# One API agent connection

Gateway: https://one-api.161-35-251-195.sslip.io
MCP: https://one-api.161-35-251-195.sslip.io/mcp
Skill download: /one-api-skill.zip
Skill page: https://trusty-kernel-dp3j.here.now/skill.html
Hub: https://trusty-kernel-dp3j.here.now/
Private dashboard: https://one-api.161-35-251-195.sslip.io/dashboard
Instructions: /SKILL.md
Standard-library Python client: /client.py
Machine handoff: /manifest.json
Canonical source (private): https://github.com/jbellsolutions/one-api

Use the provisioned agent token from your private runtime, never from a public page or repository. Set ONE_API_URL and ONE_API_TOKEN together, or ONE_API_CONFIG to your private JSON connection. Discover enabled capabilities before using them. Inventory-only tools cannot execute. Agents share the owner's workspace, not isolated tenants. Agent keys cannot administer the dashboard or change connections.

For a goal, select only the trial whose authorization covers the task; create a goal with finite criteria. Keep stable request IDs. Free web.fetch/web.scrape should precede paid browser reads when sufficient. browser.read renders one public same-origin page in a fresh Browser Use Cloud browser (one-minute TTL, 2 MB transfer limit, no proxy/profile/CAPTCHA solver), then stops it. It is not a click/type session controller. browser.result polls an existing owned browser; it does not create a new one. scraper.save/test/run/result supports reusable custom extraction code with managed retrieval. Paid calls reserve their maximum against the existing shared trial. Another goal never resets the budget.

Check saved receipts and actual source evidence. Keep unknown outcomes uncertain; do not duplicate effects. Save checked progress to memory. Complete criteria only when observed. The calling agent owns the productivity loop; no unattended worker is created by installing the skill.

Treg catalog/balance reads and four bounded routed research/email enrichment reads are enabled; discovery does not enable arbitrary catalog endpoints. fleet.status reads enrolled native Mac readiness; fleet.call additionally requires the enrolled owner's signed node-bound envelope. Native model costs and permissions remain with the existing Mac agents, separate from the gateway trial. Installing this skill does not enroll nodes or grant delegation authority. Preserve the exact native job ID across transports and reconcile uncertainty rather than submitting again.

Native heartbeat/inference readiness does not establish app or browser-profile permissions. Existing signed-in Chrome requires separately approved profile access plus the required CuaDriver Accessibility and Screen Recording grants. Verify the approved binding and task scope; missing grants remain a dependency. Keep native desktop/browser endpoints private and do not infer that all profiles are ready.