{"skill":{"slug":"mpc-accept-crypto-payments","displayName":"MoonPay Commerce (Helio) Accept Crypto Payments","summary":"Accept crypto payments on Solana via MoonPay Commerce (formerly Helio). Create Pay Links, generate checkout URLs, check transactions, and list supported currencies. Use when the user wants to accept crypto payments, create payment links, charge for products/services with crypto, or query payment transactions. Requires a MoonPay Commerce account with API key and secret.","description":"---\nname: mpc-accept-crypto-payments\ndescription: Accept crypto payments on Solana via MoonPay Commerce (formerly Helio). Create Pay Links, generate checkout URLs, check transactions, and list supported currencies. Use when the user wants to accept crypto payments, create payment links, charge for products/services with crypto, or query payment transactions. Requires a MoonPay Commerce account with API key and secret.\nmetadata:\n  openclaw:\n    requires:\n      bins:\n        - jq\n        - curl\n      env:\n        - HELIO_API_KEY\n        - HELIO_API_SECRET\n    credentials:\n      storage: ~/.mpc/helio/config\n      setup: bash scripts/setup.sh\n      permissions: \"600\"\n---\n\n# MPC Accept Crypto Payments\n\nMerchant-side skill for accepting crypto payments on Solana via MoonPay Commerce (formerly Helio).\n\n## Setup\n\nRun the setup script with your API credentials (wallet ID is fetched automatically):\n\n```bash\nbash scripts/setup.sh\n```\n\nYou'll need:\n- **API Key** — from https://app.hel.io → Settings → API Keys\n- **API Secret** — from the same page (save it when generated)\n\nThe setup script will:\n1. Validate your credentials against the API\n2. Fetch your Solana wallets automatically\n3. Select the PAYOUT wallet (or CONNECTED if no PAYOUT exists)\n4. Save everything to `~/.mpc/helio/config`\n\nIf the user doesn't have an account, direct them to https://app.hel.io to sign up.\n\n### Config Management\n```bash\nbash scripts/setup.sh status   # Show current config\nbash scripts/setup.sh clear    # Remove saved credentials\n```\n\n## Quick Reference\n\nBase URL: `https://api.hel.io/v1`\n\n### List Supported Currencies (no auth needed)\n```bash\ncurl -s https://api.hel.io/v1/currency | jq '.[].symbol'\n```\n\n### Create a Pay Link\n```bash\ncurl -s -X POST \"https://api.hel.io/v1/paylink/create/api-key?apiKey=$HELIO_API_KEY\" \\\n  -H \"Authorization: Bearer $HELIO_API_SECRET\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n    \"name\": \"My Payment\",\n    \"template\": \"OTHER\",\n    \"pricingCurrency\": \"<CURRENCY_ID>\",\n    \"price\": \"<AMOUNT_IN_BASE_UNITS>\",\n    \"features\": {\n      \"canChangePrice\": false,\n      \"canChangeQuantity\": false,\n      \"canSwapTokens\": true\n    },\n    \"recipients\": [{\n      \"currencyId\": \"<CURRENCY_ID>\",\n      \"walletId\": \"<YOUR_WALLET_ID>\"\n    }]\n  }'\n```\n\n**Defaults:** Currency is USDC (`6340313846e4f91b8abc519b`). Token swapping is enabled so payers can pay with any supported Solana token (auto-converted to USDC).\n\n**Price format:** `price` is in base units (int64 string). For USDC (6 decimals): `\"1000000\"` = 1 USDC. For SOL (9 decimals): `\"1000000000\"` = 1 SOL.\n\n### Create a Charge (Checkout URL)\n```bash\ncurl -s -X POST \"https://api.hel.io/v1/charge/api-key?apiKey=$HELIO_API_KEY\" \\\n  -H \"Authorization: Bearer $HELIO_API_SECRET\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"paymentRequestId\": \"<PAYLINK_ID>\"}'\n```\nReturns `{ \"id\": \"...\", \"pageUrl\": \"https://...\" }` — share `pageUrl` with the payer.\n\n### Check Transactions\n```bash\ncurl -s \"https://api.hel.io/v1/paylink/<PAYLINK_ID>/transactions?apiKey=$HELIO_API_KEY\" \\\n  -H \"Authorization: Bearer $HELIO_API_SECRET\"\n```\n\n### Disable / Enable a Pay Link\n```bash\ncurl -s -X PATCH \"https://api.hel.io/v1/paylink/<PAYLINK_ID>/disable?apiKey=$HELIO_API_KEY&disabled=true\" \\\n  -H \"Authorization: Bearer $HELIO_API_SECRET\"\n```\n\n## Helper Script\n\n```bash\n# Setup (run first)\nbash scripts/setup.sh\n\n# Operations\nbash scripts/helio.sh currencies\nbash scripts/helio.sh create-paylink \"Coffee\" 5.00 USDC\nbash scripts/helio.sh charge <paylink-id>\nbash scripts/helio.sh transactions <paylink-id>\nbash scripts/helio.sh disable <paylink-id>\nbash scripts/helio.sh enable <paylink-id>\n```\n\n## Templates\n\nThe `template` field controls Pay Link type:\n- `OTHER` — generic payment\n- `PRODUCT` — physical/digital product\n- `INVOICE` — invoice\n- `SUBSCRIPTION` — recurring (requires `subscriptionDetails`)\n- `EVENT` — event ticket\n\n## Credential Handling\n\nWhen setting up credentials, run the setup script interactively:\n```bash\nbash scripts/setup.sh\n```\n\nThe script prompts for credentials directly in the terminal — they are never stored in chat history or logs. Credentials are saved to `~/.mpc/helio/config` (mode 600).\n\n## Advanced\n\n- Full API schema details: see `references/api-reference.md`\n- OpenAPI spec: https://api.hel.io/v1/docs-json\n- Dashboard: https://app.hel.io\n- Docs: https://docs.hel.io\n","tags":{"latest":"0.3.0"},"stats":{"comments":0,"downloads":2108,"installsAllTime":0,"installsCurrent":0,"stars":1,"versions":3},"createdAt":1769635701274,"updatedAt":1778485867301},"latestVersion":{"version":"0.3.0","createdAt":1770808163040,"changelog":"# Changelog\n\n## v0.3.0\n\n### Security\n\n- **Input sanitization for all user-supplied arguments in `helio.sh`**\n  - Added `validate_input` function that rejects values containing shell metacharacters, URL-unsafe characters, and path traversal sequences (`..`)\n  - Allowlist: `a-zA-Z0-9._@:/-` — covers Helio IDs, currency symbols, wallet addresses, and decimal amounts\n  - Validated arguments: `symbol` (currency-id, create-paylink), `amount` (create-paylink), `paylink_id` (charge, transactions, disable, enable)\n  - Mitigates URL path traversal and terminal output injection when arguments are interpolated into curl URLs and echo statements\n  - Addresses code scanner findings from v0.2.0 review","license":null},"metadata":{"setup":[{"key":"HELIO_API_KEY","required":true},{"key":"HELIO_API_SECRET","required":true}],"os":null,"systems":null},"owner":{"handle":"mavagio","userId":"s179e96p69c5xzqmmcge19n2e5885bs5","displayName":"mavagio","image":"https://avatars.githubusercontent.com/u/7386708?v=4"},"moderation":{"isSuspicious":false,"isMalwareBlocked":false,"verdict":"clean","reasonCodes":["review.llm_review"],"summary":"Review: review.llm_review","engineVersion":"v2.4.24","updatedAt":1779917576624}}