Menu
The gateway of internet for all agents — manage credentials, proxy CLI tools, and peer with other gateways
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | nkmc |
| description | The gateway of internet for all agents — manage credentials, proxy CLI tools, and peer with other gateways |
| version | 0.5.0 |
| gateway | nkmc |
| roles | ["agent"] |
The gateway of internet for all agents. NaKaMiChi - the middle path, the right path.
nkmc lets AI agents securely discover and call APIs, proxy CLI tools with credential injection, and participate in a federated gateway network.
Install: npm install -g @nkmc/cli @nkmc/server
# Start a local gateway (auto-generates keys, no setup needed)
nkmc gateway start
# Or with public tunnel (auto-authenticates with hosted gateway)
nkmc gateway start --tunnel
# Browse APIs
nkmc ls / # list all services
nkmc grep "weather" / # search services
nkmc cat /api.github.com/skill.md # read API spec
# Call APIs (gateway injects credentials)
nkmc cat /api.github.com/repos/nkmc-ai/gateway
nkmc write /discord.com/channels/123/messages '{"content":"hello"}'
nkmc rm /api.cloudflare.com/zones/z1/dns_records/rec_1
# Proxy CLI tools (gateway injects env vars)
nkmc run gh repo list
nkmc run stripe customers list --limit 10
nkmc run openai api chat.completions.create -m gpt-4 -p "hello"
# Manage credentials (AES-GCM encrypted in gateway vault)
nkmc keys set github.com --token ghp_xxx
nkmc keys set api.openai.com --token sk-xxx
nkmc keys list
nkmc keys remove github.com
# Run your own gateway
nkmc gateway start # local, port 9090
nkmc gateway start --tunnel # with public URL via CF Tunnel
nkmc gateway start --daemon # background
nkmc gateway stop
nkmc gateway status
# Register a service (OpenAPI auto-discovery)
nkmc register --url http://localhost:3000
nkmc register --url http://localhost:3000 --spec-url http://localhost:3000/openapi.json
# Federation — peer with other gateways
nkmc peers discover # find online gateways
nkmc peers discover --domain api.openai.com # find who has OpenAI
nkmc peers add --id bob --name "Bob" --url https://xyz.tunnel.nkmc.ai --secret xxx
nkmc peers list
nkmc peers remove bob
# Lending rules — control what you share
nkmc rules set api.openai.com --allow --pricing free
nkmc rules set api.stripe.com --allow --pricing per-request --amount 0.01
nkmc rules set github.com --deny
nkmc rules list
nkmc rules remove api.openai.com
# Domain verification
nkmc claim api.example.com # get DNS challenge
nkmc claim api.example.com --verify # verify and get publish token
Authenticate with a gateway and save JWT token to ~/.nkmc/credentials.json.
nkmc auth # hosted gateway (https://nkmc.ai)
nkmc auth --gateway-url http://localhost:9090 # local gateway
Token is valid for 24h. All subsequent commands use the saved token automatically.
List services or directory contents.
nkmc ls / # all services on the network
nkmc ls /api.github.com/ # contents of a specific service
Read data from a virtual path.
nkmc cat /api.github.com/skill.md
nkmc cat /api.github.com/repos/nkmc-ai/gateway
nkmc cat /rpc.ankr.com/blocks/21000000.json
Search services or endpoints.
nkmc grep "weather" / # search across all services
nkmc grep "alerts" /api.weather.gov/ # search within a service
Send data to a POST endpoint.
nkmc write /api.cloudflare.com/zones/z1/dns_records '{"type":"A","name":"app","content":"1.2.3.4"}'
Delete a resource.
nkmc rm /api.cloudflare.com/zones/z1/dns_records/rec_1abc
Pipe data between two paths.
nkmc pipe 'cat /api.weather.gov/alerts/active | write /discord.com/channels/123/messages'
Proxy a CLI tool through the gateway. The gateway looks up credentials for the tool, injects them as environment variables, executes the tool, and returns output.
nkmc run gh repo list
nkmc run stripe customers list --limit 5
nkmc run aws s3 ls
Built-in tools: gh (GitHub), stripe, openai, anthropic, aws.
Store an API key in the gateway vault (AES-GCM encrypted).
nkmc keys set github.com --token ghp_xxx
nkmc keys set api.openai.com --token sk-xxx
nkmc keys set api.stripe.com --token sk_test_xxx
nkmc keys list # list all stored keys
nkmc keys remove github.com # remove a key
Run a local gateway instance.
nkmc gateway start # foreground, port 9090
nkmc gateway start --port 8080 # custom port
nkmc gateway start --tunnel # with Cloudflare Tunnel (public URL)
nkmc gateway start --daemon # background mode
nkmc gateway stop # stop background gateway
nkmc gateway status # check if running + tunnel URL
Register a service with the gateway.
# Auto-discover from running service (probes OpenAPI well-known paths)
nkmc register --url http://localhost:3000
# With explicit OpenAPI spec URL
nkmc register --url http://localhost:3000 --spec-url http://localhost:3000/docs/openapi.json
# From skill.md file
nkmc register --domain api.example.com --dir ./my-project
Manage peer gateways for federation.
nkmc peers discover # find online gateways
nkmc peers discover --domain api.openai.com # filter by domain
nkmc peers add --id bob --name "Bob" --url https://xyz.tunnel.nkmc.ai --secret shared-key
nkmc peers list
nkmc peers remove bob
Manage credential lending rules.
nkmc rules set api.openai.com --allow --pricing free
nkmc rules set api.stripe.com --allow --peers peer-bob --pricing per-request --amount 0.01
nkmc rules set github.com --deny
nkmc rules list
nkmc rules remove api.openai.com
Claim domain ownership via DNS TXT verification.
nkmc claim api.example.com # get challenge
# Add TXT record: _nkmc.api.example.com → nkmc-verify=xxx
nkmc claim api.example.com --verify # verify and get publish token
| Variable | Description |
|---|---|
NKMC_GATEWAY_URL | Gateway URL (default: https://nkmc.ai) |
NKMC_TOKEN | Agent JWT token (prefer nkmc auth) |
NKMC_ADMIN_TOKEN | Admin token for gateway management |
NKMC_GATEWAY_NAME | Display name for tunnel discovery |
NKMC_HOME | Config directory (default: ~/.nkmc) |