# Openclaw X402 Gate

> Charge other agents for your OpenClaw skill or API via x402 on Solana. Mint a 402 challenge, verify payment on-chain, then serve. Funds settle directly to your own wallet — no custody, no intermediary.

- **Type:** Skill
- **Install:** `agentstack add skill-parad0x-labs-openclaw-skills-x402-gate`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Parad0x-Labs](https://agentstack.voostack.com/s/parad0x-labs)
- **Installs:** 0
- **Category:** [Finance & Payments](https://agentstack.voostack.com/c/finance-and-payments)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Parad0x-Labs](https://github.com/Parad0x-Labs)
- **Source:** https://github.com/Parad0x-Labs/openclaw-skills/tree/main/skills/x402-gate

## Install

```sh
agentstack add skill-parad0x-labs-openclaw-skills-x402-gate
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# x402 Gate

**Charge other agents** for your OpenClaw skill or API. Mint a 402 challenge,
verify the payment, then serve — funds settle straight to your own Solana wallet.

> **No custody.** Your wallet address is config; the skill signs nothing and holds
> no keys.

## When to use

- You want to monetize a skill, tool, or API by charging per-call in USDC.
- You want payments to land directly in your wallet with no intermediary custody.

## When NOT to use

- You're serving something valuable but left `requireOnChain` off — structural
  checks alone don't prove settlement. Turn it on for revenue-grade gating.
- You expected the skill to hold a balance for you. It doesn't, by design.

## Tools

- `x402_challenge({ resource, description? })` → a 402 challenge body to send an
  unpaid caller. The price is seller config (`priceUsdc`), never a caller input.
- `x402_verify({ header, resource })` → validates the payment; with
  `requireOnChain: true`, confirms the transaction settled on Solana first.
- `x402_rep_challenge()` → the reputation bar a caller must prove (see below).
- `x402_rep_verify({ proof, publicSignals, expectedAgentCommitment? })` → verifies a
  private reputation proof against your policy.

## Gate on private reputation (zk-rep)

Instead of (or alongside) charging per call, gate on **proven track record**: admit a
caller who proves it holds `>= repMinCount` settled receipts totalling `>= repMinVolume`
within `repWindowSeconds`, in an anchored receipt tree — **learning no individual amount,
counterparty, or wallet**. Set the bar in config (`repMinCount`, `repMinVolume`,
`repWindowSeconds`, `repTrustedRoots`); the caller answers with a Groth16 proof from
`x402-pay`'s `prove_reputation`.

Verification is fail-closed on every seam: the proof must cryptographically verify, clear
your policy floor, build on a **trusted** anchored root, carry a **single-use** nullifier,
and (when you pass `expectedAgentCommitment`) match the caller's bound identity. Runs
off-chain today; a multi-party ceremony and on-chain trustless verification are next.

## Safety

- **No keys, no custody** — `recipientAddress` is your public wallet.
- **Replay-resistant** — verification binds to a unique per-payment receipt hash
  carried in the on-chain memo.

> **Non-custodial** — funds settle to your own wallet; the skill holds no keys.

## Pairs with

`x402-pay` — the paying side. Together: the full agent-to-agent payment loop,
settling in USDC on Solana mainnet.

## Source

github.com/Parad0x-Labs/openclaw-skills/tree/main/skills/x402-gate

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Parad0x-Labs](https://github.com/Parad0x-Labs)
- **Source:** [Parad0x-Labs/openclaw-skills](https://github.com/Parad0x-Labs/openclaw-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-parad0x-labs-openclaw-skills-x402-gate
- Seller: https://agentstack.voostack.com/s/parad0x-labs
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.