Dexscreener API
v1.0.0Query DexScreener market data - search pairs, inspect liquidity/volume, check boosted tokens, and fetch token orders.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and instructions: the script issues read-only HTTP GETs to DexScreener endpoints. Required binary (node) and examples in SKILL.md are appropriate for the stated purpose.
Instruction Scope
SKILL.md instructs running the included Node script against DexScreener public API endpoints. The instructions do not ask for unrelated file reads, credentials, or data exfiltration. The script only constructs API URLs, performs fetch GETs, and writes JSON to stdout.
Install Mechanism
No install spec is present (instruction-only plus a local CLI script), so nothing is downloaded or written during installation. This is low-risk and consistent with the skill's purpose.
Credentials
No required environment variables or credentials are declared. The code does honor optional environment variables (DEXSCREENER_BASE_URL and DEXSCREENER_TIMEOUT_MS) which are reasonable for testing/override purposes and do not involve secrets.
Persistence & Privilege
The skill does not request persistent or elevated privileges; always is false and disable-model-invocation is true (no autonomous invocation). It does not modify other skills or system configs.
Assessment
This skill is a simple, read-only CLI wrapper for the public DexScreener API and appears coherent. Before installing: ensure you have a trusted node runtime and are comfortable allowing the skill to make outbound HTTPS requests. Note that you (or an admin) can override the API base URL via DEXSCREENER_BASE_URL — only set this to a trusted endpoint, because pointing it at an attacker-controlled server would cause the CLI to fetch arbitrary data. No API keys or wallet access are required. If you need higher assurance, run the provided script in a sandbox and inspect network traffic to confirm it only queries the expected api.dexscreener.com endpoints.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
📈 Clawdis
Binsnode
latest
DexScreener
Query DexScreener using the local CLI script.
Quick Start
# Search pairs
node {baseDir}/scripts/dexscreener-cli.mjs search_pairs --query "solana" --limit 5
# Get pair details
node {baseDir}/scripts/dexscreener-cli.mjs get_pair --chain "solana" --pair "<pair_address>"
# Top boosted tokens
node {baseDir}/scripts/dexscreener-cli.mjs top_boosted_tokens --limit 10
After Install - Suggested Setup
1. Add to daily market scan
Use in morning/evening briefs:
dexscreener search_pairs + top_boosted_tokens
2. Track specific tokens
node {baseDir}/scripts/dexscreener-cli.mjs pairs_by_tokens --token-addresses "<token1>,<token2>" --limit 10
3. Check order/boost status for candidates
node {baseDir}/scripts/dexscreener-cli.mjs token_orders --chain "solana" --token "<token_address>" --limit 10
node {baseDir}/scripts/dexscreener-cli.mjs latest_boosted_tokens --limit 20
Commands
Search and Pair Lookup
node {baseDir}/scripts/dexscreener-cli.mjs search_pairs --query "SOL/USDC" --limit 10
node {baseDir}/scripts/dexscreener-cli.mjs get_pair --chain "solana" --pair "<pair_address>"
node {baseDir}/scripts/dexscreener-cli.mjs pairs_by_tokens --token-addresses "<token1>,<token2>" --limit 10
Profiles and Boosts
node {baseDir}/scripts/dexscreener-cli.mjs latest_token_profiles --limit 10
node {baseDir}/scripts/dexscreener-cli.mjs latest_boosted_tokens --limit 10
node {baseDir}/scripts/dexscreener-cli.mjs top_boosted_tokens --limit 10
Token Orders
node {baseDir}/scripts/dexscreener-cli.mjs token_orders --chain "solana" --token "<token_address>" --limit 10
Output Features
Typical payloads include:
- Pair metadata (chain, dex, pair address, symbols)
- Price and price change fields
- Liquidity and volume fields
- Boost/profile/order metadata
Default output is JSON for easy piping and automation.
API
Uses DexScreener public API endpoints (read-only):
- Base URL:
https://api.dexscreener.com - CLI supports override via
DEXSCREENER_BASE_URL
Security and Permissions
No API key required.
What this skill does:
- Makes HTTPS GET requests to DexScreener API
- Reads public market/pair/profile/boost/order data
What this skill does not do:
- No wallet connections
- No transactions or trading
- No credential handling
- No autonomous invocation (
disable-model-invocation: true)
Comments
Loading comments...
