# Openclaw X402 Pay

> Pay x402-gated APIs and AI agents on Solana — builds an unsigned payment transaction, verifies settlement on-chain, and returns a receipt hash. Hard spend cap enforced before any transaction. BYO signer, no keys held.

- **Type:** Skill
- **Install:** `agentstack add skill-parad0x-labs-openclaw-skills-x402-pay`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Parad0x-Labs](https://agentstack.voostack.com/s/parad0x-labs)
- **Installs:** 0
- **Category:** [Finance & Payments](https://agentstack.voostack.com/c/finance-and-payments)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Parad0x-Labs](https://github.com/Parad0x-Labs)
- **Source:** https://github.com/Parad0x-Labs/openclaw-skills/tree/main/skills/x402-pay

## Install

```sh
agentstack add skill-parad0x-labs-openclaw-skills-x402-pay
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# x402 Pay

Let your OpenClaw agent **pay for x402-gated APIs, data, and other agents** on
Solana — without ever handing the skill a private key.

> **Bring your own signer.** The skill builds an *unsigned* transaction and hands
> it to a wallet/signer you control. It never holds, requests, or reads a key.

## When to use

- Your agent needs to call a paid (x402 / HTTP 402) API or buy a resource from
  another agent, and you want it to settle in USDC on Solana automatically.
- You want a hard spend cap and self-custody, not a hosted wallet.

## When NOT to use

- You haven't set a sensible `maxAmountUsdc` cap — the skill enforces one before
  any payment and will (correctly) refuse anything above it.
- You want the skill to custody keys for you. It won't, by design.

## Safety rails

- **Install with `--ignore-scripts`** (required): this skill runs where the payment
  key lives; never let a transitive native addon run install-time code on that host.
- **Real-money is opt-in**; set `allowMainnet: true` to enable mainnet (also needs `rpcUrl`).
- **Hard `maxAmountUsdc` cap**, enforced before any transaction is built.
- **Minimal network**: your Solana RPC + the target URL only. No telemetry.

> **Non-custodial and spend-capped by design** — your agent signs with its own
> wallet; no single payment exceeds your cap.

## Tools

- `pay_x402({ url, method? })` → fetches the URL; on HTTP 402, pays within your cap
  and network, then returns the resource plus `{ paymentSignature, receiptHash,
  amountUsdc }`. `url` may be a `name.null` to pay by name.
- `rep_identity()` → your agent's public reputation commitment, to bind a proof to
  this agent (hand it to a gate as `expectedAgentCommitment`). Reveals nothing secret.
- `prove_reputation({ root, minCount, minVolume, windowStart, epoch, receipts })` →
  a private proof of track record (see below).

## Private reputation (zk-rep)

Prove you hold **enough settled receipts to clear a gate** — `>= minCount` receipts
totalling `>= minVolume` since `windowStart`, in an anchored receipt tree — **without
revealing any individual amount, counterparty, or wallet**. A Groth16 proof
(`track_record.circom`, BN254) the gate verifies with `x402_rep_verify`.

- **Secret stays put.** Register your reputation key with `setReputationKey({ secret,
  agentId })` — a live capability, like the signer, never serialized into config. It
  never appears in a proof, a return value, a log, or an error.
- **Single-use.** Each proof carries a per-epoch nullifier the gate spends once.
- **Bind it.** Pass `expectedAgentCommitment` so a proof can't be transplanted to
  another agent.

Proving artifacts (the circuit `wasm`/`zkey`) are hosted and passed by path/URL
(`repWasmPath`/`repZkeyPath`), not bundled. Off-chain verification runs today; a
multi-party ceremony and on-chain trustless verification are coming next.

## Pairs with

`x402-gate` — the charging side. Together they're the full agent-to-agent payment
loop, settling in USDC on Solana mainnet.

## Source

github.com/Parad0x-Labs/openclaw-skills/tree/main/skills/x402-pay

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Parad0x-Labs](https://github.com/Parad0x-Labs)
- **Source:** [Parad0x-Labs/openclaw-skills](https://github.com/Parad0x-Labs/openclaw-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-parad0x-labs-openclaw-skills-x402-pay
- Seller: https://agentstack.voostack.com/s/parad0x-labs
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.