Install
$ agentstack add skill-hedging8563-tokenlab-skills-tokenlab-native-endpoints ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
TokenLab Native Endpoints
Use this skill when a user needs provider-native behavior, non-chat APIs, or migration guidance beyond OpenAI-compatible /v1/chat/completions.
What this skill should deliver
- A clear endpoint choice and why it fits the request.
- A minimal request example with the correct base URL and auth header.
- A note on when OpenAI-compatible chat remains the simpler path.
- A fail-closed contract check for non-chat or provider-native request shapes.
- A recovery path when TokenLab returns a native endpoint hint or contract error.
Endpoint families
- OpenAI-compatible chat:
POST https://api.tokenlab.sh/v1/chat/completions - OpenAI Responses:
POST https://api.tokenlab.sh/v1/responses - Anthropic Messages:
POST https://api.tokenlab.sh/v1/messages - Gemini native generate content:
POST https://api.tokenlab.sh/v1beta/models/{model}:generateContent - Model catalog:
GET https://api.tokenlab.sh/v1/models - Task-specific model shortlist:
GET https://api.tokenlab.sh/v1/models?recommended_for= - Model contract:
GET https://api.tokenlab.sh/v1/models/:model
Preferred approach
- Start with OpenAI-compatible chat unless the user needs a native contract, non-chat API, or provider-specific behavior.
- If a previous response includes
X-TokenLab-HintorX-TokenLab-Native-Endpoint, treat it as routing evidence and prefer the exact native route in the header. - For Anthropic-style requests, use
/v1/messagesand preserve Anthropic request semantics instead of converting blindly. - For Gemini-style requests, preserve Gemini content parts, roles, tools, and generation config when the user explicitly needs Gemini-native behavior.
- For media/audio/embedding/rerank/translation requests, inspect
GET /v1/models/:modelbefore changing request parameters.
Output format
- One sentence naming the chosen endpoint.
- One runnable code block or cURL block.
- One short explanation of why this endpoint fits.
- One recovery note naming the catalog or contract endpoint to check if the call fails.
Avoid
- Do not flatten native Anthropic or Gemini request semantics into generic OpenAI chat unless the user explicitly accepts that tradeoff.
- Do not remove unsupported fields just to make validation pass when doing so would change output, safety, billing, or response guarantees.
- Do not hardcode media request shapes without inspecting the model contract.
- Do not expose private TokenLab routing, channel, or physical provider internals.
Edge Cases
- If the model supports both OpenAI-compatible and native routes, pick the simpler path unless the user needs native behavior.
- If the endpoint hint conflicts with the user's explicit requirement, explain the tradeoff and ask for confirmation before changing semantics.
- If a request fails with a contract error, use supported operations and recommended request fields to repair it.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hedging8563
- Source: hedging8563/tokenlab-skills
- License: MIT
- Homepage: https://tokenlab.sh
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.