api-proxy CLAUDE.md

A local FastAPI service that forwards API requests through a residential internet connection, which can help reach services that block cloud-server IP addresses.

In plain words
What is it for?
Use it to run a locally or Docker-hosted proxy, route requests to selected APIs, check service health, and develop with automatic reloading.
Why use it?
It removes the need to expose a cloud server directly to APIs that reject datacenter traffic. It also supports authentication, domain allow-lists, health checks, and configurable timeouts.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/abra5umente/api-proxy/claude-md
Clone the repo
git clone --depth 1 https://github.com/abra5umente/api-proxy
Per session 321 This file is loaded in full into every session.
When invoked 321 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00321 $0.00321
Opus 5 $0.00161 $0.00161
Sonnet 5 $0.00064 $0.00064
Haiku 4.5 $0.00032 $0.00032

Measured 2d ago against content hash 0c433053cb16, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

api-proxy CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 40 lines

What it actually says

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Project Overview

API Proxy service that routes requests through a residential IP for APIs that block cloud/datacenter IPs (e.g., Reddit). Built with FastAPI and httpx.

Request flow: Claude Container → Cloudflare Tunnel → This Proxy → Target API

Development Commands

# Run locally
uvicorn app:app --host 0.0.0.0 --port 8000

# Run with auto-reload during development
uvicorn app:app --reload --port 8000

# Build Docker image
docker build -t api-proxy .

# Run Docker container
docker run -p 8000:8000 -e PROXY_AUTH_TOKEN=your-token api-proxy

Architecture

Single-file FastAPI application (app.py) with two endpoints:

  • GET /health - Unauthenticated health check
  • POST /proxy - Authenticated proxy endpoint (requires X-Proxy-Token header)

Environment variables:

  • PROXY_AUTH_TOKEN (required) - Auth token for /proxy requests
  • ALLOWED_DOMAINS - Comma-separated domain whitelist (empty = allow all)
  • PROXY_TIMEOUT - Request timeout in seconds (default: 30)

Domain validation: is_domain_allowed() checks against whitelist, supports subdomains (e.g., reddit.com allows oauth.reddit.com).

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 40 lines · 321 tokens per session scan A 0c433053cb16

Subscribe to this mod's changes

api-proxy CLAUDE.md is an instructions file published in the GitHub repository abra5umente/api-proxy (17 stars, last pushed 8mo ago), licensed MIT. It adds 321 tokens to every session, about $0.0016 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.