Skip to main content

alchemy

Provides blockchain API access for querying data across multiple networks, enabling efficient on-chain data retrieval and management.

Install this skill

or
12/100

Security score

The alchemy skill was audited on May 25, 2026 and we found 40 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 135

Curl to non-GitHub URL

SourceSKILL.md
135curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \
medium line 142

Curl to non-GitHub URL

SourceSKILL.md
142curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \
medium line 149

Curl to non-GitHub URL

SourceSKILL.md
149curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \
medium line 156

Curl to non-GitHub URL

SourceSKILL.md
156curl -s "https://eth-mainnet.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY/getNFTsForOwner?owner=0x00000000219ab540356cbb839cbe05303d7705fa"
medium line 161

Curl to non-GitHub URL

SourceSKILL.md
161curl -s "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/by-symbol?symbols=ETH&symbols=USDC"
medium line 166

Curl to non-GitHub URL

SourceSKILL.md
166curl -s -X POST "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/historical" \
medium line 173

Curl to non-GitHub URL

SourceSKILL.md
173curl -s -X POST "https://dashboard.alchemy.com/api/create-webhook" \
medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: Blockchain API access via Alchemy. Use when an agent needs to query blockchain data (balances, token prices, NFT ownership, transfer history, transaction simulation, gas estimates) across
medium line 128

Webhook reference - potential data exfiltration

SourceSKILL.md
128| Create webhook | `POST /create-webhook` | `references/webhooks-details.md` |
medium line 171

Webhook reference - potential data exfiltration

SourceSKILL.md
171### Create Notify Webhook
low line 173

Webhook reference - potential data exfiltration

SourceSKILL.md
173curl -s -X POST "https://dashboard.alchemy.com/api/create-webhook" \
low line 176

Webhook reference - potential data exfiltration

SourceSKILL.md
176-d '{"network":"ETH_MAINNET","webhook_type":"ADDRESS_ACTIVITY","webhook_url":"https://example.com/webhook","addresses":["0x00000000219ab540356cbb839cbe05303d7705fa"]}'
medium line 179

Webhook reference - potential data exfiltration

SourceSKILL.md
179### Verify Webhook Signature (Node)
medium line 232

Webhook reference - potential data exfiltration

SourceSKILL.md
232- **Webhooks**: Address Activity, Custom (GraphQL), NFT Activity, Payloads, Signatures
low line 17

External URL reference

SourceSKILL.md
17- **API key**: Set `$ALCHEMY_API_KEY` and make requests directly. Full access to all products. Create a free key at [dashboard.alchemy.com](https://dashboard.alchemy.com/).
low line 43

External URL reference

SourceSKILL.md
43| Ethereum RPC (HTTPS) | `https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` | API key in URL | Standard EVM reads and writes. |
low line 45

External URL reference

SourceSKILL.md
45| Base RPC (HTTPS) | `https://base-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` | API key in URL | EVM L2. |
low line 47

External URL reference

SourceSKILL.md
47| Arbitrum RPC (HTTPS) | `https://arb-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` | API key in URL | EVM L2. |
low line 49

External URL reference

SourceSKILL.md
49| BNB RPC (HTTPS) | `https://bnb-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` | API key in URL | EVM L1. |
low line 51

External URL reference

SourceSKILL.md
51| Solana RPC (HTTPS) | `https://solana-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` | API key in URL | Solana JSON-RPC. |
low line 52

External URL reference

SourceSKILL.md
52| Solana Yellowstone gRPC | `https://solana-mainnet.g.alchemy.com` | `X-Token: $ALCHEMY_API_KEY` | gRPC streaming (Yellowstone). |
low line 53

External URL reference

SourceSKILL.md
53| NFT API | `https://<network>.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY` | API key in URL | NFT ownership and metadata. |
low line 54

External URL reference

SourceSKILL.md
54| Prices API | `https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY` | API key in URL | Prices by symbol or address. |
low line 55

External URL reference

SourceSKILL.md
55| Portfolio API | `https://api.g.alchemy.com/data/v1/$ALCHEMY_API_KEY` | API key in URL | Multi-chain wallet views. |
low line 56

External URL reference

SourceSKILL.md
56| Notify API | `https://dashboard.alchemy.com/api` | `X-Alchemy-Token: <ALCHEMY_NOTIFY_AUTH_TOKEN>` | Generate token in dashboard. |
low line 64

External URL reference

SourceSKILL.md
64- **Gateway URL**: `https://x402.alchemy.com`
low line 84

External URL reference

SourceSKILL.md
84- **Gateway URL**: `https://mpp.alchemy.com`
low line 104

External URL reference

SourceSKILL.md
104| Gateway URL | `*.g.alchemy.com/v2/$KEY` | `https://x402.alchemy.com` | `https://mpp.alchemy.com` |
low line 135

External URL reference

SourceSKILL.md
135curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \
low line 142

External URL reference

SourceSKILL.md
142curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \
low line 149

External URL reference

SourceSKILL.md
149curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \
low line 156

External URL reference

SourceSKILL.md
156curl -s "https://eth-mainnet.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY/getNFTsForOwner?owner=0x00000000219ab540356cbb839cbe05303d7705fa"
low line 161

External URL reference

SourceSKILL.md
161curl -s "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/by-symbol?symbols=ETH&symbols=USDC"
low line 166

External URL reference

SourceSKILL.md
166curl -s -X POST "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/historical" \
low line 173

External URL reference

SourceSKILL.md
173curl -s -X POST "https://dashboard.alchemy.com/api/create-webhook" \
low line 176

External URL reference

SourceSKILL.md
176-d '{"network":"ETH_MAINNET","webhook_type":"ADDRESS_ACTIVITY","webhook_url":"https://example.com/webhook","addresses":["0x00000000219ab540356cbb839cbe05303d7705fa"]}'
low line 245

External URL reference

SourceSKILL.md
245- Confirm the key is valid at [dashboard.alchemy.com](https://dashboard.alchemy.com/)
low line 268

External URL reference

SourceSKILL.md
268- [Developer docs](https://www.alchemy.com/docs)
low line 269

External URL reference

SourceSKILL.md
269- [Get Started guide](https://www.alchemy.com/docs/get-started)
low line 270

External URL reference

SourceSKILL.md
270- [Create a free API key](https://dashboard.alchemy.com)
Scanned on May 25, 2026
View Security Dashboard
Installation guide →