메뉴
Example driver: turn incoming webhook signals into validated paper trades inside a recorded session.
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/krakenfx/kraken-cli --skill recipe-playground-webhook명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Capture the spot-futures price spread with delta-neutral basis trades.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | recipe-playground-webhook |
| version | 1.0.0 |
| description | Example driver: turn incoming webhook signals into validated paper trades inside a recorded session. |
| metadata | {"openclaw":{"category":"recipe","domain":"sessions"},"requires":{"bins":["kraken","python3"],"skills":["kraken-playground"]}} |
PREREQUISITE: Load
kraken-playgroundto run this recipe. This recipe is an example, not a boundary. Adapt the steps to your signal source, or write your own driver (seekraken-playground→ Driving Your Own Hypothesis).
Bridge an external system into the sandbox: a TradingView alert, a CI job, or a plain curl POSTs a signal to a local listener, and each valid signal becomes a paper order inside a recorded session. The market tape, the fills, and the signal-to-order decisions all land in one window for replay and P&L.
Use this skill for:
This recipe records a session. It never places a live order.
The webhook payload is untrusted input. Every field is validated against an allowlist or a numeric bound before it reaches an order — a signal that fails any check is logged as a skip, never executed, and never interpolated into a command.
The listener binds 127.0.0.1 only. Do not bind other interfaces and do not port-forward it; anyone who can reach the port can trade the paper account. If the signal source is remote, tunnel (e.g. ssh -R) rather than expose.
The signal stream is the loop, not /loop — the same long-lived-process exception as the dip-triggered recipe (see kraken-playground → Pacing).
One JSON object per POST body:
{"symbol": "BTC/USD", "side": "buy", "qty": "0.001", "token": "<shared-secret>", "note": "free text"}
symbol, side, qty are required; token is required when the token param is set; note is echoed into the decision reason.
Every bound that gates execution goes in --strategy-params:
port: listener port on 127.0.0.1allowed_symbols: the only pairs a signal may trade — must be a subset of the session's recorded --symbols, or fills have no marks to score bymax_notional_per_signal: quote-currency cap per order; a signal above it is skipped, not clampedmax_signals: stop after this many executed signalstoken: optional shared secret; when set, signals without a matching token field are droppedNatural language:
Listen on localhost:8787 for webhook signals. Trade only BTC/USD, at most
$500 per signal, at most 10 signals, then stop. Record every accepted and
rejected signal with its reason. At the end, show P&L.
Work inside a paper workspace (create one once: kraken workspace create hook --capital 10000 --mode paper), then:
export KRAKEN_WORKSPACE=hook
kraken session start \
--symbols BTC/USD --channels ticker,trade --to duckdb,jsonl \
--label hook-btc-$(date +%Y%m%d-%H%M%S) \
--strategy recipe-playground-webhook \
--strategy-params '{"port":8787,"allowed_symbols":["BTC/USD"],"max_notional_per_signal":500,"max_signals":10}' \
-o json 2>/dev/null &
# The session_started stdout line carries the id: {"type":"session_started","session":"s<n>",...}
Print the session id to the user right after starting, and again in the final report.
The listener appends each POST body to a signals file outside the session directory (the recorder owns that tree); the decision loop tails it. Both die with the session.
PORT=8787
ALLOWED_SYMBOLS="BTC/USD" # space-separated allowlist
MAX_NOTIONAL=500
MAX_SIGNALS=10
SIGNALS=$(mktemp -t hook-signals)
python3 - "$PORT" "$SIGNALS" <<'PY' &
import http.server, sys
port, path = int(sys.argv[1]), sys.argv[2]
class H(http.server.BaseHTTPRequestHandler):
def do_POST(self):
body = self.rfile.read(int(self.headers.get("Content-Length", 0)))
with open(path, "ab") as f:
f.write(body.strip() + b"\n")
self.send_response(204); self.end_headers()
def log_message(self, *args): pass
http.server.HTTPServer(("127.0.0.1", port), H).serve_forever()
PY
LISTENER=$!
DONE=0
tail -n +1 -f "$SIGNALS" | while read -r sig; do
SYMBOL=$(echo "$sig" | jq -r '.symbol // empty')
SIDE=$(echo "$sig" | jq -r '.side // empty')
QTY=$(echo "$sig" | jq -r '.qty // empty')
NOTE=$(echo "$sig" | jq -r '.note // ""')
# Untrusted input: allowlist the enum and the pair, bound the number.
# A failed check is a recorded skip — never a clamped or guessed order.
case "$SIDE" in buy|sell) ;; *)
kraken session note --kind skip --reason "webhook rejected: bad side '$SIDE'" -o json 2>/dev/null; continue;;
esac
case " $ALLOWED_SYMBOLS " in *" $SYMBOL "*) ;; *)
kraken session note --kind skip --reason "webhook rejected: symbol '$SYMBOL' not in allowlist" -o json 2>/dev/null; continue;;
esac
if ! echo "$QTY" | grep -qE '^[0-9]*\.?[0-9]+$'; then
kraken session note --kind skip --reason "webhook rejected: non-numeric qty '$QTY'" -o json 2>/dev/null; continue
fi
PRICE=$(kraken ticker "$SYMBOL" -o json 2>/dev/null | jq -r '.. | .last? // empty' | head -1)
NOTIONAL=$(echo "scale=2; $QTY * $PRICE" | bc -l)
if (( $(echo "$NOTIONAL > $MAX_NOTIONAL" | bc -l) )); then
kraken session note --kind skip --symbol "$SYMBOL" \
--reason "webhook rejected: notional \$$NOTIONAL exceeds cap \$$MAX_NOTIONAL" -o json 2>/dev/null; continue
fi
kraken order "$SIDE" "$SYMBOL" "$QTY" --type market \
--reason "webhook signal: $SIDE $QTY $SYMBOL (~\$$NOTIONAL) — $NOTE" -o json 2>/dev/null
DONE=$((DONE + 1))
[ "$DONE" -ge "$MAX_SIGNALS" ] && break
done
kill "$LISTENER" 2>/dev/null
kraken session stop -o json 2>/dev/null
Send a test signal:
curl -s -X POST "127.0.0.1:8787" -d '{"symbol":"BTC/USD","side":"buy","qty":"0.001","note":"smoke test"}'
kraken session show -o json 2>/dev/null | jq '.summary'
kraken session decisions --session s<n> -o json 2>/dev/null \
| jq -c '.decisions[] | {kind, symbol, reason}'
Report:
kraken explain pnl127.0.0.1 only — never another interface, never port-forwarded.skip notes, not orders.allowed_symbols stays a subset of the session's recorded --symbols.max_signals; a runaway signal source must exhaust the cap, not the account.--strategy-params and the arithmetic in jq/bc.kraken feedback.