← 返回 Skills 市场
Mpp Mobula
作者
Flotapponnier
· GitHub ↗
· v1.0.7
· MIT-0
209
总下载
1
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install mpp-mobula
功能描述
Pay-as-you-go Mobula API access — fetch crypto prices, wallet positions, and market data using a Tempo wallet that pays per call (~$0.0004) in USDC.e. No sub...
安全使用建议
This skill appears to do what it claims: it creates encrypted hot wallets and automatically signs on-chain USDC.e payments to satisfy Mobula's 402 payment challenges. Before installing, consider: 1) Hot-wallet risk — private keys live on disk (encrypted) and in memory briefly for signing; keep balances small (the skill is designed for a few dollars). 2) File locations created: ~/.mpp-skill/{wallet,json,.secret} and <cwd>/.claude/claudeclaw/wallets/{userId}.json + wallet.secret — ensure these paths are acceptable and protected. 3) Autonomous invocation + payment: the agent can make calls that cause on-chain transfers; the code enforces a $0.01 per-call cap but an attacker on a compromised host or a misconfigured Mobula server could still cause repeated small charges — run in an isolated environment if possible. 4) Supply-chain: the skill depends on the 'viem' library and is installed via bun; verify the upstream GitHub repository/author and consider pinning or auditing dependencies. 5) Multi-tenant note: per-user wallets are tied to process.cwd() for the .claude secret — verify this behavior if you run multiple agents on one host. If these tradeoffs are acceptable (and you keep low balances and verify the repo/deps), the skill is coherent with its stated purpose.
功能分析
Type: OpenClaw Skill
Name: mpp-mobula
Version: 1.0.7
The mpp-mobula skill implements a legitimate pay-per-call interface for the Mobula API using the Machine Payments Protocol (MPP) on the Tempo blockchain. It manages local hot wallets with AES-256-GCM encryption at rest, enforces strict file permissions (chmod 600), and includes a critical safety cap ($0.01) in `src/mpp/tempo-client.ts` to prevent wallet draining from malicious or misconfigured payment challenges. The code is transparent, well-documented (including a detailed `SECURITY.md`), and its network and filesystem permissions are strictly aligned with its stated purpose of facilitating micro-payments for data access.
能力标签
能力评估
Purpose & Capability
Name/description (Mobula MPP pay-per-call) match the included code: wallet management, tempo-client that handles 402 challenges, and CLI/agent helpers. Declared filesystem and network permissions align with storing encrypted wallets and talking to mpp.mobula.io, rpc.tempo.xyz and relay.link.
Instruction Scope
SKILL.md instructs cloning, running Bun, creating a wallet, funding it via the public bridge, and making paid calls. The instructions only reference the wallet files and the Mobula/Tempo endpoints; they do not ask the agent to read unrelated host files or exfiltrate environment variables.
Install Mechanism
No install spec beyond 'bun install' and a git clone (package.json points to a GitHub repo). The dependency 'viem' is pulled from the package registry — expected for Ethereum/Tempo interactions but note this is third-party code (moderate supply-chain risk compared with no install). There are no downloads from ad-hoc URLs or archive extraction from unknown servers.
Credentials
The skill requires no external credentials or env vars. It creates and stores encryption secrets and wallet files locally (paths: ~/.mpp-skill/* and .claude/claudeclaw/*) which is proportional to a hot-wallet client. No unrelated tokens/keys are requested.
Persistence & Privilege
always:false and user-invocable: true. The skill writes encrypted wallet files and a secret to disk (hot-wallet persistence), which is necessary for operation but is sensitive. The agent can invoke the skill autonomously (platform default) and that will sign and broadcast small payments up to the built-in cap ($0.01 per challenge).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mpp-mobula - 安装完成后，直接呼叫该 Skill 的名称或使用
/mpp-mobula触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
- Added SECURITY.md to document security policies and best practices.
- Clarified in SKILL.md that the hot wallet is AES-256-GCM encrypted, with encryption key stored separately.
- Updated setup instructions to highlight wallet encryption and key file details.
v1.0.6
- Improved documentation of the on-chain payment process, including detailed explanation of 32-byte memo layout for MPP attribution.
- Clarified correct construction and usage of the memo field when making payments; added warnings about common errors when binding payment to challenge.
- Noted that if methodDetails.memo is provided, it should be used directly.
- No functional or code changes in this version—documentation update only.
v1.0.5
mpp-mobula 1.0.5
- No file changes detected in this release.
- Documentation and SKILL.md remain unchanged in terms of content and functionality.
- No feature, configuration, or CLI changes introduced in this version.
v1.0.4
Version 1.0.4 — no code or documentation changes.
- No changes detected in any files for this release.
- Functionality and documentation remain unchanged from the previous version.
v1.0.3
Version 1.0.3
- Switched from subscription/API key model to pay-per-call Mobula API using a self-custodied Tempo wallet (no signup, no API key required).
- Updated documentation to focus on Tempo wallet setup, funding, and usage.
- Added CLI for wallet creation, balance check, and pay-per-call market data access.
- Removed legacy source files and commands related to subscriptions and trading.
- Simplified agent integration with direct wallet management and programmatic access.
v1.0.2
- Added new file: `src/wallet.ts`
- Expanded codebase to support additional wallet functionalities.
v1.0.1
- Initial release of Mobula MPP skill.
- Added commands for subscribing to MPP plans, checking status, topping up credits, managing API keys, fetching crypto prices, wallet data, and trending tokens.
- Added 8 source and configuration files, including command handlers and client logic.
- Updated documentation to clarify usage of both `bun run start ...` and `bun src/index.ts ...` command formats.
v1.0.0
- Initial release of the MPP (Machine Payments Protocol) skill.
- Supports subscribing to MPP plans, checking subscription status, topping up credits, and managing API keys.
- Enables fetching crypto token prices, wallet data, and trending tokens.
- Includes clear example interactions and step-by-step usage instructions.
- Ensures all actions are performed via Bash commands, with guidance on formatting responses and troubleshooting subscription issues.
元数据
常见问题
Mpp Mobula 是什么？
Pay-as-you-go Mobula API access — fetch crypto prices, wallet positions, and market data using a Tempo wallet that pays per call (~$0.0004) in USDC.e. No sub... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 209 次。
如何安装 Mpp Mobula？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mpp-mobula」即可一键安装，无需额外配置。
Mpp Mobula 是免费的吗？
是的，Mpp Mobula 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Mpp Mobula 支持哪些平台？
Mpp Mobula 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mpp Mobula？
由 Flotapponnier（@flotapponnier）开发并维护，当前版本 v1.0.7。
推荐 Skills