inventpay-e3b0c4 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited inventpay-e3b0c4 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Give your OpenClaw agent the ability to accept crypto payments, run a digital store, and manage funds.
This skill connects your agent to InventPay's payment infrastructure through the Model Context Protocol (MCP). It uses the open-source inventpay-mcp server (MIT license, source on GitHub, npm package).
Your agent gets real tools that let it:
Everything runs through InventPay's API. Payments settle on-chain. Delivery is automatic for digital products.
openclaw install inventpayOr add it manually by placing this skill folder in your OpenClaw skills directory.
The skill uses the inventpay-mcp server (v1.0.2). You can install it explicitly to avoid runtime fetching:
npm install -g [email protected]Or if you prefer npx (fetches at runtime):
npx [email protected]pk_live_...)export INVENTPAY_API_KEY="pk_live_your_key_here"For OpenClaw's config file, add the MCP server:
{
"mcpServers": {
"inventpay": {
"command": "npx",
"args": ["[email protected]"],
"env": {
"INVENTPAY_API_KEY": "${INVENTPAY_API_KEY}"
}
}
}
}Note: The -y flag is intentionally omitted. npx will prompt you to confirm before downloading the package. This is safer — you get a chance to verify the package name and version before anything executes.Note: The withdrawal key is NOT included in the default config. See the Security section below before enabling withdrawals.
Ask your agent:
"What's my InventPay balance?"
If configured correctly, the agent will call the get_balances tool and return your current balances across all currencies. If you see an auth error, double check that your INVENTPAY_API_KEY is set and starts with pk_live_.
| Tool | What it does |
|---|---|
create_payment | Create a crypto payment with a specific currency and wallet address |
create_invoice | Create a multi-currency invoice — the buyer picks which crypto to pay with |
get_payment_status | Check if a payment went through, how many confirmations, transaction hash |
| Tool | What it does |
|---|---|
create_store | Set up a digital storefront with a public URL |
get_store | Get your store details, product count, order count |
update_store | Change store name, description, logo, accepted currencies |
| Tool | What it does |
|---|---|
create_product | Add a digital product with price and delivery content |
list_products | Browse your products with search and pagination |
update_product | Edit product details, pricing, or delivery content |
delete_product | Deactivate or remove a product |
| Tool | What it does |
|---|---|
list_orders | View orders filtered by status |
get_order | Full order details — items, payment info, customer email |
update_order_status | Mark orders as processing, shipped, completed, etc. |
| Tool | What it does |
|---|---|
get_balances | See available, pending, earned, and withdrawn amounts per currency |
get_store_analytics | Revenue breakdown, order counts, top products |
| Tool | What it does |
|---|---|
create_withdrawal | Send funds to an external wallet (requires INVENTPAY_WITHDRAWAL_KEY) |
get_withdrawal | Check withdrawal status and transaction hash |
Here are things you can tell your agent once this skill is installed.
Accepting payments:
"Create a $50 USDT payment for the consulting session with Alex"
"Generate an invoice for $200 — let the client pick their preferred crypto"
"Did payment abc123 go through yet?"
Running a store:
"Create a store called 'AI Skill Shop'"
"Add a product called 'Advanced Code Review Skill' priced at $8 with a download URL of https://example.com/my-skill.md"
"Show me all my pending orders"
"What's my store revenue this month?"
Managing funds:
"What's my current balance across all currencies?"
"Check the status of my last withdrawal"
This is a practical setup for monetizing premium skill files:
inventpay.io/store/your-slugYour agent can manage the entire lifecycle: adding products, checking orders, answering balance questions.
Most skill files sell between $3-15. The sweet spot is $5-10 for skills that save 30+ minutes of repeated work. Bundles of 5-10 related skills can go for $20-40.
InventPay uses two separate keys with different permissions:
| Key | Prefix | What it can do | What it cannot do |
|---|---|---|---|
| API Key | pk_live_ | Payments, invoices, store, products, orders, balances, analytics | Withdrawals |
| Withdrawal Key | wk_live_ | Withdrawals only | Everything else |
The keys are intentionally separated. The API key alone cannot move money out of your account.
The INVENTPAY_WITHDRAWAL_KEY grants the ability to send funds to external wallets. Before adding it:
To enable withdrawals, add the key to your OpenClaw MCP config:
{
"mcpServers": {
"inventpay": {
"command": "npx",
"args": ["[email protected]"],
"env": {
"INVENTPAY_API_KEY": "${INVENTPAY_API_KEY}",
"INVENTPAY_WITHDRAWAL_KEY": "${INVENTPAY_WITHDRAWAL_KEY}"
}
}
}
}The MCP server package inventpay-mcp is:
@modelcontextprotocol/sdk and zod (input validation)You can audit the package before running:
npm pack [email protected] && tar -xzf inventpay-mcp-1.0.2.tgz && ls package/Or install globally to skip runtime npx fetching entirely:
npm install -g [email protected]Then use the global binary in your config:
{
"mcpServers": {
"inventpay": {
"command": "inventpay-mcp",
"env": {
"INVENTPAY_API_KEY": "${INVENTPAY_API_KEY}"
}
}
}
}| Currency | Network |
|---|---|
| BTC | Bitcoin |
| ETH | Ethereum |
| LTC | Litecoin |
| USDT | ERC-20 (Ethereum) |
| USDT | BEP-20 (BSC) |
Amount currencies for invoices: USD, USDT, BTC, ETH, LTC.
| Variable | Required | Description |
|---|---|---|
INVENTPAY_API_KEY | Yes | Merchant API key (pk_live_...). Used for payments, store, products, orders, balances. Cannot initiate withdrawals. |
INVENTPAY_WITHDRAWAL_KEY | No | Withdrawal key (wk_live_...). Only needed for create_withdrawal. See Security section before enabling. |
INVENTPAY_BASE_URL | No | API base URL. Defaults to https://api.inventpay.io. |
InventPay — Crypto payment infrastructure for developers and AI agents.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.