Habilidades x402-api-paywall
📦

x402-api-paywall

v1.2 Revisión del contenido r1 Seguro 🌐 Acceso a red

Add x402 Paywalls to API Routes

Charging agents per API request requires payment checks before protected work runs. This guide outlines x402 integration for FastAPI and Express using stablecoins and external verification.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 77 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "x402-api-paywall" from https://skillstore.io/skills/nexaiguy-x402-api-paywall.md and its manifest at https://skillstore.io/api/skills/nexaiguy-x402-api-paywall/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Pruébalo

Usando "x402-api-paywall". Plan a 0.10 USDC paywall for a FastAPI image-generation endpoint on Base Sepolia.

Resultado esperado:

  • Attach a payment dependency only to the selected image-generation route.
  • Return HTTP 402 with payment requirements when payment proof is absent.
  • Verify payment through a compatible facilitator before running generation.
  • Confirm recipient, asset, network, and price configuration before testing.

Usando "x402-api-paywall". Describe how to add paid routes to an Express API without changing public routes.

Resultado esperado:

  • Mount payment middleware on selected paid routes rather than globally.
  • Validate payment proof before invoking protected handlers.
  • Leave public routes outside the payment middleware.
  • Test missing and invalid proofs; verify live behavior separately from mocked tests.

Auditoría de seguridad

Seguro

All five static findings are false positives: attribution links and payment-verification descriptions do not demonstrate reconnaissance or exfiltration. No evidence found of prompt injection or malicious instructions in the single documentation file. The package contains guidance only, so payment implementation security cannot be verified.

1
Archivos escaneados
96
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Factores de riesgo

🌐 Acceso a red (2)
La auditoría estática y semántica completada más reciente no detectó hallazgos de seguridad confirmados. Esto no demuestra que el skill no tenga efectos secundarios.
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/nexaiguy-x402-api-paywall/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/nexaiguy-x402-api-paywall/security.svg)](https://skillstore.io/skills/nexaiguy-x402-api-paywall?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/nexaiguy-x402-api-paywall?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nexaiguy-x402-api-paywall/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/nexaiguy-x402-api-paywall.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

nexaiguy. (2026). x402-api-paywall security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/nexaiguy-x402-api-paywall/audits/1

Cita BibTeX

@techreport{nexaiguy-nexaiguy-x402-api-paywall-2026, author = {nexaiguy}, title = {x402-api-paywall security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/nexaiguy-x402-api-paywall/audits/1}, note = {Author version 1.2} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "x402-api-paywall security audit report (audit version 1)" version: "1.2" type: report authors: - name: "nexaiguy" date-released: "2026-11-02" url: "https://skillstore.io/skills/nexaiguy-x402-api-paywall/audits/1" identifiers: - type: other value: "skillstore:nexaiguy-x402-api-paywall:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación

Lo que puedes crear

Protect an expensive generation route

Use the guide to plan a FastAPI dependency that checks payment before an image-generation endpoint performs expensive work.

Introduce selective API billing

Plan Express middleware for paid endpoints while keeping public routes unchanged.

Prototype agent micropayments

Explore a test-network USDC payment flow for agents consuming metered services.

Prueba estos prompts

Understand the payment flow
Explain the x402 request flow for a FastAPI route, including missing proof, HTTP 402 requirements, and facilitator verification.
Plan a FastAPI paywall
Plan an x402 paywall for my FastAPI image-generation route at 0.10 USDC on Base Sepolia. Identify required configuration and keep public routes unchanged.
Integrate Express payment checks
Review my Express routes and propose x402 middleware for selected paid endpoints. Identify a compatible facilitator and verify payment before protected work starts.
Review payment enforcement
Review my x402 integration for proof replay, incorrect payment amounts, network mismatches, and facilitator outages. Propose failure tests and identify unverified settlement assumptions.

Mejores prácticas

  • Verify current x402 and facilitator documentation before choosing dependencies or implementing payment checks.
  • Validate payment before protected work and confirm recipient, asset, amount, and network.
  • Test unpaid, invalid, and successful requests on a test network before enabling production payments.

Evitar

  • Treating this public guide as bundled, audited payment middleware.
  • Trusting client payment claims without server-side verification.
  • Assuming mocked proofs demonstrate successful live payment settlement.

Preguntas frecuentes

What is included in this package?
One SKILL.md guide is included. Scripts, extension source, and templates from the original package are not included.
Which frameworks does the guide cover?
It covers FastAPI route dependencies and Express middleware.
Which assets and networks are discussed?
The guide focuses on USDC and networks such as Base. Its example uses Base Sepolia.
Is an external verification service required?
Yes. The documented approach uses an external facilitator for server-side payment-proof verification.
Must every API endpoint require payment?
No. The guide describes protecting selected routes while leaving public endpoints and existing business logic unchanged.
Does the package prove production payment security?
No. It contains no executable implementation or tests. Generated integrations need independent review and testing with a compatible facilitator.

Detalles del desarrollador

Autor

nexaiguy

Licencia

MIT

Versión del autor

v1.2

Revisión de Skillstore

r1

Aviso de versión

La versión declarada por el autor no es un SemVer válido.

Ref.

3ddfdca559084abffbfdd188f2ba14b597dcfd9c

Actualidad del mantenimiento

2/11/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md

Más de nexaiguy

Ver todo
Ver todo