← Back to Skills Marketplace
kirch

Clawpay

by kirch · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1782
Downloads
1
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install clawpay
Description
Payment requests and delivery for AI agents and humans.
README (SKILL.md)

Clawpay Delivery Skill (Hybrid)

This skill provides a minimal flow to create a paid request, collect payment, and deliver a result. Use it for any agent-to-agent or human-to-agent exchange.

PAY_TO: pass the receiving wallet address when creating a request (pay_to). Default PAY_TO rule: you can set a default receiving address in skill.json so the sender doesn't need to provide one each time.

Skill Files

File URL
SKILL.md (this file) https://clawpay.ai/skill.md
HEARTBEAT.md https://clawpay.ai/heartbeat.md
package.json (metadata) https://clawpay.ai/skill.json

Install locally:

mkdir -p ~/.openclaw/skills/clawpay
curl -s https://clawpay.ai/skill.md > ~/.openclaw/skills/clawpay/SKILL.md
curl -s https://clawpay.ai/heartbeat.md > ~/.openclaw/skills/clawpay/HEARTBEAT.md
curl -s https://clawpay.ai/skill.json > ~/.openclaw/skills/clawpay/package.json

Receiver: create a payment request

curl -X POST https://clawpay.ai/v1/requests \
  -H "Content-Type: application/json" \
  -d '{"amount":"5","currency":"USDC","description":"Run analysis skill","pay_to":"\x3Cpay_to>"}'

Response:

{
  "request_id": "\x3Crequest_id>",
  "pay_url": "https://clawpay.ai/pay/\x3Crequest_id>",
  "status": "pending"
}

Save request_id and pay_url.

Receiver: send the pay link

Forward pay_url to whoever needs to complete payment.

Payer: how to pay

Open the pay_url in a browser and complete payment with a crypto wallet.

Check payment status (polling, optional)

curl https://clawpay.ai/v1/requests/\x3Crequest_id>

If status is paid, deliver.

Receiver: deliver the result (optional)

curl -X POST https://clawpay.ai/v1/requests/\x3Crequest_id>/deliver \
  -H "Content-Type: application/json" \
  -d '{"payload":"\x3Cpayload>"}'

If unpaid, the server will return HTTP 402 and x402 payment headers.

Usage Guidance
This skill appears to implement the payment-request flow it advertises, but before installing or using it you should: (1) verify that https://clawpay.ai is a legitimate operator (corporate identity, docs, privacy policy, and contact/support), (2) confirm the API’s authentication model — why are no API keys required and is anonymous request creation intended, (3) avoid sending sensitive or confidential data as the 'payload' delivered to the service unless you have explicit assurances about encryption, retention, and usage, (4) review any files you download via the provided curl commands before executing or trusting them, and (5) consider testing in an isolated environment or sandbox first. If the maintainer can show that the service requires per-account authentication (API keys or similar) and documents data handling/retention, my confidence would increase and concerns about data exfiltration would be reduced.
Capability Analysis
Type: OpenClaw Skill Name: clawpay Version: 1.0.1 The OpenClaw AgentSkills skill bundle 'clawpay' is designed for payment requests and delivery, interacting with the `https://clawpay.ai` API. All network calls are directed to this domain and are consistent with the skill's stated purpose. While the `SKILL.md` includes instructions to download the skill's own components (SKILL.md, HEARTBEAT.md, package.json) from `https://clawpay.ai` for local installation, this is a common distribution method and does not involve executing arbitrary remote code. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's core behavior.
Capability Tags
cryptocan-make-purchases
Capability Assessment
Purpose & Capability
The name and description (payment requests and delivery) align with the runtime instructions: create a request, give payer a pay_url, poll status, and POST a delivery payload. The package.json default_pay_to is consistent with the described 'default pay_to' behavior.
Instruction Scope
SKILL.md instructs agents/users to POST/GET to https://clawpay.ai endpoints and to POST arbitrary 'payload' to /requests/<id>/deliver. That is within the stated payment/delivery scope, but it explicitly directs transmission of result payloads to a third-party service without any guidance about what data is safe to send, and without any mention of authentication, encryption beyond HTTPS, or data retention/usage. The install snippet also instructs curl from the remote domain into ~/.openclaw/skills/clawpay which writes remote content to disk — expected for an install but potentially risky if the domain is untrusted.
Install Mechanism
This is instruction-only (no install spec). The SKILL.md includes example local-install commands that curl files from https://clawpay.ai into ~/.openclaw/skills/clawpay. Downloading files from the vendor domain is typical, but the domain is a third party (not a well-known package host) so users should verify the source before running those curl commands.
Credentials
The skill requests no environment variables or credentials. While minimal privileges can be good, a payments API that allows creating requests, polling status, and delivering payloads with no declared authentication is unusual and worth questioning. The lack of required credentials could indicate a public anonymous endpoint (design choice) — or it could be an omission in the documentation. Either way, it increases the risk that anyone (or a compromised agent) could create or fulfill requests or exfiltrate data to the service.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide configuration changes, and has no code files that modify other skills. No elevated persistence or cross-skill config changes are requested.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clawpay
  3. After installation, invoke the skill by name or use /clawpay
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Marked checking payment status (polling) as optional in documentation. - No functional or code changes; documentation update only.
v1.0.0
- Initial release of Clawpay skill (version 1.0.0) - Supports creating, sending, and tracking payment requests for agents and humans - Enables delivery of results upon payment completion - Includes API usage examples and configuration for default receiving address - Plain installation instructions provided
Metadata
Slug clawpay
Version 1.0.1
License
All-time Installs 2
Active Installs 2
Total Versions 2
Frequently Asked Questions

What is Clawpay?

Payment requests and delivery for AI agents and humans. It is an AI Agent Skill for Claude Code / OpenClaw, with 1782 downloads so far.

How do I install Clawpay?

Run "/install clawpay" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Clawpay free?

Yes, Clawpay is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Clawpay support?

Clawpay is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Clawpay?

It is built and maintained by kirch (@kirch); the current version is v1.0.1.

💬 Comments