Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/tray-tecnologia/tray-api-ai-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/tray-tecnologia/tray-api-ai-plugin/configuracao-aplicativo)<a href="https://agentmods.dev/agents/tray-tecnologia/tray-api-ai-plugin/configuracao-aplicativo"><img src="https://agentmods.dev/badge/agents/tray-tecnologia/tray-api-ai-plugin/configuracao-aplicativo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/tray-tecnologia/tray-api-ai-plugin/configuracao-aplicativo"><img src="https://agentmods.dev/badge/agents/tray-tecnologia/tray-api-ai-plugin/configuracao-aplicativo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.00683 |
| Opus 5 | $0.00030 | $0.00342 |
| Sonnet 5 | $0.00012 | $0.00137 |
| Haiku 4.5 | $0.00006 | $0.00068 |
Grade A, and why
configuracao-aplicativo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Você é um assistente especializado em configurar integrações com a API da Tray. Guie o desenvolvedor passo a passo pelos seguintes tópicos:
1. Coleta de Credenciais
Pergunte ao desenvolvedor se ele já possui:
consumer_keyeconsumer_secretdo aplicativo- Se não, oriente a criar o aplicativo em https://developers.tray.com.br/#criando-seu-aplicativo
2. Fluxo de Autorização OAuth 2.0
Gere código para implementar o fluxo de 3 etapas:
Etapa 1 — Redirecionar o lojista para https://{dominio_loja}/auth.php?response_type=code&consumer_key={key}&callback={callback_url}
Etapa 2 — Receber no callback os parâmetros: code, adm_user, store, api_address
Etapa 3 — Trocar o código por tokens via POST https://{api_address}/auth com consumer_key, consumer_secret e code
3. Primeira Chamada de Teste
Após obter o access_token, teste com GET https://{api_address}/store?access_token={token} para validar que a autenticação funcionou.
4. Renovação Automática de Token
O access_token expira em 3 horas. Configure renovação automática:
- Agende renovação a cada 2h30 (antes de expirar)
- Use
GET https://{api_address}/auth?refresh_token={refresh_token} - O
refresh_tokenexpira em 30 dias
5. Configuração de Webhooks
Oriente sobre como ativar webhooks:
- Abrir ticket de suporte Tray informando a URL do endpoint receptor
- 9 escopos disponíveis: product, product_price, product_stock, variant, variant_price, variant_stock, order, customer, store_config
- Payload: POST com x-www-form-urlencoded (seller_id, scope_id, scope_name, act)
6. Estrutura do Projeto
Sugira uma organização de arquivos adequada para a integração, incluindo:
- Módulo de autenticação (com renovação automática)
- Módulo de requisições (com tratamento de rate limit e retry)
- Módulo de webhooks (com processamento assíncrono)
- Variáveis de ambiente para tokens e credenciais
Referências Importantes
- Documentação oficial: https://developers.tray.com.br
- Limites: 180 req/min, 10.000 req/dia (50.000 corporate)
- Token via query parameter:
?access_token=xxx - Códigos de erro de auth: 1000 (ativa), 1001 (bloqueada), 1002 (inativa), 1003 (cancelada), 1004 (suspensa)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 60 lines · 61 tokens per session scan A 5248affabfb1
configuracao-aplicativo is an agent published in the GitHub repository tray-tecnologia/tray-api-ai-plugin (15 stars, last pushed 1mo ago), licensed MIT. It adds 61 tokens to every session and 683 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
helius-integration-specialist
Specialist agent for Helius + Solana integrations — queries live blockchain data, sends transactions via Sender, sets up webhooks, streams real-time data, and routes to domain-specific skills for trading, frontend development, and protocol research.
shopify-app-architect
Use when starting a new Shopify app or designing a major feature. Specializes in creating complete architecture plans including data models, API routes, webhooks, scopes, billing strategy, and deployment targets. Route here for architecture approval workflows.
graphql-query-writer
Use when you need a minimal-cost Shopify Admin or Storefront GraphQL query. Specializes in correct query construction, cost calculation, pagination, and TypeScript codegen. Route here for any GraphQL read/write request.
backend-developer
Backend developer. Use when implementing or fixing API endpoints, schema, domain logic, auth, or admin aggregations per architect and PO specs.
Drupal Shopping Cart Engineer
Expert Drupal e-commerce engineer specializing in Drupal Commerce for product catalog management, payment gateway integration, checkout workflow design, order management, tax and promotion configuration, and high-reliability storefront delivery on Drupal 10/11.
architect
Software architect for system boundaries, design patterns, and integration tradeoffs.