Install
$ agentstack add skill-parad0x-labs-openclaw-skills-x402-gate ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
x402 Gate
Charge other agents for your OpenClaw skill or API. Mint a 402 challenge, verify the payment, then serve — funds settle straight to your own Solana wallet.
> No custody. Your wallet address is config; the skill signs nothing and holds > no keys.
When to use
- You want to monetize a skill, tool, or API by charging per-call in USDC.
- You want payments to land directly in your wallet with no intermediary custody.
When NOT to use
- You're serving something valuable but left
requireOnChainoff — structural
checks alone don't prove settlement. Turn it on for revenue-grade gating.
- You expected the skill to hold a balance for you. It doesn't, by design.
Tools
x402_challenge({ resource, description? })→ a 402 challenge body to send an
unpaid caller. The price is seller config (priceUsdc), never a caller input.
x402_verify({ header, resource })→ validates the payment; with
requireOnChain: true, confirms the transaction settled on Solana first.
x402_rep_challenge()→ the reputation bar a caller must prove (see below).x402_rep_verify({ proof, publicSignals, expectedAgentCommitment? })→ verifies a
private reputation proof against your policy.
Gate on private reputation (zk-rep)
Instead of (or alongside) charging per call, gate on proven track record: admit a caller who proves it holds >= repMinCount settled receipts totalling >= repMinVolume within repWindowSeconds, in an anchored receipt tree — learning no individual amount, counterparty, or wallet. Set the bar in config (repMinCount, repMinVolume, repWindowSeconds, repTrustedRoots); the caller answers with a Groth16 proof from x402-pay's prove_reputation.
Verification is fail-closed on every seam: the proof must cryptographically verify, clear your policy floor, build on a trusted anchored root, carry a single-use nullifier, and (when you pass expectedAgentCommitment) match the caller's bound identity. Runs off-chain today; a multi-party ceremony and on-chain trustless verification are next.
Safety
- No keys, no custody —
recipientAddressis your public wallet. - Replay-resistant — verification binds to a unique per-payment receipt hash
carried in the on-chain memo.
> Non-custodial — funds settle to your own wallet; the skill holds no keys.
Pairs with
x402-pay — the paying side. Together: the full agent-to-agent payment loop, settling in USDC on Solana mainnet.
Source
github.com/Parad0x-Labs/openclaw-skills/tree/main/skills/x402-gate
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Parad0x-Labs
- Source: Parad0x-Labs/openclaw-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.