← Back to Skills Marketplace
277
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install neckr0ik-x402-payments
Description
x402 payment protocol for AI agents. Enables autonomous micropayments using HTTP 402 status codes and stablecoins. Use when you need to pay for API access, a...
Usage Guidance
This skill implements an autonomous micropayments client and will create ~/.x402 and write wallet and history files. Before installing: (1) Confirm how the CLI is meant to be run—SKILL.md names 'neckr0ik-x402-payments' but only scripts/x402.py is included. (2) Treat any private key as highly sensitive: do not provide your main funds wallet. Ask the author whether private keys are encrypted at rest; if not, assume wallet.json and history are plaintext. (3) Prefer signing transactions offline or with a hardware wallet rather than storing X402_PRIVATE_KEY in env or config. (4) Verify facilitator endpoints and network behavior (no hard-coded remote upload was found, but facilitator URLs come from servers you contact). (5) If you cannot audit the remaining/truncated code or the references/ facilitator lists, consider using a throwaway wallet or rejecting the skill. The mismatches and plaintext key handling are the primary reasons for caution.
Capability Analysis
Type: OpenClaw Skill
Name: neckr0ik-x402-payments
Version: 1.0.0
The skill provides a simulated implementation of the x402 payment protocol, allowing AI agents to handle micropayments via HTTP 402 status codes. The Python script `scripts/x402.py` manages local configuration and simulates the payment flow without actually performing blockchain transactions or exfiltrating data. While it suggests storing private keys in a local plain-text configuration file (`~/.x402/config.json`), which is a security vulnerability, there is no evidence of malicious intent, unauthorized remote execution, or harmful prompt injection.
Capability Assessment
Purpose & Capability
The name/description (x402 micropayments) align with the included code: the client checks for HTTP 402 responses, constructs payment requests, stores receipts, and simulates signing/submission. Requiring a wallet/private key is coherent for signing payments. However, the SKILL.md advertises a CLI named 'neckr0ik-x402-payments' and Python import examples, while the repository only includes scripts/x402.py and no install spec — that mismatch is unexplained.
Instruction Scope
SKILL.md instructs the agent to set wallet.private_key (or use environment variable X402_PRIVATE_KEY) and to run CLI commands. The skill's runtime instructions reference storing keys and writing history locally. The declared metadata lists no required env vars, but the docs explicitly mention X402_PRIVATE_KEY; that is an access/instruction mismatch. The instructions also direct creation and use of a local ~/.x402 directory (config, wallet.json, history.jsonl), which grants the skill write/read access to local files containing sensitive data (private keys, transaction history).
Install Mechanism
There is no install specification (instruction-only), but a Python script scripts/x402.py is included. Because there's no install step or packaging, the SKILL.md's CLI name may not exist on PATH; operators would need to run the Python script directly or install it themselves. Lack of an install mechanism is lower-risk than arbitrary downloads, but the mismatch reduces clarity about how code will actually run.
Credentials
The skill handles highly sensitive data (wallet private keys) and suggests storing them either via a config command (which likely writes plaintext wallet.json) or the environment variable X402_PRIVATE_KEY. Yet requires.env in the metadata is empty. The skill does not declare or justify this sensitive access in registry metadata, and there is no guidance that private keys will be encrypted at rest. Requesting or handling private keys without declaring them is disproportionate and warrants caution.
Persistence & Privilege
The skill creates a per-user config directory (~/.x402) and writes wallet and history files. always:false (not force-installed) and it does not request system-wide privileges. Writing config and history is consistent with a payments client, but persistent local storage of private keys and unencrypted receipts increases risk — the skill will keep a permanent local footprint in the user's home directory.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install neckr0ik-x402-payments - After installation, invoke the skill by name or use
/neckr0ik-x402-payments - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the x402 payment protocol skill for AI agents.
- Enables autonomous micropayments for API access using HTTP 402 status codes and stablecoins.
- Supports paying for, accepting, and verifying x402-enabled endpoints.
- Compatible with major blockchains (Ethereum, Polygon, Base, Arbitrum, Optimism, Solana) and stablecoins (USDC, USDT, DAI).
- Provides CLI commands for checking endpoints, making payments, running a payment-enabled API server, checking balances, and viewing payment history.
- Emphasizes secure local key management and on-chain payment settlement.
- Includes usage examples for both agents (consumers) and service providers.
Metadata
Frequently Asked Questions
What is Neckr0ik X402 Payments?
x402 payment protocol for AI agents. Enables autonomous micropayments using HTTP 402 status codes and stablecoins. Use when you need to pay for API access, a... It is an AI Agent Skill for Claude Code / OpenClaw, with 277 downloads so far.
How do I install Neckr0ik X402 Payments?
Run "/install neckr0ik-x402-payments" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Neckr0ik X402 Payments free?
Yes, Neckr0ik X402 Payments is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Neckr0ik X402 Payments support?
Neckr0ik X402 Payments is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Neckr0ik X402 Payments?
It is built and maintained by Neckr0ik (@neckr0ik); the current version is v1.0.0.
More Skills