Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add MangroveTechnologies/mangrove-agent --skill setup-krakengit clone --depth 1 https://github.com/MangroveTechnologies/mangrove-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mangrovetechnologies/mangrove-agent/setup-kraken)<a href="https://agentmods.dev/skills/mangrovetechnologies/mangrove-agent/setup-kraken"><img src="https://agentmods.dev/badge/skills/mangrovetechnologies/mangrove-agent/setup-kraken/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mangrovetechnologies/mangrove-agent/setup-kraken"><img src="https://agentmods.dev/badge/skills/mangrovetechnologies/mangrove-agent/setup-kraken.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00191 | $0.01436 |
| Opus 5 | $0.00096 | $0.00718 |
| Sonnet 5 | $0.00038 | $0.00287 |
| Haiku 4.5 | $0.00019 | $0.00144 |
Grade A, and why
setup-kraken scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Setup Kraken (local BYOK)
The agent's job in this skill: walk the user through connecting their own Kraken account so they can trade it through the agent, using their own Kraken API key kept on their machine. This is the local BYOK mode.
The model — say this up front
- Your key, your machine, direct to Kraken. In this mode the client-side Mangrove SDK connects to api.kraken.com directly with the user's API key. The key never goes to a Mangrove server and is never sent in chat.
- Kraken is one venue in a multi-venue aggregator. The Mangrove Markets API spans DEX venues (1inch / XPMarket / Jupiter) and CEX (Kraken). This skill covers the Kraken CEX venue via the user's own key.
- There is a second mode (not this skill): OAuth2. Once enabled, the user authorizes Mangrove and the server submits orders on their behalf via a per-user OAuth2 grant. That is exchange-venue-specific and server-side. If the user asks for "log in with Kraken / don't want to manage a key," that's the OAuth2 path — tell them it's coming and stop; do not improvise it here.
Security primer — give this unprompted (mirror the wallet Stage-4.5 primer)
- Never paste your API key or secret into this chat. The agent must never
see it.
.claude/hooks/block-wallet-secrets.shguards pasted secrets — don't work around it. The key is entered out-of-band (see Step 3). - Least privilege. Enable only the permissions needed to trade; leave Withdraw Funds OFF. A trading key should never be able to move funds off the exchange.
- Real funds. Kraken spot has no testnet — orders execute against real balances. Start with a tiny amount and use validate-only (dry-run) orders before any real fill.
- Scope it down. Set an IP allowlist on the key and a key expiry if the user can; consider a sub-account dedicated to agent trading.
Step 1 — Create the API key on Kraken
Direct the user (in their browser, signed in to Kraken):
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 118 lines · 191 tokens per session scan A fed6a986e6f9
setup-kraken is a skill published in the GitHub repository MangroveTechnologies/mangrove-agent (5 stars, last pushed 1mo ago), licensed MIT. It adds 191 tokens to every session and 1,436 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
t2000-job
Escrow USDC for agent-to-agent deliverable work (A2A jobs). Use when hiring another agent for async work (research reports, builds, SLA tasks) or when selling deliverable work yourself (list a service: fixed price + SLA, no server needed), or posting/claiming open jobs on the board (t2 job open / claim) — anything…
t2000-receive
Generate a payment request for the t2000 Agent Wallet — print the wallet address, an ANSI QR code, and (via MCP) a Payment Kit URI (sui:pay?…). Use when asked to receive a payment, share a wallet address, create a payment link, or set up a fund-me link.
t2000-send
Send USDC, USDsui, or SUI from the t2000 Agent Wallet to another Sui address. Use when asked to pay someone, transfer funds, send money, tip a creator, or make a payment to a specific Sui address or SuiNS name. Do NOT use for API payments — use the t2000-pay skill for x402-protected services.
t2000-swap
Swap tokens on Sui via Cetus Aggregator (20+ DEXs, best-route across SUI, USDC, USDsui, USDT, USDe, ETH, GOLD, NAVX, WAL, vSUI, and more). Use when asked to swap, trade, convert, exchange, or "turn X into Y". Do not use for sending — use the t2000-send skill for transfers.
t2000-financial-amounts
Money and token-metadata safety — floor display amounts (never round up), per-token decimal precision, preset/chip amount math, and the canonical token registry that owns every coin type and decimal count. Use when formatting or displaying a balance, computing a max/percentage/preset amount, converting between display…
t2000-check-balance
Check the t2000 Agent Wallet balance on Sui. Use when asked about wallet balance, how much USDC / USDsui / SUI is available, or total funds. Also use before any send, swap, or pay operation to confirm sufficient funds exist.