← 返回 Skills 市场
gane5h

Goldrush X402

作者 gane5h · GitHub ↗ · v3.0.5 · MIT-0
cross-platform ⚠ suspicious
301
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install goldrush-x402
功能描述
GoldRush x402 — pay-per-request blockchain data access using the x402 protocol (HTTP 402 Payment Required). Use this skill whenever the user is building an A...
使用说明 (SKILL.md)

GoldRush x402

Pay-per-request access to GoldRush blockchain data using the x402 protocol. No API key, no signup, no billing — just a funded wallet. Provides access to Foundational API endpoints through a transparent reverse proxy.

Quick Start

import { HTTPClient } from "@x402/core";
import { ExactEvmScheme } from "@x402/evm";

const client = new HTTPClient({
  scheme: new ExactEvmScheme({
    network: "eip155:84532", // Base Sepolia
    privateKey: process.env.WALLET_PRIVATE_KEY,
  }),
});

// Get token balances — payment handled automatically
const balances = await client.get(
  "https://x402.goldrush.dev/v1/eth-mainnet/address/demo.eth/balances_v2/"
);
console.log(balances);

Install: npm install @x402/core @x402/evm

How x402 Works

1. REQUEST  → Agent calls endpoint without payment
2. 402      → Server responds with payment instructions (amount, token, recipient)
3. PAY      → Agent signs payment with stablecoins on Base, retries with proof
4. DATA     → Server validates request *before* charging, returns data

The x402 client libraries handle steps 2-3 automatically. From your code, it's just a GET request.

Key safety feature: The proxy validates your request before charging. Malformed addresses, unsupported chains, or bad parameters get a clear error — you pay nothing.

Payment: USDC on Base Sepolia (testnet). Base mainnet support coming soon.

Cross-Reference

x402 serves the same endpoints as the Foundational API with the same parameters and response format. For detailed endpoint documentation (parameters, response schemas, use cases), see the goldrush-foundational-api skill.

Base URL mapping:

  • Foundational API: https://api.covalenthq.com/v1/...
  • x402 proxy: https://x402.goldrush.dev/v1/...

Pricing Summary

Model Description Example
Fixed One price per call Token balances, NFT holdings, block details
Tiered Price by data volume Transactions, event logs

Tiers (for variable-length data)

Tier Items Use Case
Small 1-50 Quick lookups, recent activity
Medium 51-200 Standard queries
Large 201-500 Detailed analysis
XL 501+ Full history

Select tier via query parameter: ?tier=small

Response Caching

Cached responses cost less. Cache TTLs:

  • Balances: 30 seconds
  • Pricing data: 5 minutes

AI Agent Workflow

1. Discover (free)

curl https://x402.goldrush.dev/v1/x402/endpoints | jq
curl https://x402.goldrush.dev/v1/x402/search?q=balance | jq

2. Evaluate

curl https://x402.goldrush.dev/v1/x402/endpoints/get-token-balances-for-address | jq

Returns credit rate, pricing model, supported chains — everything to decide what to call.

3. Pay & consume

const balances = await client.get(
  `https://x402.goldrush.dev/v1/eth-mainnet/address/${wallet}/balances_v2/`
);
// Same JSON format as standard GoldRush API

Reference Files

Read the relevant reference file when you need details beyond what this index provides.

File When to read
overview.md Need x402 protocol details, pricing model breakdown, or quickstart code
ai-agents.md Building an autonomous agent — four-step workflow, x402 vs API key comparison, rate limits
endpoints.md Need the discovery API details (free), or the catalog of available data endpoints
安全使用建议
Do not paste your regular wallet private key into an agent running this skill. The SKILL.md expects WALLET_PRIVATE_KEY but the registry metadata does not declare any required secrets — that's inconsistent. Before using: verify the skill's source and homepage (none provided here); review the npm packages @x402/core and @x402/evm on the public registry and inspect their code; prefer using a throwaway/test wallet funded with minimal testnet stablecoins (Base Sepolia) rather than any mainnet/private funds; store keys in a secrets manager (not in plain env vars) and restrict agent access; confirm the legitimacy of https://x402.goldrush.dev (DNS, TLS cert, ownership) and ask the publisher why credentials are omitted from metadata. If you need lower-risk access, consider using the documented API-key alternative (goldrush-foundational-api) or request clarified metadata from the skill author.
功能分析
Type: OpenClaw Skill Name: goldrush-x402 Version: 3.0.5 The skill bundle facilitates autonomous blockchain data access via the x402 protocol, which requires the AI agent to handle a sensitive `WALLET_PRIVATE_KEY` to sign micropayments. While this behavior is clearly aligned with the stated purpose of the GoldRush x402 service and no evidence of intentional malice or data exfiltration was found, the requirement for an agent to manage private keys is a high-risk capability that could be exploited if the agent is compromised. Key files involved include SKILL.md, references/overview.md, and references/ai-agents.md.
能力评估
Purpose & Capability
The skill claims to provide pay-per-request blockchain data with wallet-based payments (so a wallet/private key is the logical credential), but the registry metadata lists no required environment variables or primary credential. That is an internal inconsistency: the documented runtime clearly needs WALLET_PRIVATE_KEY while the skill declares no secrets.
Instruction Scope
SKILL.md instructs agents/devs to place a private key in process.env.WALLET_PRIVATE_KEY and to install/use @x402 client libraries that will sign payments automatically. This gives the skill runtime direct access to a sensitive private key and to external endpoints (https://x402.goldrush.dev). The instructions do not ask for arbitrary system files, but they do direct the agent to perform sensitive crypto signing operations and call an unverified proxy domain.
Install Mechanism
There is no formal install spec (instruction-only), which reduces automated install risk. However, the SKILL.md recommends npm install of @x402/core and @x402/evm — these are third-party packages that would be fetched at runtime by developers; they are not vetted by the skill metadata. That is a moderate supply-chain consideration to review before use.
Credentials
The runtime requires a wallet private key (WALLET_PRIVATE_KEY) to sign on-chain micropayments, but the skill metadata did not declare this sensitive env var or a primary credential. Requesting a private key is proportionate to the described pay-per-request model, but failing to declare it in metadata is misleading and increases risk (secret handling/exfiltration).
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration or special install actions. Autonomous invocation is allowed (platform default) but not by itself a red flag here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install goldrush-x402
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /goldrush-x402 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.0.5
- Expanded documentation for the GoldRush x402 skill, clarifying use cases and integration instructions. - Added detailed Quick Start guide and code examples for seamless pay-per-request blockchain data access. - Included comprehensive pricing summary with tiered models and caching details. - Improved cross-referencing to related GoldRush APIs and provided direct guidance on which version to use for specific needs. - Introduced reference files for deeper dives into protocol details, agent workflows, and endpoint discovery.
元数据
Slug goldrush-x402
版本 3.0.5
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Goldrush X402 是什么?

GoldRush x402 — pay-per-request blockchain data access using the x402 protocol (HTTP 402 Payment Required). Use this skill whenever the user is building an A... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 301 次。

如何安装 Goldrush X402?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install goldrush-x402」即可一键安装,无需额外配置。

Goldrush X402 是免费的吗?

是的,Goldrush X402 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Goldrush X402 支持哪些平台?

Goldrush X402 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Goldrush X402?

由 gane5h(@gane5h)开发并维护,当前版本 v3.0.5。

💬 留言讨论