A gateway for calling third-party services through Maton after the user has connected an app. It handles the app credential so the coding agent can make supported API requests.

Use it to read or update data in a connected app when the requested action is supported by that app's API.

It avoids manually passing long-lived API keys to commands and provides a consistent route to connected services.

api-gateway — Skill for Claude Code by maton-ai/api-gateway-skill

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add maton-ai/api-gateway-skill --skill api-gateway

Clone the repo

git clone --depth 1 https://github.com/maton-ai/api-gateway-skill

Made for: Claude Code.

Or install api-gateway, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/maton-ai/api-gateway-skill/api-gateway/github.svg)](https://agentmods.dev/skills/maton-ai/api-gateway-skill/api-gateway)

Your own site

<a href="https://agentmods.dev/skills/maton-ai/api-gateway-skill/api-gateway"><img src="https://agentmods.dev/badge/skills/maton-ai/api-gateway-skill/api-gateway/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/maton-ai/api-gateway-skill/api-gateway"><img src="https://agentmods.dev/badge/skills/maton-ai/api-gateway-skill/api-gateway.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 173 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 13,706 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 2 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

Socket warn 2 Oct 2026
Snyk warn 2 Oct 2026
NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 8 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Privilege Escalation · line 349
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
high Privilege Escalation · line 359
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
high Privilege Escalation · line 835
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
medium Data Exfiltration · line 642
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 644
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 836
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 1353
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 1374
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00173	$0.13706
Opus 5.5	$0.00069	$0.05482
Sonnet 5.5	$0.00035	$0.02741
Haiku 4.5	$0.00017	$0.01371

Measured 24d ago against content hash 7d3b9ffe6cbb, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

api-gateway scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

import urllib.request, os, json, urllib.parse

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

subprocess.run(

providers/claude/plugin/skills/api-gateway/SKILL.md · 1,228 lines

How it starts

The opening of the file, as written. The whole thing — 1,228 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Maton API Gateway

Managed API routing for third-party apps, provided by Maton.

Installation

NPM

npm install -g @maton/cli

Homebrew

brew install maton-ai/cli/maton

Authentication

maton login

Prints a login link. Open it in a browser and copy the verification code shown. Then run maton login --code <CODE> to finish signing in. Once complete, it creates a profile in config.toml (eg. $HOME/.config/maton/config.toml) and stores the access and refresh tokens in the operating system's credential store (Keychain on macOS, Credential Manager on Windows, Secret Service on Linux), auto-renewed on expiry. The CLI reads them when it needs them.

Verify

maton whoami --json

{
  "authenticated": true,
  "profile_name": "[email protected]",
  "auth_type": "oauth"
}

If authenticated is false, stop and login again via maton login.
If auth_type is api_key, it is recommended to login via maton login and avoid keeping a long-lived credential.

Connections

List Connections

maton connection list slack --status ACTIVE

{
  "connections": [
    {
      "connection_id": "{connection_id}",
      "status": "ACTIVE",
      "creation_time": "2025-12-08T07:20:53.488460Z",
      "last_updated_time": "2026-01-31T20:03:32.593153Z",
      "url": "https://connect.maton.ai/?session_token=5e9...",
      "app": "slack",
      "method": "OAUTH2",
      "metadata": {}
    }
  ]
}

Refer to maton connection list --help for possible flags and values.

Create Connection

Requires explicit user approval. Confirm the specific app and that the user intends to authorize access. Never create a connection on your own initiative.

maton connection create slack

Refer to maton connection create --help for possible flags and values.

Get Connection

maton connection get {connection_id}

{
  "connection": {
    "connection_id": "{connection_id}",
    "status": "PENDING",
    "creation_time": "2025-12-08T07:20:53.488460Z",
    "last_updated_time": "2026-01-31T20:03:32.593153Z",
    "url": "https://connect.maton.ai/?session_token=5e9...",
    "app": "slack",
    "metadata": {}
  }
}

Read the full file on GitHub · 1,228 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

24d ago Changed · -4 lines 7d3b9ffe6cbb
27d ago Changed · +1 lines 0b8deac1a908
1mo ago Changed e8ee1036103d
1mo ago Changed · -161 lines 386165ef8e8d
1mo ago Changed · +377 lines ec267b48026a
1mo ago First seen · 1,015 lines · 173 tokens per session scan A bbf41dfc7fb7

Subscribe to this mod's changes

api-gateway is a skill published in the GitHub repository maton-ai/api-gateway-skill (33 stars, last pushed 25d ago), licensed MIT. It adds 173 tokens to every session and 13,706 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 2 findings (makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Backend and APIs Claude Code anthropic anthropic-ai anthropic-skills claude claude-api

mckinsey-consultant

A consulting style method for breaking business questions into structured analyses and producing research reports or presentations.

Mann1988/awesome-claude-skills · 82 tokens

claude-api

Build apps with the Anthropic Claude API — chat completions, tool use, streaming, vision, and multi-turn conversations.

inbharatai/claude-skills · 29 tokens

mimeng-writing

A Chinese-language writing guide for creating highly clickable articles about emotions, stories, and social issues. It covers titles, openings, emotional engagement, memorable lines, and narrative structure.

Mann1988/awesome-claude-skills · 0 tokens

us-gov-shutdown-tracker

Track and analyze US government shutdown liquidity impacts by monitoring TGA (Treasury General Account), bank reserves, EFFR, and SOFR data from FRED API. Use when user wants to (1) analyze current or past government shutdown effects on financial markets, (2) track liquidity conditions during fiscal policy…

Mann1988/awesome-claude-skills · 126 tokens

fastapi-patterns

FastAPI patterns for async APIs, dependency injection, Pydantic request and response models, OpenAPI docs, tests, security, and production readiness.

affaan-m/ECC · 35 tokens

stripe-projects

Provision SaaS services + sync creds via Stripe Projects.

NousResearch/hermes-agent · 15 tokens

api-gateway