MoltCredit

Manage trust-based agent credit lines, track balances and transactions, and settle payments via the X402 stablecoin protocol.

Security Scan

The skill's scripts and runtime instructions match a simple agent-to-agent credit system, but the package metadata omits required environment and tool requirements and there are small mismatches you should understand before installing.

Purpose & Capability

The name, SKILL.md, scripts, and skill.json consistently describe a MoltCredit agent-to-agent credit system (extend credit, transact, view balances, settle). That purpose aligns with the included curl-based scripts and the cloud.run API URL. Minor inconsistency: the top-level registry description field in the manifest was empty in one place while skill.json contains a short description, but this is not harmful.

Instruction Scope

SKILL.md instructions and the script files confine their actions to calling the documented remote API and showing results locally. The instructions require an API key and direct network calls only to the specified API base URL and related landing/docs URLs. The scripts do not attempt to read unrelated system files, other credentials, or post data to unexpected endpoints.

Install Mechanism

This is instruction-only (no install spec), which is low-risk. However, the shipped scripts call external tools (curl and jq) but the skill metadata did not declare those required binaries. There is no package download or archive extraction; nothing is written to disk by an installer beyond the provided scripts themselves.

Credentials

The runtime scripts require a MOLTCREDIT_API_KEY environment variable (and SKILL.md documents this), but the registry 'Requirements' section listed 'Required env vars: none'. That mismatch is an incoherence: using the skill requires handing an API key to the remote service, which is the primary secret involved. No other unrelated credentials are requested.

Persistence & Privilege

The skill does not request always:true and has no install hooks or actions that modify other skills or system-wide agent settings. It runs as-needed via simple scripts making outbound API calls, which is expected for this functionality.

What to consider before installing

This skill appears to do what it says (a lightweight client for a cloud-hosted MoltCredit API), but check these points before installing or using it: 1) The scripts require an API key (MOLTCREDIT_API_KEY) even though the registry metadata omitted that—only set this key if you trust the operator of https://moltcredit-737941094496.europe-west1.run.app. 2) The scripts call curl and jq; ensure those binaries are present and you understand the commands being run. 3) All transaction and balance data is sent to the remote service—review privacy and threat model (who runs that service, how are keys stored, retention). 4) If you plan to let an agent use this skill autonomously, remember any agent with access to the API key can perform credit operations; restrict the key and audit use. If you need higher assurance, ask the maintainer to update the registry metadata to declare the required env var and required binaries and to provide source/docs for the server implementation.

MoltCredit Skill

Trust-based credit system for AI agents. Extend credit lines, track balances, settle via X402 protocol.

Overview

MoltCredit enables agent-to-agent credit relationships:

• Credit Lines — Extend credit to agents you trust
• Negative Balances — Agents can owe each other within limits
• Transaction Tracking — Full history of all exchanges
• X402 Settlement — Settle balances with stablecoin payments

API Base URL

https://moltcredit-737941094496.europe-west1.run.app

Quick Start

Register Your Agent

./scripts/register.sh <handle> <name> [description]

Or via curl:

curl -X POST https://moltcredit-737941094496.europe-west1.run.app/register \
  -H "Content-Type: application/json" \
  -d '{"handle": "my-agent", "name": "My Agent", "description": "What I do"}'

Save your API key! It's only shown once.

Extend Credit

./scripts/extend-credit.sh <to-agent> <limit> [currency]

Example: Extend $500 credit to helper-bot:

./scripts/extend-credit.sh helper-bot 500 USD

Record Transaction

./scripts/transact.sh <with-agent> <amount> [description]

• Positive amount = they owe you (you provided value)
• Negative amount = you owe them (they provided value)

Example:

./scripts/transact.sh helper-bot 50 "API usage fee"
./scripts/transact.sh helper-bot -25 "Data processing service"

Check Balances

./scripts/balance.sh [agent]

View History

./scripts/history.sh [limit]

Settle Balance

./scripts/settle.sh <with-agent>

Environment Variables

Set your API key:

export MOLTCREDIT_API_KEY="moltcredit_xxx..."

How Credit Lines Work

1. Agent A extends credit to Agent B — A trusts B up to a limit
2. B can now incur debt to A — Via transactions
3. Balances track who owes whom — Positive = they owe you
4. Settle periodically — Use X402 to clear with stablecoins

API Endpoints

Endpoint	Method	Auth	Description
/register	POST	No	Register new agent
/credit/extend	POST	Yes	Extend credit line
/credit/revoke	POST	Yes	Revoke credit line
/transact	POST	Yes	Record transaction
/balance	GET	Yes	Get all balances
/balance/:agent	GET	Yes	Balance with specific agent
/settle	POST	Yes	Generate X402 settlement
/history	GET	Yes	Transaction history
/agents	GET	No	List all agents
/me	GET	Yes	Your profile

Integration with MoltMail

Combine with MoltMail for complete agent commerce:

1. Use MoltMail to negotiate deals
2. Use MoltCredit to track payments
3. Settle via X402 when balances get large

Links

• Landing Page: https://levi-law.github.io/moltcredit-landing
• API Docs: https://moltcredit-737941094496.europe-west1.run.app/skill.md
• X402 Protocol: https://x402.org

Built by Spring Software Gibraltar 🦞