← Back to Skills Marketplace
MPP - Machine Payments Protocol
by
Misha Kolesnik
· GitHub ↗
· v0.5.7
· MIT-0
134
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install mpp
Description
Build with MPP (Machine Payments Protocol) - the open protocol for machine-to-machine payments over HTTP 402. Use when developing paid APIs, payment-gated co...
Usage Guidance
This skill appears to be a genuine MPP protocol SDK (server and client) and will require you to provide and manage sensitive secrets (mnemonics, private keys, server secret keys) and to handle on-chain deposits/refunds and long‑running transports. Before installing or using it:
- Treat any examples that use MNEMONIC, private keys, or MPP_SECRET_KEY as instructions that will cause real funds to be spent if used against mainnet. Prefer testnet/regtest for evaluation.
- The skill metadata does not declare required env vars; make sure you do not accidentally paste real private keys into a public environment. Use dedicated, minimal-permission wallets or ephemeral keys for testing.
- Audit any third‑party packages it references (e.g., @buildonspark/lightning-mpp-sdk, mppx, stellar packages) before use.
- Review where and how your app will persist secrets (.env, stores like Cloudflare KV/Redis) and ensure appropriate access controls and rotation policies.
- Because session modes involve deposits and refunds, understand the escrow and close/recovery flows to avoid locked funds.
If you want higher assurance: request the actual SDK package sources (npm/crates/pypi links & checksums), confirm which environment variables the integrator expects, and run the flows on a testnet/regtest environment first.
Capability Analysis
Type: OpenClaw Skill
Name: mpp
Version: 0.5.7
The "mpp" skill bundle is a comprehensive documentation and instruction set for the Machine Payments Protocol (MPP), an open standard for machine-to-machine payments using HTTP 402. It includes detailed SDK references for TypeScript (mppx), Python (pympp), and Rust (mpp), along with integration guides for payment rails like Tempo, Stripe, and Lightning. The SKILL.md file provides legitimate instructions for an AI agent to assist users in developing paid APIs and payment-gated services. No indicators of malicious intent, data exfiltration, or harmful prompt injection were found; the content is technically consistent and focused on its stated purpose of enabling automated payment flows.
Capability Tags
Capability Assessment
Purpose & Capability
The name, description, and extensive reference docs consistently describe an MPP (Machine Payments Protocol) SDK for server and client payment flows (Tempo, Stripe, Lightning, sessions, charge/session intents). The code examples and transports align with that purpose (HTTP 402 handling, SDKs for TypeScript/Python/Rust).
Instruction Scope
SKILL.md and the reference files include actionable runtime guidance that expects the agent/developer to supply and use high-privilege secrets (BIP-39 mnemonics, private keys, MPP_SECRET_KEY, server_secret, etc.), to write/read .env, and to manage on-chain deposits/refunds and persistent transports (WebSockets). The instructions do not overreach into unrelated system areas, but they do direct handling of cryptographic secrets and long-lived network resources without specifying safe storage or limits.
Install Mechanism
This is an instruction-only skill with no install spec and no code files executed by the platform; nothing is downloaded or written by an installer. That minimizes install-time risk.
Credentials
Although the skill metadata declares no required environment variables or credentials, the documentation repeatedly references environment secrets (MNEMONIC, private keys, MPP_SECRET_KEY, server_secret, etc.) and examples show using process.env and Account.from_key. The absence of declared required env vars is a mismatch that could cause the platform to underwarn users about the need to provide sensitive secrets; the skill legitimately needs secrets for its purpose, but they should be explicitly declared and justified.
Persistence & Privilege
Flags show always:false and the skill is user-invocable; it does not request permanent or elevated platform privileges. It does describe persistent network resources (WebSockets, stores) that the implementer must manage, but that is within its stated payment/session purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mpp - After installation, invoke the skill by name or use
/mpp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.5.7
Updated mpp from 0.5.1 to 0.5.7.
Changes:
- modified `SKILL.md`
- modified `references/sessions.md`
- modified `references/tempo-method.md`
- modified `references/transports.md`
- modified `references/typescript-sdk.md`
v0.5.1
Initial publish of mpp
Metadata
Frequently Asked Questions
What is MPP - Machine Payments Protocol?
Build with MPP (Machine Payments Protocol) - the open protocol for machine-to-machine payments over HTTP 402. Use when developing paid APIs, payment-gated co... It is an AI Agent Skill for Claude Code / OpenClaw, with 134 downloads so far.
How do I install MPP - Machine Payments Protocol?
Run "/install mpp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is MPP - Machine Payments Protocol free?
Yes, MPP - Machine Payments Protocol is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does MPP - Machine Payments Protocol support?
MPP - Machine Payments Protocol is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created MPP - Machine Payments Protocol?
It is built and maintained by Misha Kolesnik (@tenequm); the current version is v0.5.7.
More Skills