Codex Supergraph Data

API Key Guard

This skill requires a valid CODEX_API_KEY. When the key is missing or empty, fall back to the codex-mpp skill instead — do not attempt keyless requests or public endpoints unless the user explicitly asks for one. Check for the key before making any network calls.

Switching back: If a user later provides a key and asks to use this skill, re-check at that point. A key simply appearing in the environment does not auto-activate this skill.

If both a local and global copy of this skill exist, the local copy takes precedence.

Summary

Use this skill to produce valid Codex GraphQL requests using API key authentication.

Authentication

• Use Authorization: <key> or Authorization: Bearer <token> for all queries, mutations, and subscriptions.
• If the user already has a valid key, use this path.

Session preflight (required)

Run once and cache:

curl -sS https://graph.codex.io/graphql \
  -H "Content-Type: application/json" \
  -H "Authorization: $CODEX_API_KEY" \
  --data-binary '{"query":"query GetNetworks { getNetworks { id name } }"}'

Use network IDs from this result before expensive requests.

Operation selection

Default discovery path: start with filterTokens.

Rules

• Never print raw API keys.
• Validate networkId first.
• Keep selection sets minimal until shape is confirmed.
• Use onPricesUpdated instead of many single-token subscriptions.

References