← Back to Skills Marketplace
gane5h

Goldrush X402

by gane5h · GitHub ↗ · v3.0.5 · MIT-0
cross-platform ⚠ suspicious
301
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install goldrush-x402
Description
GoldRush x402 — pay-per-request blockchain data access using the x402 protocol (HTTP 402 Payment Required). Use this skill whenever the user is building an A...
README (SKILL.md)

GoldRush x402

Pay-per-request access to GoldRush blockchain data using the x402 protocol. No API key, no signup, no billing — just a funded wallet. Provides access to Foundational API endpoints through a transparent reverse proxy.

Quick Start

import { HTTPClient } from "@x402/core";
import { ExactEvmScheme } from "@x402/evm";

const client = new HTTPClient({
  scheme: new ExactEvmScheme({
    network: "eip155:84532", // Base Sepolia
    privateKey: process.env.WALLET_PRIVATE_KEY,
  }),
});

// Get token balances — payment handled automatically
const balances = await client.get(
  "https://x402.goldrush.dev/v1/eth-mainnet/address/demo.eth/balances_v2/"
);
console.log(balances);

Install: npm install @x402/core @x402/evm

How x402 Works

1. REQUEST  → Agent calls endpoint without payment
2. 402      → Server responds with payment instructions (amount, token, recipient)
3. PAY      → Agent signs payment with stablecoins on Base, retries with proof
4. DATA     → Server validates request *before* charging, returns data

The x402 client libraries handle steps 2-3 automatically. From your code, it's just a GET request.

Key safety feature: The proxy validates your request before charging. Malformed addresses, unsupported chains, or bad parameters get a clear error — you pay nothing.

Payment: USDC on Base Sepolia (testnet). Base mainnet support coming soon.

Cross-Reference

x402 serves the same endpoints as the Foundational API with the same parameters and response format. For detailed endpoint documentation (parameters, response schemas, use cases), see the goldrush-foundational-api skill.

Base URL mapping:

  • Foundational API: https://api.covalenthq.com/v1/...
  • x402 proxy: https://x402.goldrush.dev/v1/...

Pricing Summary

Model Description Example
Fixed One price per call Token balances, NFT holdings, block details
Tiered Price by data volume Transactions, event logs

Tiers (for variable-length data)

Tier Items Use Case
Small 1-50 Quick lookups, recent activity
Medium 51-200 Standard queries
Large 201-500 Detailed analysis
XL 501+ Full history

Select tier via query parameter: ?tier=small

Response Caching

Cached responses cost less. Cache TTLs:

  • Balances: 30 seconds
  • Pricing data: 5 minutes

AI Agent Workflow

1. Discover (free)

curl https://x402.goldrush.dev/v1/x402/endpoints | jq
curl https://x402.goldrush.dev/v1/x402/search?q=balance | jq

2. Evaluate

curl https://x402.goldrush.dev/v1/x402/endpoints/get-token-balances-for-address | jq

Returns credit rate, pricing model, supported chains — everything to decide what to call.

3. Pay & consume

const balances = await client.get(
  `https://x402.goldrush.dev/v1/eth-mainnet/address/${wallet}/balances_v2/`
);
// Same JSON format as standard GoldRush API

Reference Files

Read the relevant reference file when you need details beyond what this index provides.

File When to read
overview.md Need x402 protocol details, pricing model breakdown, or quickstart code
ai-agents.md Building an autonomous agent — four-step workflow, x402 vs API key comparison, rate limits
endpoints.md Need the discovery API details (free), or the catalog of available data endpoints
Usage Guidance
Do not paste your regular wallet private key into an agent running this skill. The SKILL.md expects WALLET_PRIVATE_KEY but the registry metadata does not declare any required secrets — that's inconsistent. Before using: verify the skill's source and homepage (none provided here); review the npm packages @x402/core and @x402/evm on the public registry and inspect their code; prefer using a throwaway/test wallet funded with minimal testnet stablecoins (Base Sepolia) rather than any mainnet/private funds; store keys in a secrets manager (not in plain env vars) and restrict agent access; confirm the legitimacy of https://x402.goldrush.dev (DNS, TLS cert, ownership) and ask the publisher why credentials are omitted from metadata. If you need lower-risk access, consider using the documented API-key alternative (goldrush-foundational-api) or request clarified metadata from the skill author.
Capability Analysis
Type: OpenClaw Skill Name: goldrush-x402 Version: 3.0.5 The skill bundle facilitates autonomous blockchain data access via the x402 protocol, which requires the AI agent to handle a sensitive `WALLET_PRIVATE_KEY` to sign micropayments. While this behavior is clearly aligned with the stated purpose of the GoldRush x402 service and no evidence of intentional malice or data exfiltration was found, the requirement for an agent to manage private keys is a high-risk capability that could be exploited if the agent is compromised. Key files involved include SKILL.md, references/overview.md, and references/ai-agents.md.
Capability Assessment
Purpose & Capability
The skill claims to provide pay-per-request blockchain data with wallet-based payments (so a wallet/private key is the logical credential), but the registry metadata lists no required environment variables or primary credential. That is an internal inconsistency: the documented runtime clearly needs WALLET_PRIVATE_KEY while the skill declares no secrets.
Instruction Scope
SKILL.md instructs agents/devs to place a private key in process.env.WALLET_PRIVATE_KEY and to install/use @x402 client libraries that will sign payments automatically. This gives the skill runtime direct access to a sensitive private key and to external endpoints (https://x402.goldrush.dev). The instructions do not ask for arbitrary system files, but they do direct the agent to perform sensitive crypto signing operations and call an unverified proxy domain.
Install Mechanism
There is no formal install spec (instruction-only), which reduces automated install risk. However, the SKILL.md recommends npm install of @x402/core and @x402/evm — these are third-party packages that would be fetched at runtime by developers; they are not vetted by the skill metadata. That is a moderate supply-chain consideration to review before use.
Credentials
The runtime requires a wallet private key (WALLET_PRIVATE_KEY) to sign on-chain micropayments, but the skill metadata did not declare this sensitive env var or a primary credential. Requesting a private key is proportionate to the described pay-per-request model, but failing to declare it in metadata is misleading and increases risk (secret handling/exfiltration).
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration or special install actions. Autonomous invocation is allowed (platform default) but not by itself a red flag here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install goldrush-x402
  3. After installation, invoke the skill by name or use /goldrush-x402
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.0.5
- Expanded documentation for the GoldRush x402 skill, clarifying use cases and integration instructions. - Added detailed Quick Start guide and code examples for seamless pay-per-request blockchain data access. - Included comprehensive pricing summary with tiered models and caching details. - Improved cross-referencing to related GoldRush APIs and provided direct guidance on which version to use for specific needs. - Introduced reference files for deeper dives into protocol details, agent workflows, and endpoint discovery.
Metadata
Slug goldrush-x402
Version 3.0.5
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Goldrush X402?

GoldRush x402 — pay-per-request blockchain data access using the x402 protocol (HTTP 402 Payment Required). Use this skill whenever the user is building an A... It is an AI Agent Skill for Claude Code / OpenClaw, with 301 downloads so far.

How do I install Goldrush X402?

Run "/install goldrush-x402" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Goldrush X402 free?

Yes, Goldrush X402 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Goldrush X402 support?

Goldrush X402 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Goldrush X402?

It is built and maintained by gane5h (@gane5h); the current version is v3.0.5.

💬 Comments