alchemy-api

Integrates Alchemy APIs using an API key, providing a comprehensive guide for AI agents to authenticate and make requests.

Install this skill

or

0/100

Security score

The alchemy-api skill was audited on Feb 27, 2026 and we found 47 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 83

Curl to non-GitHub URL

SourceSKILL.md

83	curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \

medium line 90

Curl to non-GitHub URL

SourceSKILL.md

90	curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \

medium line 97

Curl to non-GitHub URL

SourceSKILL.md

97	curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \

medium line 104

Curl to non-GitHub URL

SourceSKILL.md

104	curl -s "https://eth-mainnet.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY/getNFTsForOwner?owner=0x00000000219ab540356cbb839cbe05303d7705fa"

medium line 109

Curl to non-GitHub URL

SourceSKILL.md

109	curl -s "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/by-symbol?symbols=ETH&symbols=USDC"

medium line 114

Curl to non-GitHub URL

SourceSKILL.md

114	curl -s -X POST "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/historical" \

medium line 121

Curl to non-GitHub URL

SourceSKILL.md

121	curl -s -X POST "https://dashboard.alchemy.com/api/create-webhook" \

medium line 74

Webhook reference - potential data exfiltration

SourceSKILL.md

74	\| Create webhook \| `POST /create-webhook` \| `references/webhooks-details.md` \|

medium line 119

Webhook reference - potential data exfiltration

SourceSKILL.md

119	### Create Notify Webhook

low line 121

Webhook reference - potential data exfiltration

SourceSKILL.md

121	curl -s -X POST "https://dashboard.alchemy.com/api/create-webhook" \

low line 124

Webhook reference - potential data exfiltration

SourceSKILL.md

124	-d '{"network":"ETH_MAINNET","webhook_type":"ADDRESS_ACTIVITY","webhook_url":"https://example.com/webhook","addresses":["0x00000000219ab540356cbb839cbe05303d7705fa"]}'

medium line 127

Webhook reference - potential data exfiltration

SourceSKILL.md

127	### Verify Webhook Signature (Node)

medium line 189

Webhook reference - potential data exfiltration

SourceSKILL.md

189	### Webhooks

medium line 192

Webhook reference - potential data exfiltration

SourceSKILL.md

192	\| `references/webhooks-overview.md` \| webhooks \| Push-based delivery of blockchain events via Alchemy Notify API. Use when you need real-time notifications for address activity, NFT transfers, or cust

medium line 193

Webhook reference - potential data exfiltration

SourceSKILL.md

193	\| `references/webhooks-address-activity.md` \| Address Activity Webhooks \| Address activity webhooks notify you when specified addresses send or receive assets \|

medium line 194

Webhook reference - potential data exfiltration

SourceSKILL.md

194	\| `references/webhooks-custom-webhooks.md` \| Custom Webhooks (GraphQL) \| Custom webhooks allow flexible event filtering using a GraphQL query hosted by Alchemy \|

medium line 195

Webhook reference - potential data exfiltration

SourceSKILL.md

195	\| `references/webhooks-details.md` \| Webhooks Overview (Notify) \| Notify webhooks push blockchain events to your server so you don't need to poll. They are ideal for near real-time pipelines \|

medium line 196

Webhook reference - potential data exfiltration

SourceSKILL.md

196	\| `references/webhooks-nft-activity.md` \| NFT Activity Webhooks \| Receive notifications for NFT transfers, mints, and burns for specified contracts or collections \|

medium line 197

Webhook reference - potential data exfiltration

SourceSKILL.md

197	\| `references/webhooks-verify-signatures.md` \| Verify Webhook Signatures \| Always verify webhook signatures to ensure payloads are authentic and untampered \|

medium line 198

Webhook reference - potential data exfiltration

SourceSKILL.md

198	\| `references/webhooks-webhook-payloads.md` \| Webhook Payloads \| Webhook payloads include event metadata plus event-specific fields. Treat them as untrusted input and validate carefully \|

medium line 199

Webhook reference - potential data exfiltration

SourceSKILL.md

199	\| `references/webhooks-webhook-types.md` \| Webhook Types \| Webhook types determine what events you receive and how they're filtered \|

medium line 240

Webhook reference - potential data exfiltration

SourceSKILL.md

240	\| `references/recipes-overview.md` \| recipes \| End-to-end runnable workflows that combine multiple Alchemy APIs to achieve real product goals. Includes token balances, NFT queries, transfer history, p

medium line 250

Webhook reference - potential data exfiltration

SourceSKILL.md

250	\| `references/recipes-webhook-address-activity.md` \| Recipe: Address Activity Webhook \| Configure address activity webhooks and verify delivered signatures \|

medium line 256

Webhook reference - potential data exfiltration

SourceSKILL.md

256	\| `references/operational-alerts.md` \| Alerts \| Set alerts to catch rate limit issues, spikes in usage, or webhook failures \|

medium line 260

Webhook reference - potential data exfiltration

SourceSKILL.md

260	\| `references/operational-dashboard-tools.md` \| Dashboard Tools \| Use the Alchemy dashboard to create apps, manage keys, track usage, and configure webhooks \|

low line 45

External URL reference

SourceSKILL.md

45	\| Ethereum RPC (HTTPS) \| `https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` \| API key in URL \| Standard EVM reads and writes. \|

low line 47

External URL reference

SourceSKILL.md

47	\| Base RPC (HTTPS) \| `https://base-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` \| API key in URL \| EVM L2. \|

low line 49

External URL reference

SourceSKILL.md

49	\| Arbitrum RPC (HTTPS) \| `https://arb-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` \| API key in URL \| EVM L2. \|

low line 51

External URL reference

SourceSKILL.md

51	\| BNB RPC (HTTPS) \| `https://bnb-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` \| API key in URL \| EVM L1. \|

low line 53

External URL reference

SourceSKILL.md

53	\| Solana RPC (HTTPS) \| `https://solana-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY` \| API key in URL \| Solana JSON-RPC. \|

low line 54

External URL reference

SourceSKILL.md

54	\| Solana Yellowstone gRPC \| `https://solana-mainnet.g.alchemy.com` \| `X-Token: $ALCHEMY_API_KEY` \| gRPC streaming (Yellowstone). \|

low line 55

External URL reference

SourceSKILL.md

55	\| NFT API \| `https://<network>.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY` \| API key in URL \| NFT ownership and metadata. \|

low line 56

External URL reference

SourceSKILL.md

56	\| Prices API \| `https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY` \| API key in URL \| Prices by symbol or address. \|

low line 57

External URL reference

SourceSKILL.md

57	\| Portfolio API \| `https://api.g.alchemy.com/data/v1/$ALCHEMY_API_KEY` \| API key in URL \| Multi-chain wallet views. \|

low line 58

External URL reference

SourceSKILL.md

58	\| Notify API \| `https://dashboard.alchemy.com/api` \| `X-Alchemy-Token: <ALCHEMY_NOTIFY_AUTH_TOKEN>` \| Generate token in dashboard. \|

low line 79

External URL reference

SourceSKILL.md

79	> No API key? Use the `agentic-gateway` skill instead. Replace API-key URLs with `https://x402.alchemy.com/rpc/eth-mainnet` and add `Authorization: SIWE <token>`. See the `agentic-gateway` skill f

low line 83

External URL reference

SourceSKILL.md

83	curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \

low line 90

External URL reference

SourceSKILL.md

90	curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \

low line 97

External URL reference

SourceSKILL.md

97	curl -s https://eth-mainnet.g.alchemy.com/v2/$ALCHEMY_API_KEY \

low line 104

External URL reference

SourceSKILL.md

104	curl -s "https://eth-mainnet.g.alchemy.com/nft/v3/$ALCHEMY_API_KEY/getNFTsForOwner?owner=0x00000000219ab540356cbb839cbe05303d7705fa"

low line 109

External URL reference

SourceSKILL.md

109	curl -s "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/by-symbol?symbols=ETH&symbols=USDC"

low line 114

External URL reference

SourceSKILL.md

114	curl -s -X POST "https://api.g.alchemy.com/prices/v1/$ALCHEMY_API_KEY/tokens/historical" \

low line 121

External URL reference

SourceSKILL.md

121	curl -s -X POST "https://dashboard.alchemy.com/api/create-webhook" \

low line 124

External URL reference

SourceSKILL.md

124	-d '{"network":"ETH_MAINNET","webhook_type":"ADDRESS_ACTIVITY","webhook_url":"https://example.com/webhook","addresses":["0x00000000219ab540356cbb839cbe05303d7705fa"]}'

low line 286

External URL reference

SourceSKILL.md

286	- [Developer docs](https://www.alchemy.com/docs)

low line 287

External URL reference

SourceSKILL.md

287	- [Get Started guide](https://www.alchemy.com/docs/get-started)

low line 288

External URL reference

SourceSKILL.md

288	- [Create a free API key](https://www.dashboard.alchemy.com)

Scanned on Feb 27, 2026

View Security Dashboard

Installation guide →

GitHub Stars 55

Rate this skill

Categorydevelopment

UpdatedMay 21, 2026

openclaw api data-engineer ml-ai-engineer backend-developer development

NeverSight/skills_feed