← Back to Skills Marketplace
Stellar Agentic Wallet
by
Shawn Muggle
· GitHub ↗
· v1.7.0
· MIT-0
163
Downloads
1
Stars
0
Active Installs
12
Versions
Install in OpenClaw
/install stellar-agentic-wallet
Description
A Stellar USDC wallet skill for AI agents. Pay for 402-gated APIs via MPP Router or x402 facilitators, check balances, manage USDC trustlines, swap XLM→USDC...
Usage Guidance
This appears to be a legitimate Stellar wallet skill, but it controls a signing key so treat it like money: (1) Use a dedicated hot wallet with a small balance, not your main account. (2) Generate and keep the secret in the recommended file (.stellar-secret with mode 600); avoid pasting secrets into UIs. (3) Run on testnet first (pass --network testnet) to confirm flows. (4) Be cautious with pay-per-call: the skill will pay any 402 endpoint you point it at unless you pass --expect-pay-to/--expect-amount to verify recipient and price. If you accept the autopay ceiling option, the skill will write a comment into your secret file and will silently sign payments at-or-below that ceiling — only enable this if you trust the calling flow. (5) Review the included scripts (especially scripts/src/secret.ts and pay-per-call/send-payment code) yourself or verify the upstream repository before using with real funds; note the SKILL.md includes a repository/homepage reference while the registry metadata listed 'source: unknown' — consider checking that repo for release history. (6) If you need the agent to operate autonomously, accept that it can propose payments; rely on the explicit confirmation gates and use expect-* flags to mitigate redirect/exfiltration risk.
Capability Analysis
Type: OpenClaw Skill
Name: stellar-agentic-wallet
Version: 1.7.0
The skill bundle is a well-architected Stellar USDC wallet for AI agents with robust security controls. It implements several defensive measures, including a runtime redactor to prevent private key leakage to stdout/stderr (scripts/src/secret.ts), file-based secret storage with strict mode 600 permissions (scripts/generate-keypair.ts), and mandatory human-in-the-loop confirmation gates for mainnet transactions. The payment engine (scripts/src/pay-engine.ts) includes explicit validation logic to cross-check 402 payment challenges against service catalog metadata, protecting against fund redirection or price manipulation by compromised endpoints. All network activity is restricted to documented Stellar nodes and legitimate payment facilitators (mpprouter.dev and rozo.ai).
Capability Tags
Capability Assessment
Purpose & Capability
Name/description (wallet, trustlines, swaps, bridge, pay-per-call) match the included scripts and listed network endpoints (Horizon, Soroban RPC, MPP Router, Rozo). Declared npm deps (@stellar/stellar-sdk, mppx, tsx) are appropriate for the Node-based Stellar functionality.
Instruction Scope
Runtime docs and scripts stay on-topic (loading a secret file or env fallback, checking balances, adding trustlines, swapping, creating Rozo intents). Important behaviors to notice: the code will fall back to legacy env keys if present, audits .gitignore, and can write an autopay-ceiling comment into the secret file to enable silent payments below that ceiling — those file reads/writes are within the wallet's purpose but are noteworthy security-affecting actions. The skill can pay any 402 URL you point it at unless you use the --expect-* protections; the README explicitly warns about this.
Install Mechanism
No install spec is provided (instruction-only install), and the package.json lists standard npm dependencies from the registry. There are no downloads from untrusted servers or embedded installers in the manifest.
Credentials
The skill does not request unrelated environment variables or cloud credentials. Secrets are handled via a local file (.stellar-secret) by design; the code documents this and validates format. It also recognizes legacy env vars as a fallback, which is reasonable but should be understood by installers.
Persistence & Privilege
always:false and agent-autonomy defaults are normal. The skill will persist an 'autopay-ceiling' as a comment inside the user's secret file if the user opts in, enabling future silent signing under that ceiling (logged to stderr). The skill does not appear to modify other skills or global agent config.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stellar-agentic-wallet - After installation, invoke the skill by name or use
/stellar-agentic-wallet - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.7.0
stellar-agentic-wallet v1.6.1 changelog
- Removed the redundant or obsolete file `prepare.mjs` from the codebase.
- No changes to functionality or runtime dependencies.
v1.6.0
**Summary:**
Adds user-configurable autopay ceiling for pay-per-call, tightening mainnet spending protections.
- Introduced per-wallet autopay ceiling for mainnet pay-per-call: prompts once, then auto-approves payments ≤ ceiling (logged for audit).
- Ceiling stored as a comment in the secret file; easily revocable by deleting the line.
- `send-payment` and `bridge` always require confirmation on mainnet, no automatic signing.
- Added `--expect-pay-to`, `--expect-amount`, `--expect-asset` flags to pay-per-call for enhanced 402 payment safety.
- Documentation updated to reflect new autopay handling and security best practices.
v1.1.10
Version 1.1.10 → 1.5.0
- Updated skill metadata version to 1.5.0.
- No code or functional changes detected.
- SKILL.md updated for consistency; no operational impact.
v1.1.9
Version 1.1.9 → 1.4.0
- Added new `onboard` sub-skill for wallet setup/readiness checks, including secret validation, funding, trustline, and swap guidance.
- Updated documentation (`SKILL.md`) to reflect the new onboarding flow and step-by-step usage on a fresh machine.
- Refined and clarified sub-skill naming and triggers (e.g., `check-balance`, `discover`).
- Added supporting scripts for onboarding and balance checks.
- Created new `prepare.mjs` build/dependency script and included `package-lock.json` for reproducibility.
v1.1.8
- Lowered the mainnet spending confirmation threshold from $1.00 to $0.10.
- `pay-per-call` now auto-approves micropayments up to $0.10; payments above prompt for confirmation.
- Updated documentation to reflect the new confirmation behavior and clarify default thresholds.
v1.1.7
- Version bump from 1.1.6 to 1.1.7.
- Improved documentation: clearer explanation of secret handling guarantees and strict scoping of signing keys.
- Explicit section listing all network endpoints the skill may contact and their purposes.
- No code changes detected; update consists of documentation and metadata improvements.
v1.1.6
No code or functional changes. Documentation has been updated for clarity and formatting.
- Improved security notice for clarity and readability.
- Made instructions, usage notes, and warnings easier to scan.
- Reformatted and condensed key sections of the README.
- No changes to code or behavior.
v1.1.4
- Migrated all sub-skills from the `commands/` folder to `skills/` for improved organization and clarity.
- Updated metadata: new author, version bump, homepage, and repository links; dependencies list updated (removed unused, listed only necessary packages).
- Adjusted sub-skill references in documentation to reflect new paths.
- No changes to core wallet functionality or sub-skill capabilities.
- Improved and clarified package documentation in SKILL.md.
v1.0.3
Stellar-agent-agent-wallet 1.0.3 improves secret key management and CLI configuration:
- Secret keys are now stored in a file (`.stellar-secret`), not environment variables. Use `scripts/generate-keypair.ts` to generate and manage wallet keys.
- Sensitive secrets are never printed to stdout; the file-based approach matches common wallet security practices.
- All CLI commands now accept `--secret-file` and `--network` flags for configuration, and environment variable handling has been removed.
- Updated documentation reflecting the switch from environment-variable to file-based secret management.
- Added a `scripts/src/cli-config.ts` helper to support the new CLI options. Removed obsolete `env.example.txt`.
v1.0.2
Version 1.0.2
- Added standalone scripts for protocol handling: MPP envelope, x402, Stellar signer, Rozo client, pay engine, and secret management.
- Deprecated and removed template files previously used for code generation.
- Added an example `.env` file for easier configuration setup.
- Updated environment config: removed unused variables (MPP_ROUTER_URL, ROZO_INTENT_URL).
- No functional API changes; internal refactor improves modularity and clarity.
v1.0.1
stellar-agent-wallet 1.0.1
- Skill name corrected to "stellar-agent-wallet" for consistency.
- Version updated to 1.0.1.
- Added detailed metadata in SKILL.md: SPDX license (MIT), runtime dependencies, required/optional environment variables, and network endpoints.
- Explicit security warnings in the documentation about wallet use, private key handling, and default mainnet.
- Listed commands requiring user spending confirmation and thresholds.
- No code changes in files; SKILL.md reflects the only updates.
v1.0.0
Initial release of stellar-agentic-wallet: a modular Stellar USDC wallet skill for AI agents.
- Enables agents to pay for 402-gated APIs, check balances, manage USDC trustlines, swap XLM→USDC, and bridge/send USDC cross-chain via Rozo.
- Organized as a router over five focused sub-skills: stellar-balance, discover-mpprouter, pay-per-call, send-payment, and bridge.
- Supports both testnet and mainnet, operates in client-only and sponsored modes.
- Allows cross-chain USDC transfers to Ethereum, Arbitrum, Base, BSC, Polygon, Solana, or back to Stellar.
- Triggers on relevant wallet/payment/bridge requests or payment intent from the user.
Metadata
Frequently Asked Questions
What is Stellar Agentic Wallet?
A Stellar USDC wallet skill for AI agents. Pay for 402-gated APIs via MPP Router or x402 facilitators, check balances, manage USDC trustlines, swap XLM→USDC... It is an AI Agent Skill for Claude Code / OpenClaw, with 163 downloads so far.
How do I install Stellar Agentic Wallet?
Run "/install stellar-agentic-wallet" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Stellar Agentic Wallet free?
Yes, Stellar Agentic Wallet is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Stellar Agentic Wallet support?
Stellar Agentic Wallet is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Stellar Agentic Wallet?
It is built and maintained by Shawn Muggle (@shawnmuggle); the current version is v1.7.0.
More Skills