mcp-llm-inference

Anonymous LLM inference via L402 micropayments — chat completions, text generation, and model discovery. No API key, no signup, no KYC. Pay per request in sa...

What to consider before installing: - Environment-var mismatch: SKILL.md and registry expect L402_API_BASE_URL, but the code uses NAUTDEV_BASE_URL and defaults to https://api.nautdev.com. If you set L402_API_BASE_URL the skill will likely ignore it and still send data to the default host. Treat prompts and any sensitive content as leaving your system and going to that remote service. - Payment flow is unclear: the README/SKILL.md promise L402 micropayments/invoices, but the code only forwards requests to the API and returns the API JSON. There is no explicit handling or UX for invoices in the tool; verify with the upstream package what the API returns (it might embed an invoice), and confirm how payment is completed before relying on the promised pay-per-request behavior. - Packaging inconsistencies: package/README names and authors differ (Blue-Trianon-Ventures vs @vbotholemu). This can indicate sloppy publishing or a fork; verify the npm package owner, source repository, and published tarball contents before running via npx. - Data exposure risk: this skill sends prompts and message history to an external service by design. Do not use it with secrets, private data, or anything you cannot share publicly unless you have verified the remote provider's privacy model and trustworthiness. - Recommended checks: inspect the published npm package content and checksum, look up the package and author on the npm registry, view the repository (if any), test in an isolated environment, and contact the package author/maintainer for clarification about the env var name and payment flow. If you need guarantees about where data goes or how payments are handled, avoid installing until these questions are answered.

Type: OpenClaw Skill Name: mcp-llm-inference Version: 1.0.0 The skill is a straightforward MCP server implementation for LLM inference via the L402 protocol, allowing for anonymous pay-per-request access. The code in `src/index.ts` and `dist/index.js` strictly implements the described tools (chat, generate, models) by making standard fetch requests to a hardcoded or environment-configured API endpoint (api.nautdev.com). There is no evidence of data exfiltration, unauthorized file access, or malicious execution logic.