ProxyGate Buy

Use when buying API access through ProxyGate — depositing USDC, browsing available APIs, making proxy requests, streaming responses, or rating sellers. Make...

Security Scan

The skill's instructions match its stated purpose (buying API access via ProxyGate) but omit declaring that it needs access to a local Solana keypair/config and can perform on-chain deposits/withdrawals — a notable transparency gap for a tool that can move funds.

Purpose & Capability

Name/description align with the instructions: the SKILL.md and references show only proxygate CLI/SDK actions (balance, deposit, proxy, withdraw, rate, usage). Requiring the proxygate binary is coherent for this purpose.

Instruction Scope

Instructions explicitly perform financial operations (deposit/withdraw) and direct use of a Solana keypair (keypairPath, ~/.proxygate/*). They are within scope for a buyer workflow but also enable the agent to initiate real on-chain transactions and streaming proxy requests — the user must expect the skill to act on their wallet/funds.

Install Mechanism

Instruction-only skill with no install spec or remote downloads. Low install risk because nothing is written by the skill bundle itself; it assumes an existing proxygate CLI/SDK.

Credentials

Registry metadata lists no required env vars or config paths, yet the SKILL.md and references mention a local keypair path (~/.proxygate/keypair.json) and config (~/.proxygate/config.json) and require access to a Solana wallet to deposit USDC. The skill does not declare these credentials/config paths or a primary credential — a transparency omission given the ability to move funds.

Persistence & Privilege

always is false (good). The skill allows autonomous invocation (platform default). Because the instructions enable monetary operations, consider restricting autonomous usage or requiring explicit user consent before deposits/withdrawals.

What to consider before installing

This skill appears to do what it says (use the proxygate CLI/SDK to buy and proxy API calls), but it can access and use your Solana keypair and actually deposit/withdraw USDC. Before installing or using it: (1) confirm the proxygate binary is from the official source; (2) only run it on a machine where you trust the CLI and the agent; (3) do not store high-value private keys at ~/.proxygate/keypair.json if you will allow autonomous agent actions — use a wallet with limited funds; (4) require explicit confirmation before any deposit/withdrawal or withdrawal-confirmation steps; and (5) if you need strong assurance, ask the maintainer to declare required config paths/primary credential in the skill metadata and to add an explicit safety prompt that prevents the agent from spending funds without human approval.

ProxyGate — Buy API Access

Buyer workflow: deposit USDC, discover APIs, proxy requests, stream responses, rate sellers.

Process

1. Check balance

proxygate balance

Shows: total balance, pending settlement, available, cooldown status. If 0 or insufficient, deposit first.

2. Deposit USDC

proxygate deposit -a 5000000      # 5 USDC (amounts in lamports: 1 USDC = 1,000,000)
proxygate deposit -a 1000000      # 1 USDC

Vault auto-initializes on first deposit. User needs USDC in their Solana wallet. Use --rpc <url> for custom RPC.

3. Discover APIs

# Browse all APIs with rich filtering
proxygate apis                                    # all listings
proxygate apis -s openai                          # filter by service
proxygate apis -c ai-models                       # filter by category
proxygate apis -q "code review"                   # semantic search
proxygate apis --verified                         # verified sellers only
proxygate apis --sort price_asc                   # sort: price_asc, price_desc, popular, newest
proxygate apis -l 50                              # limit results

# Aggregated views
proxygate pricing                                 # pricing table (service, type, price, sellers, RPM)
proxygate pricing -s anthropic --json             # machine-readable
proxygate services                                # service stats (cheapest, avg latency, rating)
proxygate categories                              # browse categories

# Listing details & docs
proxygate listings docs <listing-id>              # view API documentation

Note the listing-id from output — needed for proxy requests.

4. Proxy a request

# POST request (default when -d is given)
proxygate proxy <listing-id> /v1/chat/completions \
  -d '{"model":"gpt-4","messages":[{"role":"user","content":"Hello"}]}'

# GET request
proxygate proxy <listing-id> /v1/models -X GET

# Stream SSE responses
proxygate proxy <listing-id> /v1/chat/completions --stream \
  -d '{"model":"gpt-4","messages":[{"role":"user","content":"Hello"}],"stream":true}'

# With shield scanning (content moderation)
proxygate proxy <listing-id> /path --shield monitor    # log threats
proxygate proxy <listing-id> /path --shield strict     # block threats
proxygate proxy <listing-id> /path --shield off        # disable

5. Rate a seller

After a proxy request, rate the seller using the request ID from the response receipt:

proxygate rate --request-id <id> --up      # positive rating
proxygate rate --request-id <id> --down    # negative rating

6. Check usage

proxygate usage                                   # recent request history
proxygate usage -s openai -l 50                   # filtered by service
proxygate usage --from 2026-03-01 --to 2026-03-14 # date range
proxygate usage --json                            # machine-readable

proxygate settlements -r buyer                    # cost breakdown
proxygate settlements -s openai --from 2026-03-01 # filtered

7. Withdraw (optional)

Convert credits back to USDC:

proxygate withdraw -a 2000000     # withdraw 2 USDC
proxygate withdraw                # withdraw all available

Recovery (if CLI crashes mid-withdrawal):

proxygate withdraw-confirm --tx <tx_signature>

SDK (Programmatic)

For agent-to-agent use without CLI:

import { ProxyGateClient, parseSSE } from '@proxygate/sdk';

const client = await ProxyGateClient.create({
  keypairPath: '~/.proxygate/keypair.json',
});

// Check balance
const { balance, available } = await client.balance();

// Browse APIs
const apis = await client.apis({ service: 'openai', verified: true });
const categories = await client.categories();
const services = await client.services();

// View listing docs
const docs = await client.docs('listing-id');

// Proxy a request
const res = await client.proxy('listing-id', '/v1/chat/completions', {
  model: 'gpt-4',
  messages: [{ role: 'user', content: 'Hello' }],
});

// Stream with SSE
const res = await client.proxy('listing-id', '/v1/chat/completions',
  { model: 'gpt-4', messages: [...], stream: true },
  { stream: true }
);
for await (const event of parseSSE(res)) {
  process.stdout.write(event.data);
}

// Shield scanning
const res = await client.proxy('listing-id', '/path', body, { shield: 'strict' });

// Rate a seller
await client.rate({ request_id: 'req-id', is_positive: true });

// Usage & settlements
const usage = await client.usage({ service: 'openai', limit: 50 });
const settlements = await client.settlements({ role: 'buyer' });

Success criteria

• Balance checked and sufficient for request
• Listing ID identified from apis/pricing output
• Proxy request returns upstream API response
• Usage reflects the completed request

Related skills

Need	Skill
First-time setup	pg-setup
Buy API access	This skill
Sell API capacity	pg-sell
Job marketplace	pg-jobs
Check status	pg-status
Update CLI/SDK	pg-update