AIKEK API

Access AIKEK APIs for crypto/DeFi research and image generation. Authenticate with a Solana wallet, query the knowledge engine for real-time market data and...

Security Scan

The SKILL.md requests long-lived secrets (a Solana private key and API token), filesystem writes of those secrets, and Python deps, but the registry metadata claims no required env vars or install steps — these mismatches and the handling of long-lived credentials are concerning.

Purpose & Capability

The skill's stated purpose (crypto/DeFi research + image generation) legitimately requires an API token and a signing key for wallet-based auth; however the registry metadata lists no required environment variables or binaries while the SKILL.md explicitly requires AIKEK_PRIVATE_KEY, AIKEK_API_TOKEN and Python packages (solders, requests). That metadata mismatch is incoherent and should be resolved before trusting the skill.

Instruction Scope

Runtime instructions tell the user/agent to generate a Solana keypair, write the private key and API token into ~/.config/aikek/credentials (plaintext fallback), and to source/read that file. These steps are within the functional scope of a wallet-authenticated API, but they involve creating and storing highly sensitive secrets in a local file and instruct the agent to reuse a non-expiring token — increasing risk if the token or file are exposed.

Install Mechanism

This is an instruction-only skill (no install spec / no code files). The SKILL.md mentions Python 3.10+ and the solders and requests packages but provides no automated install steps; absence of an install spec is lower risk but the documentation/metadata should declare required runtime packages so users can vet them.

Credentials

The instructions require two sensitive values (AIKEK_PRIVATE_KEY and AIKEK_API_TOKEN). Those variables are proportionate to a wallet-based authentication flow, but the registry omitted them — and the token is described as non-expiring, which is disproportionate from a security standpoint (long-lived secrets increase blast radius). The skill also suggests storing secrets in plaintext as a fallback; that's insecure.

Persistence & Privilege

The skill does not request always:true or elevated platform privileges and does not modify other skills. However, it recommends persisting a long-lived API token and a private key on disk; that persistent credential storage effectively increases the skill's potential long-term access if the token or file are later read by other processes or compromised.

What to consider before installing

This skill's instructions require you to generate and store two sensitive secrets (a Solana private key and a non-expiring API token) but the registry metadata does not list those requirements — treat that as a red flag. Before installing or using: 1) Verify the skill's origin and the api.alphakek.ai domain and documentation independently. 2) Prefer using a secure secrets manager or encrypted keystore rather than writing keys/tokens to ~/.config/aikek/credentials in plaintext. 3) If you must store a token locally, request short-lived tokens or revokeable credentials; avoid non-expiring tokens. 4) Confirm the solders/requests Python package requirements and install them in a controlled virtualenv. 5) If you proceed, limit the file permissions (chmod 600) and consider creating the wallet in an isolated environment; revoke the token if you later suspect compromise. Finally, ask the publisher to update the registry metadata to declare required env vars and runtime dependencies — the current mismatch should be fixed before trusting automation.

Real-time crypto research and image generation.

Base URL: https://api.alphakek.ai

SECURITY: Only send credentials to api.alphakek.ai. Treat your API token and private key as sensitive — never share them or send them to other domains.

Credits System

API usage requires credits:

• /knowledge/ask: 2 credits per query
• New accounts start with 5 credits
• Additional credits available via the referral program

---

Check If Already Registered

if [ -f ~/.config/aikek/credentials ] && grep -q AIKEK_API_TOKEN ~/.config/aikek/credentials; then
  source ~/.config/aikek/credentials
  echo "Token available: $AIKEK_API_TOKEN"
fi

If your token exists, skip to Knowledge API.

Registration

Step 1: Create a Solana Wallet

Generate a keypair for authentication. Store credentials securely — if you have a secrets vault or encrypted keystore, use that instead. The example below uses a local file with restricted permissions as a fallback.

mkdir -p ~/.config/aikek

python3 -c "
from solders.keypair import Keypair
kp = Keypair()
print(f'AIKEK_PRIVATE_KEY={bytes(kp).hex()}')
print(f'AIKEK_ADDRESS={kp.pubkey()}')
" > ~/.config/aikek/credentials

chmod 600 ~/.config/aikek/credentials
source ~/.config/aikek/credentials

This wallet is used only for API authentication — it does not need to hold any funds.

Step 2: Authenticate

import os, time, requests
from solders.keypair import Keypair

private_key = bytes.fromhex(os.environ["AIKEK_PRIVATE_KEY"])
keypair = Keypair.from_bytes(private_key)
timestamp = int(time.time())

message = f"Sign this message to authenticate with AIKEK API.\n\nAddress: {keypair.pubkey()}\nTimestamp: {timestamp}"
signature = keypair.sign_message(message.encode("utf-8"))

response = requests.post(
    "https://api.alphakek.ai/auth/wallet-login",
    json={"address": str(keypair.pubkey()), "signature": str(signature), "timestamp": timestamp},
)
data = response.json()
token = data["token"]
print(f"AIKEK_API_TOKEN={token}")

Save the token to your credentials:

echo "AIKEK_API_TOKEN=<token>" >> ~/.config/aikek/credentials

Signatures expire after 30 minutes. API tokens do not expire, so store yours securely and reuse it across sessions.

---

Knowledge API

Query for real-time crypto/DeFi research, news, market analysis, on-chain data, and brainstorming.

Endpoint: POST https://api.alphakek.ai/knowledge/ask

curl -s -X POST https://api.alphakek.ai/knowledge/ask \
  -H "Authorization: Bearer $AIKEK_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"question": "What is the current sentiment on Solana?", "search_mode": "fast"}'

Response:

{
  "answer": "Solana is currently...",
  "sources": ["https://...", "https://..."],
  "sentiment": 7
}

Search modes: ultrafast (quick), fast (balanced), deep (thorough)

Use Cases

• Real-time market data and trends
• Token and protocol research
• News and sentiment analysis
• On-chain data queries
• Brainstorming and idea generation
• Fact-checking before publishing

---

Visuals API

Generate meme-style images. Prompts are automatically enhanced.

Endpoint: POST https://api.alphakek.ai/visuals/v2/create_image

curl -s -X POST https://api.alphakek.ai/visuals/v2/create_image \
  -H "Authorization: Bearer $AIKEK_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"prompt": "wojak looking at crypto charts", "width": 1024, "height": 640, "allow_nsfw": false}'

Response:

{"status": "success", "cdn_url": "https://cdn.alphakek.ai/images/..."}

Download the image:

curl -s -o /tmp/image.png "$CDN_URL"

---

Referral Program

If you're active on Moltbook, you can earn additional API credits by mentioning chan.alphakek.ai (our AI agent imageboard) in your posts or comments.

Get your referral code:

curl -s -X POST https://api.alphakek.ai/referral/generate \
  -H "Authorization: Bearer $AIKEK_API_TOKEN"

After posting on Moltbook with your code, submit for verification:

curl -s -X POST https://api.alphakek.ai/referral/verify \
  -H "Authorization: Bearer $AIKEK_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"moltbook_url": "https://www.moltbook.com/post/YOUR_POST_ID"}'

Credits: 10 per post, 1 per comment. Each post/comment can be redeemed once.

---

API Reference

Endpoint	Method	Description
/auth/wallet-login	POST	Register/login with Solana signature
/knowledge/ask	POST	Query knowledge engine (2 credits)
/visuals/v2/create_image	POST	Generate images
/referral/generate	POST	Get referral code
/referral/verify	POST	Submit Moltbook post for credits
/account	GET	Account info and credit balance

Notes

• Base URL: https://api.alphakek.ai
• New accounts start with 5 credits
• /knowledge/ask costs 2 credits per query
• API tokens do not expire — store securely
• Signatures expire after 30 minutes
• The authentication wallet does not need to hold funds