MasterCard AgentPay | Compatible compatible cards, wallets & payments

MasterCard Agent Pay Compatible compatible cards, wallets & payments. Financial management for Agents and OpenClaw bots.

This skill appears coherent for enabling agent payments. Before installing: (1) Only provide a CreditClaw API key you control and understand grants spending capability; treat it as a secret. (2) Ensure the agent runtime can keep decrypted card data strictly ephemeral (in-memory) and that logs/telemetry will not capture card fields or the API key. (3) Confirm your owner-approved spending limits, approval_mode, and blocked categories in spending.md to avoid unexpected charges. (4) If you do not want autonomous spending, disable or tightly scope agent autonomy (or keep approval_mode set to ask_for_everything). If you want more assurance, verify the service at https://creditclaw.com and confirm its ownership and privacy policies before handing over real payment credentials.

Type: OpenClaw Skill Name: mastercard-agentpay Version: 2.3.4 The skill bundle describes a financial enablement platform ('CreditClaw') that allows AI agents to manage spending and receive payments. While the functionality is aligned with its stated purpose, the 'My Card (Rail 5)' flow in 'encrypted-card.md' introduces a high-risk architectural pattern: it requires the agent to retrieve a one-time decryption key and perform AES-256-GCM decryption to handle raw credit card details (number, CVV, etc.) in memory. This design relies entirely on the agent's adherence to markdown instructions to not log or persist the sensitive data, creating a significant vulnerability for accidental data exposure or theft if the agent's logic is subverted via prompt injection.