coinvoyage-paykit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited coinvoyage-paykit (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Claude Code plugin for integrating CoinVoyage — a non-custodial, multi-chain crypto payment gateway — into any app you build with Claude.
Bundles two surfaces:
PaymentWidget, webhook signature verification, and REST API fallback for non-JS stacks.Community-maintained integration. Not officially affiliated with CoinVoyage.
/plugin install KingPeque/coinvoyage-paykitYou'll be prompted at install for:
| Field | Required | Notes |
|---|---|---|
api_key | yes | Your public API key from https://dashboard.coinvoyage.io → Developers |
api_secret | optional | Needed for SALE/REFUND orders, webhook management, and fee claims. Leave blank to restrict Claude to read + DEPOSIT flows only. |
api_base_url | optional | Defaults to https://api.coinvoyage.io |
The secret is stored in your system keychain via Claude Code's sensitive-config pathway — it never lands in a file you'd commit.
Once installed, these kinds of requests will activate the skill and/or MCP tools:
coinvoyage-paykit/
├── .claude-plugin/
│ └── plugin.json # Plugin manifest (prompts user for API keys)
├── mcp.json # Declares the bundled MCP server
├── skills/
│ └── coinvoyage-payments/
│ └── SKILL.md # Integration guide + trigger description
├── mcp-server/ # Source for @kingpeque/coinvoyage-mcp (npm)
│ ├── src/index.ts
│ ├── package.json
│ └── tsconfig.json
├── README.md
└── LICENSEBitcoin, Solana, Ethereum, Optimism, Arbitrum, Base, BSC, Polygon, Sui — plus any ERC-20 / SPL / native token on these chains. See full chain ID reference in the supported_chains MCP tool.
[email protected].api.coinvoyage.io (or your configured override).mcp-server/src/index.ts — it's under 300 lines.git clone https://github.com/KingPeque/coinvoyage-paykit
cd coinvoyage-paykit/mcp-server
npm install
npm run build
# Point your MCP client at ./mcp-server/dist/index.js with COINVOYAGE_API_KEY setRun the skill locally by symlinking skills/coinvoyage-payments/ into ~/.claude/skills/ (or installing the plugin in dev mode).
Issues and PRs welcome at https://github.com/KingPeque/coinvoyage-paykit/issues. Please don't commit API keys, secrets, or wallet addresses.
MIT — see LICENSE.
[email protected]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.