gdex-authentication

Authenticate users and authorize trading actions with API keys or signed sessions.

4|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/GemachDAO/gdex-skill --skill gdex-authentication
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gdex-authentication
Source: https://github.com/GemachDAO/gdex-skill/tree/main/skills/gdex-authentication
Command: npx skills add https://github.com/GemachDAO/gdex-skill --skill gdex-authentication

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Managed-custody authentication is a complex, error-prone process. This skill centralizes the login flow, enabling both simple API-key access and full session-based control-wallet sign-in with encrypted payloads for secure trading.

Core Features & Use Cases

  • Shared API-key login for quick access to read-only endpoints like getTokenDetails, getTrendingTokens, getOHLCV, and getTopTraders.
  • Managed-custody flow including session keypair generation, sign-in message construction, payload encryption, and trade signing for enabled trading operations.
  • Deterministic encryption using AES-256-CBC with client-derived key/IV material to secure sensitive payloads and session data.

Quick Start

Install the skill and initialize with your API key, then follow the sign-in flow to obtain a managed session.

Frequently Asked Questions about gdex-authentication

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement managed-custody authentication for EVM and Solana trading?

Managed-custody authentication is implemented by generating a session keypair, constructing a sign-in message, encrypting the payload with deterministic AES-256-CBC, and signing trades. This workflow provides secure, auditable access across EVM and Solana contexts.

What's the best way to secure API key access for read-only endpoints?

The best way to secure API key access is using a shared API-key login for quick access to read-only endpoints like getTokenDetails and getOHLCV. This provides simple authentication without requiring full session-based control-wallet sign-in.

Does managed-custody authentication work with both Ethereum and Solana wallets?

Yes, managed-custody authentication works with both Ethereum and Solana wallets. The skill provides full session-based authentication and trade signing capabilities across EVM and Solana contexts using a unified control-wallet sign-in flow.

How does deterministic AES-256-CBC encryption secure session payloads?

Deterministic AES-256-CBC encryption secures session payloads by using client-derived key and IV material. This approach ensures sensitive payload data and session information remain protected during transmission and storage.

When do I need full session-based authentication instead of a shared API key?

You need full session-based authentication when executing trading operations rather than read-only queries. It requires session keypair generation and payload encryption to authorize trades, whereas API keys suffice for endpoints like getTopTraders.

Can I authorize trading actions without exposing private keys in a managed custody workflow?

Yes, you can authorize trading actions without exposing private keys by using session keypair generation and encrypted payload signing. The managed-custody workflow handles trade authorization securely through the gdex-skill SDK helper utilities.