Instructions for signing into APIClaw and making one live API request through its catalog of callable external services.

Use it to install APIClaw, authenticate with Clerk, confirm your identity, inspect available APIs, and run a real execute request without collecting provider keys.

It provides a defined setup and authentication path, including how to confirm the signed-in account and show the required login link when needed.

apiclaw — Skill for Claude Code and Codex by nordsym

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add nordsym/apiclaw --skill public

Clone the repo

git clone --depth 1 https://github.com/nordsym/apiclaw

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/nordsym/apiclaw/public/github.svg)](https://agentmods.dev/skills/nordsym/apiclaw/public)

Your own site

<a href="https://agentmods.dev/skills/nordsym/apiclaw/public"><img src="https://agentmods.dev/badge/skills/nordsym/apiclaw/public/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/nordsym/apiclaw/public"><img src="https://agentmods.dev/badge/skills/nordsym/apiclaw/public.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 123 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,274 The whole file, excluding the scripts and references it only reads on demand.

Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00123	$0.03274
Opus 5.5	$0.00049	$0.01310
Sonnet 5.5	$0.00025	$0.00655
Haiku 4.5	$0.00012	$0.00327

Measured 3d ago against content hash 6cdff1503244, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

apiclaw scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

The scan reads SKILL.md. This mod also ships 2 executable files (install.ps1, install.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

curl -fsSL https://apiclaw.cloud/install.sh | bash

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -fsSL https://apiclaw.cloud/install.sh | bash

landing/public/SKILL.md · 293 lines

How it starts

The opening of the file, as written. The whole thing — 293 lines — stays where its author put it; the contents beside it link to each section on GitHub.

APIClaw

Your agent calls real APIs. You sign in once. One workspace. Clerk auth. The metric that matters is a successful POST /v1/execute, not an install.

Give an agent this file and it can install, sign in, and land one 200 without guessing.

Live catalog (2026-10-26). Use https://apiclaw.cloud/api/catalog if counts must be current. Do not invent metrics.

1,136 callable
27,483 discoverable
22 built-in providers

Identity and product truth live at https://apiclaw.cloud/llms.txt. This file is the operational door: auth, then whoami, then execute.

1. Install

Node.js 18+ and npx are enough. A global install is optional.

npx -y @nordsym/apiclaw@latest --version

Human shell door (same package, local MCP):

curl -fsSL https://apiclaw.cloud/install.sh | bash

2. Auth (Clerk). Never paste a token into chat.

Unsigned MCP / CLI first_run mints a pending login even with no TTY and prints the exact https URL as the first line of the tool/CLI response (then repeats it as login_url in JSON). The first lines look like:

https://apiclaw.cloud/auth/cli?authId=…

STOP. Show the human the login URL on the first line. Do not summarize it away. Do not execute.

Show the human that first-line URL on its own line so they can click it. Do not bury it. Do not summarize the tool result. Do not only print npx @nordsym/apiclaw auth login. A command without /auth/cli?authId= is not enough.

If you are running on a machine the human cannot see (Grok Bot, cloud VM, headless agent), do not run auth login there — that opens a browser they will never get. The first-line URL in the tool response is the only door. Show it. Stop. Wait.

npx @nordsym/apiclaw auth login

That command is the human-shell door on a machine they can see. It opens the same browser URL (or reuses the pending one). Finish Google or email on that URL. Completing sign-in there Authorizes this agent (one action). If you are already signed in, click Authorize. Do not tell a new user they still need a second click after sign-in. Only then does the CLI write session_token to ~/.apiclaw.toml. Printing the URL is not success. Do not declare ready. Do not execute.

Read the full file on GitHub · 293 lines

Files

What ships with it

34 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago Changed 6cdff1503244
13d ago Changed 214c0b8d070a
15d ago Changed · -1 lines 64f352b5f1e0
1mo ago Changed · +12 lines f5b1d7d1d8a4
1mo ago Changed · +27 lines bdcada90d327
2mo ago First seen · 255 lines · 123 tokens per session scan C 6b0fd18ee95c

Subscribe to this mod's changes

apiclaw is a skill published in the GitHub repository nordsym/apiclaw (8 stars, last pushed 4d ago), licensed MIT. It adds 123 tokens to every session and 3,274 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Backend and APIs LLM ai-agents ai-tools api-platform claude mcp

x402

Set up Browser Use Cloud payments with x402 — pay per request from a crypto wallet (USDC on Base mainnet), no signup or API key. Two setups it works out up front — "just use it" (set up a wallet so you or Claude Code can run cloud browser tasks paid from the wallet — Claude writes and runs throwaway scripts, nothing…

browser-use/browser-use · 175 tokens

cloud

Documentation reference for using Browser Use Cloud — the hosted API and SDK for browser automation. Use this skill whenever the user needs help with the Cloud REST API (v2, v3, or v4), browser-use-sdk (Python or TypeScript), X-Browser-Use-API-Key authentication, cloud sessions, browser profiles, profile sync, CDP…

browser-use/browser-use · 177 tokens

open-source

Documentation reference for writing Python code using the browser-use open-source library. Use this skill whenever the user needs help with Agent, Browser, or Tools configuration, is writing code that imports from browseruse, asks about @sandbox deployment, supported LLM models, Actor API, custom tools, lifecycle…

browser-use/browser-use · 137 tokens

nornweave-api

Give AI agents their own email inboxes using the NornWeave API. Use when building email agents, sending/receiving emails programmatically, managing inboxes, retrieving threads, searching messages, or integrating with email providers (Mailgun, SES, SendGrid, Resend). NornWeave provides LLM-ready markdown parsing and…

DataCovey/nornweave · 77 tokens

adonis-next-monorepo

Create a new full-stack TypeScript monorepo (Turborepo + pnpm, AdonisJS 7 API with Tuyau typed client, Next.js 16 web app, shadcn/Base UI package, PostgreSQL) with enforced conventions, generators, git hooks and CI already set up and verified. Use when asked to create, scaffold, bootstrap or start a new project or…

nazmulnahid-git/Ai-Stack · 103 tokens

auth-middleware

Generates authentication and authorization middleware for Express/Fastify/Hono.

berkcangumusisik/claude-code-practices · 0 tokens

apiclaw