill for signing and broadcasting. OKX DEX endpoints return unsigned calldata ({to, value, data, ...}); feed it to wallet_transfer(data=<calldata>) and you're done. No separate OKX wallet needed.
Only use the OnchainOS TEE wallet (onchainos wallet login <email>) when the user explicitly asks for it.
---
Authentication options (read this before invoking anything)
There are two distinct paths. Pick based on what the agent needs to do:
Path A — Direct HTTP via Starchild sc-proxy (no API Key needed)
For read-only data lookups (prices, K-line, smart-money signals, token analytics, security checks, public-address portfolios — ≈ 80 % of OnchainOS capabilities), the agent can skip the CLI entirely and call https://web3.okx.com/... directly through sc-proxy:
from core.http_client import proxied_get
r = proxied_get(
"https://web3.okx.com/api/v6/dex/aggregator/supported/chain",
headers={"SC-CALLER-ID": f"chat:{thread_id}"},
)sc-proxy auto-injects platform OKX credentials, signs each request with HMAC-SHA256, and bills the caller's Starchild credits.
- Cost: $0.001 / request
- Rate limit: 60 req/min
- Setup: none
- Limits: data only — cannot send transactions or manage wallets
Path B — onchainos CLI with your own OKX Web3 API Key
For wallet ops (wallet login, wallet send, wallet contract-call), DEX swaps that need execution, cross-chain bridges, strategy orders, payments, and any other CLI-driven workflow, the user must bring their own credentials:
- Apply at web3.okx.com → Build → Dev Portal
- Set env vars:
export OKX_API_KEY=<your key>
export OKX_SECRET_KEY=<your secret>
export OKX_PASSPHRASE=<your passphrase>- Run any sub-skill's CLI commands.
Why the CLI can't use sc-proxy
The onchainos binary uses Rust's rustls TLS stack with bundled webpki-roots — a compile-time copy of the Mozilla root CA list. It ignores the system trust store, ignores SSL_CERT_FILE, and has no documented env override. As a result, sc-proxy's MITM CA is rejected as UnknownIssuer, and the CLI cannot be transparently proxied. Path A (direct HTTP from agent scripts) is the only way to use platform credentials with OnchainOS today.
Wallet creation (onchainos wallet login <email>) gives you a fresh TEE-managed account — it does NOT import your existing OKX App / extension wallet.
---
Sub-skills by category
📊 Discovery & Market Data (8)
| Sub-skill | Use for |
|---|---|
okx-dex-market | Real-time prices, K-line / OHLC, index price, wallet PnL, address tracker |
okx-dex-token | Token search, holder distribution (whales / smart money / snipers), top traders, cluster analysis, honeypot/rug checks |
okx-dex-signal | Smart-money / whale / KOL buy signals, top-trader leaderboards |
okx-dex-trenches | Meme launchpad scanning (pump.fun, BSC, X Layer, TRON), dev rug history, bundle/sniper detection, co-investor tracking |
okx-dex-social | Crypto news feed + search, social sentiment ranking, KOL vibe & leaderboard |
okx-dex-ws | WebSocket real-time streams (price, candle, trades, signals, tracker, meme) — CLI + custom script use |
okx-defi-portfolio | View existing DeFi positions across protocols (lending / LP / staking) |
okx-dapp-discovery | Bootstrap router: resolves a named DApp (Polymarket, Aave, Hyperliquid, etc.) to its plugin and forwards the prompt |
🔄 Trading & Execution (5)
| Sub-skill | Use for |
|---|---|
okx-dex-swap | Multi-chain DEX aggregation across 500+ liquidity sources — quote, approve, swap |
okx-dex-bridge | Cross-chain swap/transfer via Stargate / Across / Relay / Gas.zip — quote, build, track |
okx-dex-strategy | Limit orders (TP / SL / buy-dip / chase-high) stored & auto-executed in TEE |
okx-defi-invest | DApp-agnostic DeFi yield discovery + deposit/withdraw/claim (no named protocol) |
okx-onchain-gateway | Gas price + estimate, transaction simulation, signed-tx broadcast, order tracking |
💼 Wallet (2)
| Sub-skill | Use for |
|---|---|
okx-agentic-wallet | OnchainOS wallet lifecycle: login / verify OTP / status / addresses / balance / send (native + ERC-20 + SPL) / tx history / contract-call |
okx-wallet-portfolio | Read-only portfolio for any public address — total value, all token balances, per-token lookup |
🔐 Security (1)
| Sub-skill | Use for |
|---|---|
okx-security | Token risk & honeypot scan, DApp phishing scan, transaction pre-execution sim, signature safety, ERC-20/Permit2 approvals management |
💸 Payments (3)
| Sub-skill | Use for |
|---|---|
okx-agent-payments-protocol | Unified dispatcher — handles x402 (exact / aggr_deferred), MPP (charge / session), and a2a-pay paymentId flows. Auto-detects 402 protocol from response headers. |
okx-x402-payment | Direct x402 signing entry (still supported; new code prefers okx-agent-payments-protocol) |
okx-a2a-payment | ⚠️ DEPRECATED — folded into okx-agent-payments-protocol. Stub kept only for legacy aliases. |
🛠️ Ops & Onboarding (3)
| Sub-skill | Use for |
|---|---|
okx-how-to-play | Entry router for blank/onboarding prompts ("what does this do", "how do I start"). Routes to a concrete workflow in ≤ 3 turns. |
okx-growth-competition | Agentic Wallet exclusive trading competitions: list → join → rank → claim |
okx-audit-log | Audit log file path for offline debugging (~/.onchainos/audit.jsonl) |
---
Quick task → sub-skill map
| I want to… | Sub-skill | Suggested path |
|---|---|---|
| Check a token price or chart | okx-dex-market | A (no key) |
| Search / analyze a token's holders | okx-dex-token | A (no key) |
| Follow smart money buys | okx-dex-signal | A (no key) |
| Scan new meme launches | okx-dex-trenches | A (no key) |
| Stream live market data over WS | okx-dex-ws | B (CLI/WS client) |
| Look at any public wallet | okx-wallet-portfolio | A (no key) |
| Scan a token / dApp for risk | okx-security | A (no key) |
| Estimate gas / simulate a tx | okx-onchain-gateway | A or B |
| Manage / send from my own wallet | okx-agentic-wallet | B (requires login) |
| Swap tokens (same chain) | okx-dex-swap REST + sign with the wallet skill (Agent Wallet) | |
| Bridge tokens (cross chain) | okx-dex-bridge | B (signing) |
| Place a limit order | okx-dex-strategy | B (TEE storage) |
| Find best DeFi yield (any protocol) | okx-defi-invest | B (signing) |
| View my DeFi positions | okx-defi-portfolio | A (no key) |
| Use a specific DApp (Aave, Polymarket, …) | okx-dapp-discovery | B (full DApp flow) |
| Pay an x402 / MPP / a2a-pay gated resource | okx-agent-payments-protocol | B (signing) |
| Join a trading competition | okx-growth-competition | B (wallet required) |
| Debug a CLI failure | okx-audit-log | B (local CLI logs) |
---
Important notes
- Chain identifiers: both human names (
ethereum,solana,xlayer) and
numeric IDs are accepted. Run onchainos swap chains or onchainos gateway chains for the full list.
- Read-only ops (market data, signals, security scan, public-address
portfolios) work via Path A without any user-supplied API Key.
- Trading & sending default to the user's Agent Wallet via the
wallet
skill. Only fall back to onchainos wallet login when the user asks.
- Security gate: when
okx-securityreports a fail, the calling agent
MUST block the related operation rather than proceed.
---
Resources
- Upstream repo: okx/onchainos-skills
- OnchainOS docs: OKX Web3 Build — OnchainOS
- Skills registry: skills.sh/okx/onchainos-skills
- Dev portal (API Key): web3.okx.com/build/dev-portal
