← Back to Skills Marketplace
marcelo-rowship

AgentHub - 32 AI APIs via x402

by Marcelo · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
367
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install rwagenthub2
Description
Call 32 real-world APIs — flights, hotels, weather, crypto prices, DeFi yields, stock quotes, web search, geocoding, IP reputation, blockchain data, code exe...
Usage Guidance
This skill will install a third‑party npm SDK into your agent's workspace and requires you to store a raw Base wallet private key in OpenClaw config so it can sign micropayments. Before installing: 1) Consider creating a dedicated wallet with only the small USDC balance you plan to spend and never use your main key; 2) Inspect the rwagenthub-sdk package source (npm page / GitHub) and its dependencies before allowing installs; 3) Avoid pasting long‑term private keys into agent config — prefer an ephemeral key, a signing service, or hardware signer if supported; 4) Run the skill in an isolated environment (sandbox or separate machine) until you trust the SDK; 5) Verify the gateway URL and operator (the homepage is on railway.app) and ask the publisher for an explicit security/privacy statement and the SDK source repo. If you cannot audit the SDK or are uncomfortable storing a raw private key, do not install or use this skill.
Capability Analysis
Type: OpenClaw Skill Name: rwagenthub2 Version: 1.0.0 The skill requires a wallet private key (MCP_WALLET_PRIVATE_KEY) to facilitate pay-per-call API access via the x402 protocol on the Base network. While the documentation includes security warnings and claims the key is only used for local signing, the requirement of a raw private key combined with the execution of an external, unverified SDK (rwagenthub-sdk) poses a high risk of credential theft. Additionally, the skill interacts with a third-party gateway (agents-production-73c1.up.railway.app) and provides high-risk capabilities like remote code execution and email sending.
Capability Assessment
Purpose & Capability
The skill claims to provide paid access to many APIs and requires Node/npm plus a Base wallet private key to sign micropayments — these requirements are broadly consistent with its stated payment-based gateway purpose. Minor inconsistency: the registry metadata showed no primary credential while the SKILL.md metadata declares MCP_WALLET_PRIVATE_KEY as the primary credential.
Instruction Scope
Runtime instructions tell the agent to install a third‑party npm package into the skill workspace if missing, write a temporary script to /tmp, and execute it with node; they also instruct the user to store a raw private key in OpenClaw config. These steps grant the skill the ability to run arbitrary JS code (from the SDK) and persist a sensitive secret.
Install Mechanism
There is no registry install spec, but SKILL.md instructs automatic npm install --prefix ... rwagenthub-sdk. Fetching and executing code from the public npm registry at runtime is a moderate risk (expected for SDK usage but potentially dangerous if the package or its transitive deps are malicious or compromised).
Credentials
The only required env var is MCP_WALLET_PRIVATE_KEY, which is logically required for signing payments — but a raw private key is highly sensitive. The skill advises storing it in openclaw config, which persists the secret. The SKILL.md claims the key 'never leaves your device' but this cannot be verified from the instructions alone.
Persistence & Privilege
always is false and the skill does not request elevated system privileges. However, it instructs storing a private key in agent configuration (persistent) and running npm installs and temporary scripts, so it gains persistent access to a sensitive secret and runtime execution capability within the agent environment.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install rwagenthub2
  3. After installation, invoke the skill by name or use /rwagenthub2
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
AgentHub v1.0.0 — Initial release - Provides a unified gateway to 32 real-world APIs (flights, hotels, weather, finance, web search, code exec, email, and more). - Pay per API call in USDC on Base via x402 protocol (gasless micropayments). - Requires Node.js 20+, a dedicated Base wallet, and the `MCP_WALLET_PRIVATE_KEY` environment variable. - Includes installation, wallet setup, and call instructions. - Features extensive API documentation with sample calls, pricing, and usage notes for each endpoint.
Metadata
Slug rwagenthub2
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is AgentHub - 32 AI APIs via x402?

Call 32 real-world APIs — flights, hotels, weather, crypto prices, DeFi yields, stock quotes, web search, geocoding, IP reputation, blockchain data, code exe... It is an AI Agent Skill for Claude Code / OpenClaw, with 367 downloads so far.

How do I install AgentHub - 32 AI APIs via x402?

Run "/install rwagenthub2" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is AgentHub - 32 AI APIs via x402 free?

Yes, AgentHub - 32 AI APIs via x402 is completely free (open-source). You can download, install and use it at no cost.

Which platforms does AgentHub - 32 AI APIs via x402 support?

AgentHub - 32 AI APIs via x402 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created AgentHub - 32 AI APIs via x402?

It is built and maintained by Marcelo (@marcelo-rowship); the current version is v1.0.0.

💬 Comments