Cinderwright Api — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cinderwright Api (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
June 9, 2026: Both bridge directions confirmed on mainnet.
npx cinderwright "Bitcoin price"x402 + L402 (Lightning) interoperable. First confirmed cross-protocol agent payment June 2026.
An AI agent with a USDC balance can now call any Lightning-gated (L402) service. We detect the protocol, route the payment, and return the data. The agent never knows which protocol settled.
# One endpoint. Any protocol. 2,811 services.
curl -X POST https://api.ideafactorylab.org/proxy/do \
-H "X-CW-Key: sk_cw_your_key" \
-d '{"task": "get weather in Tokyo"}'| Protocol | Services | Status |
|---|---|---|
| x402 (USDC on Base) | 1,503 | Live |
| L402 (Bitcoin Lightning) | 1,185 | Live |
| MPP (Stripe/Tempo) | 92 | Coming soon |
Lightning status: https://api.ideafactorylab.org/lightning-status
/proxy/doThe agent never manages wallets, signs transactions, or knows which protocol ran.
# Get a proxy account
curl -X POST https://api.ideafactorylab.org/proxy/setup \
-d '{"wallet": "0xYourBaseWallet"}'
# Deposit USDC on Base to the returned address
# Call any service
curl -X POST https://api.ideafactorylab.org/proxy/do \
-H "X-CW-Key: sk_cw_your_key" \
-d '{"task": "Bitcoin price now", "max_cost_usd": 0.10}'npx cinderwright-mcp-serverAdd to claude_desktop_config.json:
{
"mcpServers": {
"cinderwright": {
"command": "npx",
"args": ["-y", "cinderwright-mcp-server"],
"env": { "CW_KEY": "sk_cw_your_key_here" }
}
}
}17 tools including proxy_do, proxy_setup, proxy_balance, and service discovery.
| Tool | What it does |
|---|---|
| /test | Live service tester |
| /debug | 16-check diagnostic engine with host pollution + scheme detection |
| /sandbox | Test EIP-3009 signing without spending USDC |
| /budget | Per-call caps and kill switch |
| /setup | Wallet setup wizard |
| /lightning-status | Lightning node status and outbound capacity |
| /onchain | On-chain settlement data via TomSmart mapper.db |
# Free search
curl "https://api.ideafactorylab.org/discover?q=weather"
curl "https://api.ideafactorylab.org/discover?q=bitcoin+price&protocol=l402"
# On-chain settlement data for any service
curl "https://api.ideafactorylab.org/onchain?endpoint=https://your-service.com/api"
# Submit your service
curl -X POST https://api.ideafactorylab.org/submit \
-d '{"url": "https://your-service.com"}'The universal payment router sits between agents and services:
Agent (USDC balance)
|
v
POST /proxy/do {"task": "..."}
|
v
Cinderwright Router
|-- detect protocol from 402 response headers
|-- x402: sign USDC payment via EIP-3009
|-- L402: pay Lightning invoice via LND REST
|-- MPP: (coming soon)
|
v
Service returns data
|
v
Agent receives data + charged USDC equivalentnpx cinderwright-mcp-server~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.