← 返回 Skills 市场
Payclaw Io Pub
作者
PayClaw, Inc.
· GitHub ↗
· v0.7.1
506
总下载
0
收藏
0
当前安装
12
版本数
在 OpenClaw 中安装
/install payclaw-io
功能描述
Agents are not bots. PayClaw proves it — then lets them pay. UCP Credential Provider: Badge declares your agent as an authorized actor at any UCP-compliant m...
安全使用建议
This skill appears to do what it says: it runs an MCP server (via npx) that provides identity badges and single-use cards. Before installing: (1) Verify the npm package (@payclaw/mcp-server) and its publisher (review package source, version history, and GitHub repo linked in SKILL.md); (2) Understand where the 'Consent Key' will be stored on your agent and how to revoke or delete it; (3) Be aware that npx will download and execute remote code at runtime — if you need stronger guarantees, request a vetted binary or vendor-signed release rather than running npx on-the-fly; (4) Test in a sandbox environment and use the sandbox/test money option before using with real payments.
功能分析
Type: OpenClaw Skill
Name: payclaw-io
Version: 0.7.1
The payclaw-io skill provides a legitimate framework for AI agent identity (Badge) and single-use virtual payments (Spend) via the PayClaw platform. It utilizes a standard MCP server configuration executed via npx (@payclaw/mcp-server) and communicates with a dedicated API (api.payclaw.io). The instructions and tool definitions are consistent with the stated purpose of facilitating authorized commerce, including built-in human-in-the-loop approval for transactions and no evidence of data exfiltration or malicious prompt injection.
能力评估
Purpose & Capability
Name/description match what the instructions require: the skill asks for npx and instructs the agent to run an @payclaw/mcp-server process to provide Badge and Spend functionality. Requiring npx and a Node 20 runtime is proportionate for an npm-based MCP server.
Instruction Scope
SKILL.md only instructs adding the MCP server to the agent config and calling well-scoped RPCs (payclaw_getAgentIdentity, payclaw_getCard, payclaw_reportPurchase). It does not ask the agent to read unrelated files or to exfiltrate data to unexpected endpoints beyond the declared PAYCLAW_API_URL.
Install Mechanism
No install spec is present, but the skill expects runtime use of 'npx -y @payclaw/mcp-server'. That downloads and executes package code from npm at runtime (moderate risk). This is expected for an npm-based MCP server but you should verify the npm package and publisher before trusting it.
Credentials
The skill declares no required secret environment variables. The metadata binds PAYCLAW_API_URL to the official domain which matches the service. The only implicit credential behavior is the device auth/Consent Key stored on first use; this is consistent with the described device auth flow but you should confirm where that key is persisted and how to revoke it.
Persistence & Privilege
always:false (normal). The skill will persist a Consent Key on first use (SKILL.md: 'Consent Key is stored automatically'); persisting that credential in agent storage is expected but worth reviewing — confirm storage location, lifetime, and revocation. Autonomous invocation is allowed (normal default).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install payclaw-io - 安装完成后，直接呼叫该 Skill 的名称或使用
/payclaw-io触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.7.1
- Added a requirement for Node.js 20+ in the setup instructions (Node 18 is now end-of-life).
- Provided guidance for resolving Node.js engine errors, including upgrade instructions.
v0.7.0
V1.2 UCP: no API key required (device auth), UCP Credential Provider, updated tool descriptions, /merchants link
v0.6.0
Formatted CLI output, merchant param, brand v2 alignment, new example with declaration flow
v0.5.0
Brand v2: authorized actor framing, skeleton key, KYA. MCP sampling (DQ-54). Badge + Spend unified. npm 0.3.0.
v1.2.0
Badge + Spend positioning, identity-first flow, account protection framing
v0.4.0
Sandbox launch: test card setup, pk_test_ keys, sandbox pricing, updated tool schema
v0.3.0
Sandbox now live. Updated install instructions, real MCP tool names (payclaw_getCard, payclaw_reportPurchase), Stripe test card, links to payclaw.io/dev and payclaw.io/trust.
v2.0.0
V1 launch: virtual cards for AI agents — MCP server config, intent-based auth, post-purchase audit, mandatory MFA
v1.1.0
V1: virtual cards for AI agents — MCP config, intent-based auth, post-purchase audit
v0.2.0
Full skill with MCP config, setup guide, security docs, and usage examples
v0.1.0
Initial release — virtual cards for AI agents
v1.0.0
Initial release of PayClaw:
- Introduces virtual Visa card issuance for AI agents, enabling autonomous online purchases without exposing your real card.
- User funds a limited balance via Stripe; agents receive capped virtual cards issued by Lithic, accepted anywhere Visa works.
- Instant card freezing in case an agent is compromised.
- Spend limits and merchant restrictions configurable per task.
- Early access and integration details available for developers.
元数据
常见问题
Payclaw Io Pub 是什么？
Agents are not bots. PayClaw proves it — then lets them pay. UCP Credential Provider: Badge declares your agent as an authorized actor at any UCP-compliant m... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 506 次。
如何安装 Payclaw Io Pub？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install payclaw-io」即可一键安装，无需额外配置。
Payclaw Io Pub 是免费的吗？
是的，Payclaw Io Pub 完全免费（开源免费），可自由下载、安装和使用。
Payclaw Io Pub 支持哪些平台？
Payclaw Io Pub 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Payclaw Io Pub？
由 PayClaw, Inc.（@payclawinc）开发并维护，当前版本 v0.7.1。
推荐 Skills