← Back to Skills Marketplace
d9m1n1c

Payments & Banking

by D9m1n1c · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
329
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install aiotnetwork-payments-banking
Description
Fund wallets, transfer money, send remittances, and convert currencies. Includes top-up via multiple payment methods and international money transfers.
README (SKILL.md)

Payments & Banking

Use this skill when the user needs to top up a wallet, send money, make international remittances, or convert currencies.

Configuration

The default API base URL is https://payment-api-dev.aiotnetwork.io. All endpoints are relative to this URL.

To override (e.g. for local development):

export AIOT_API_BASE_URL="http://localhost:8080"

If AIOT_API_BASE_URL is not set, use https://payment-api-dev.aiotnetwork.io as the base for all requests.

Available Tools

  • get_balance — Get current account balance | GET /api/v1/bank/balance | Requires auth
  • get_masterpay_balance — Get MasterPay main wallet balance | GET /api/v1/masterpay/balance | Requires auth
  • list_card_wallets — List all MasterPay card wallets and balances | GET /api/v1/masterpay/wallets | Requires auth
  • get_topup_methods — Get available payment methods for top-up | GET /api/v1/bank/topup/payment_methods | Requires auth
  • get_topup_quote — Get a quote for a top-up amount | POST /api/v1/bank/topup/quote | Requires auth
  • initiate_topup — Start a top-up transaction | POST /api/v1/bank/topup | Requires auth
  • get_topup_status — Check status of a top-up | GET /api/v1/bank/topup/:id | Requires auth
  • confirm_topup — Confirm a pending top-up | POST /api/v1/bank/topup/:id/confirm | Requires auth
  • get_transfer_quote — Get a quote for a transfer | POST /api/v1/bank/transfer/quote | Requires auth
  • initiate_transfer — Start a money transfer | POST /api/v1/bank/transfer | Requires auth
  • get_transfer_status — Check status of a transfer | GET /api/v1/bank/transfer/:id | Requires auth
  • confirm_transfer — Confirm a pending transfer | POST /api/v1/bank/transfer/:id/confirm | Requires auth | Requires transaction PIN
  • get_remittance_countries — Get supported remittance destination countries | GET /api/v1/bank/transfer/remittance/countries | Requires auth
  • get_exchange_rate — Get current exchange rate for a currency pair | GET /api/v1/bank/transfer/remittance/rate | Requires auth
  • get_remittance_reference_data — Get reference data for remittance forms (banks, branches, etc.) | GET /api/v1/bank/transfer/remittance/reference-data | Requires auth
  • get_remittance_quote — Get a quote for an international remittance | POST /api/v1/bank/transfer/remittance/quote | Requires auth
  • initiate_remittance — Start an international remittance | POST /api/v1/bank/transfer/remittance | Requires auth
  • get_remittance_status — Check status of a remittance | GET /api/v1/bank/transfer/remittance/:id | Requires auth
  • get_remittance_history — Get remittance transaction history | GET /api/v1/bank/transfer/remittance/history | Requires auth
  • confirm_remittance — Confirm a pending remittance | POST /api/v1/bank/transfer/remittance/:id/confirm | Requires auth | Requires transaction PIN
  • cancel_remittance — Cancel a pending remittance | POST /api/v1/bank/transfer/remittance/:id/cancel | Requires auth
  • list_recipients — List saved remittance recipients | GET /api/v1/bank/transfer/remittance/recipients | Requires auth
  • create_recipient — Save a new remittance recipient | POST /api/v1/bank/transfer/remittance/recipients | Requires auth
  • get_recipient — Get details of a saved recipient | GET /api/v1/bank/transfer/remittance/recipients/:recipient_id | Requires auth
  • update_recipient — Update a saved recipient's details | PUT /api/v1/bank/transfer/remittance/recipients/:recipient_id | Requires auth
  • delete_recipient — Delete a saved recipient | DELETE /api/v1/bank/transfer/remittance/recipients/:recipient_id | Requires auth
  • get_conversion_pairs — Get available currency conversion pairs | GET /api/v1/bank/convert/pairs | Requires auth
  • get_conversion_rate — Get conversion rate between two currencies | GET /api/v1/bank/convert/rate | Requires auth
  • initiate_conversion — Start a currency conversion | POST /api/v1/bank/convert | Requires auth
  • confirm_conversion — Confirm a pending conversion | POST /api/v1/bank/convert/:id/confirm | Requires auth | Requires transaction PIN
  • list_transactions — List transaction history with pagination | GET /api/v1/transactions | Requires auth
  • get_transaction — Get details of a specific transaction | GET /api/v1/transactions/:id | Requires auth
  • download_receipt — Download a transaction receipt as PDF | GET /api/v1/transactions/:id/receipt/pdf | Requires auth

Recommended Flows

Top Up Wallet

Add funds to your wallet via available payment methods

  1. Get payment methods: GET /api/v1/bank/topup/payment_methods
  2. Get quote: POST /api/v1/bank/topup/quote with {amount, currency, payment_method}
  3. Initiate: POST /api/v1/bank/topup with quote details
  4. Confirm: POST /api/v1/bank/topup/:id/confirm

Send Remittance

Send money internationally to a recipient

  1. Check countries: GET /api/v1/bank/transfer/remittance/countries
  2. Get exchange rate: GET /api/v1/bank/transfer/remittance/rate?from=USD&to=PHP
  3. Create or select recipient: POST/GET /api/v1/bank/transfer/remittance/recipients
  4. Get quote: POST /api/v1/bank/transfer/remittance/quote
  5. Initiate: POST /api/v1/bank/transfer/remittance
  6. Confirm: POST /api/v1/bank/transfer/remittance/:id/confirm (requires transaction PIN)

Rules

  • All financial operations require authentication
  • Top-ups and transfers follow a quote-then-confirm pattern — never skip the quote step
  • Transfer, remittance, and conversion confirmations require a transaction PIN — top-up confirmations do not
  • Remittances require a saved recipient — create one first if needed
  • Exchange rates are indicative and may change between quote and confirmation
  • Transaction history is paginated — use page and page_size query parameters

Agent Guidance

Follow these instructions when executing this skill:

  • Always follow the documented flow order. Do not skip steps.

  • If a tool requires authentication, verify the session has a valid bearer token before calling it.

  • If a tool requires a transaction PIN, ask the user for it fresh each time. Never cache or log PINs.

  • Never expose, log, or persist secrets (passwords, tokens, full card numbers, CVVs).

  • If the user requests an operation outside this skill's scope, decline and suggest the appropriate skill.

  • If a step fails, check the error and follow the recovery guidance below before retrying.

  • All financial operations follow a quote-then-confirm pattern. Always get a quote first — never skip directly to initiation.

  • Transfer, remittance, and conversion confirmations require a transaction PIN. Top-up confirmations do not require a PIN.

  • Remittances require a saved recipient. Create one with create_recipient if none exists.

  • Exchange rates shown in quotes are indicative. The final rate is locked at confirmation.

  • Transaction history is paginated. Use page and page_size query parameters.

Usage Guidance
Do not install or use this skill without clarification. Before trusting it, ask the skill author for: (1) the authentication scheme and exact environment variables or OAuth flow the skill requires (API key name, token header, scopes), (2) how transaction PINs are expected to be provided and whether they will be stored or transmitted, (3) confirmation that the default base URL is not a development/testing host for real money, and (4) an identifiable source/homepage and security/privacy policy. If you plan to test, use a sandbox account and a non-production endpoint, and never provide real credentials or PINs until you confirm secure handling (TLS, no logging of secrets, explicit user prompts for transaction consent). The current manifest is internally inconsistent (URL used as 'primary credential', no auth variables) which is a red flag.
Capability Analysis
Type: OpenClaw Skill Name: aiotnetwork-payments-banking Version: 1.0.1 The skill bundle defines a set of banking and payment tools for an AI agent to interact with the AIOT Network API. The instructions in SKILL.md include security-conscious guidance, such as requiring fresh transaction PINs for every operation and explicitly forbidding the caching or logging of secrets. No malicious code, data exfiltration patterns, or harmful prompt injections were identified.
Capability Assessment
Purpose & Capability
The skill's stated purpose is payments and banking (funding wallets, transfers, remittances). That purpose reasonably requires authentication and secret credentials (API keys, OAuth tokens, or user credentials) and safe handling of transaction PINs. The manifest only requests AIOT_API_BASE_URL (a URL) and nothing that looks like an auth credential. Marking a base URL as the 'primary credential' is incorrect and inconsistent with the declared capability.
Instruction Scope
SKILL.md lists many endpoints and repeatedly notes 'Requires auth' and 'Requires transaction PIN' for confirmation steps, but it gives no instructions for how to obtain or provide authentication tokens, how to pass credentials in requests, or how the agent should collect/handle a user's transaction PIN. The skill defaults to a development host (https://payment-api-dev.aiotnetwork.io) which is unusual for production payment flows and may be inappropriate for real funds. Overall the runtime instructions do not stay within a clear, safe boundary because they omit how to authenticate and secure sensitive inputs.
Install Mechanism
Instruction-only skill with no install spec and no code files. This minimizes the attack surface because nothing is downloaded or written at install time.
Credentials
Only AIOT_API_BASE_URL is declared as a required environment variable. A payments skill normally needs at minimum an API key, client ID/secret, or OAuth config and a secure way to supply a transaction PIN. The absence of any declared secret environment variables (API_KEY, AUTH_TOKEN, etc.) is disproportionate and inconsistent with the operations described.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent system-wide presence. No evidence it modifies other skills or system configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install aiotnetwork-payments-banking
  3. After installation, invoke the skill by name or use /aiotnetwork-payments-banking
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added configuration instructions for setting the API base URL with the AIOT_API_BASE_URL environment variable. - Documented the default API endpoint and how to override it for local development. - Added metadata indicating required environment variables for the skill. - No changes to endpoints or functional flows; documentation updates only.
v1.0.0
Initial release of the Payments & Banking skill. - Enables wallet funding, money transfers, remittances, and currency conversion. - Supports top-up via multiple payment methods and international money transfers. - Provides a comprehensive set of APIs for balances, quotes, initiation, confirmation, and transaction history. - Includes strict flows and security rules (quote-then-confirm, PIN requirements, secrets management). - Agent guidance emphasizes following flow order and handling authentication and sensitive data securely.
Metadata
Slug aiotnetwork-payments-banking
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Payments & Banking?

Fund wallets, transfer money, send remittances, and convert currencies. Includes top-up via multiple payment methods and international money transfers. It is an AI Agent Skill for Claude Code / OpenClaw, with 329 downloads so far.

How do I install Payments & Banking?

Run "/install aiotnetwork-payments-banking" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Payments & Banking free?

Yes, Payments & Banking is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Payments & Banking support?

Payments & Banking is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Payments & Banking?

It is built and maintained by D9m1n1c (@d9m1n1c); the current version is v1.0.1.

💬 Comments