AgentHub - 32 AI APIs via x402

Call 32 real-world APIs — flights, hotels, weather, crypto prices, DeFi yields, stock quotes, web search, geocoding, IP reputation, blockchain data, code exe...

Security Scan

The skill's functionality matches its description, but it asks you to store and use a raw wallet private key and to auto-install and execute a third‑party npm SDK at runtime — actions that increase risk and deserve careful review before use.

Purpose & Capability

The skill claims to provide paid access to many APIs and requires Node/npm plus a Base wallet private key to sign micropayments — these requirements are broadly consistent with its stated payment-based gateway purpose. Minor inconsistency: the registry metadata showed no primary credential while the SKILL.md metadata declares MCP_WALLET_PRIVATE_KEY as the primary credential.

Instruction Scope

Runtime instructions tell the agent to install a third‑party npm package into the skill workspace if missing, write a temporary script to /tmp, and execute it with node; they also instruct the user to store a raw private key in OpenClaw config. These steps grant the skill the ability to run arbitrary JS code (from the SDK) and persist a sensitive secret.

Install Mechanism

There is no registry install spec, but SKILL.md instructs automatic npm install --prefix ... rwagenthub-sdk. Fetching and executing code from the public npm registry at runtime is a moderate risk (expected for SDK usage but potentially dangerous if the package or its transitive deps are malicious or compromised).

Credentials

The only required env var is MCP_WALLET_PRIVATE_KEY, which is logically required for signing payments — but a raw private key is highly sensitive. The skill advises storing it in openclaw config, which persists the secret. The SKILL.md claims the key 'never leaves your device' but this cannot be verified from the instructions alone.

Persistence & Privilege

always is false and the skill does not request elevated system privileges. However, it instructs storing a private key in agent configuration (persistent) and running npm installs and temporary scripts, so it gains persistent access to a sensitive secret and runtime execution capability within the agent environment.

What to consider before installing

This skill will install a third‑party npm SDK into your agent's workspace and requires you to store a raw Base wallet private key in OpenClaw config so it can sign micropayments. Before installing: 1) Consider creating a dedicated wallet with only the small USDC balance you plan to spend and never use your main key; 2) Inspect the rwagenthub-sdk package source (npm page / GitHub) and its dependencies before allowing installs; 3) Avoid pasting long‑term private keys into agent config — prefer an ephemeral key, a signing service, or hardware signer if supported; 4) Run the skill in an isolated environment (sandbox or separate machine) until you trust the SDK; 5) Verify the gateway URL and operator (the homepage is on railway.app) and ask the publisher for an explicit security/privacy statement and the SDK source repo. If you cannot audit the SDK or are uncomfortable storing a raw private key, do not install or use this skill.

AgentHub — 32 AI APIs, pay per call in USDC

You have access to AgentHub, a gateway that lets you call real-world data APIs. Payment is handled automatically via the x402 protocol — gasless USDC on Base Mainnet.

Gateway URL: https://agents-production-73c1.up.railway.app

---

Setup (one time)

1. Install the SDK

npm install --prefix ~/.openclaw/workspace/skills/rwagenthub rwagenthub-sdk

This installs the SDK inside the skill's own folder — no global install, no permission issues, works on any system.

SDK package: npmjs.com/package/rwagenthub-sdk

2. Configure your wallet private key

⚠️ Use a dedicated wallet with only the USDC you need. Never use your main wallet.

openclaw config set env.MCP_WALLET_PRIVATE_KEY "0xYOUR_PRIVATE_KEY_HERE"

Security note: The private key never leaves your device. The SDK uses it to sign an EIP-3009 gasless authorization locally — only the signed authorization (not the key) is sent to the payment network. The key is used solely to sign USDC micropayments on Base Mainnet.

3. Add USDC to your wallet on Base Mainnet

• Min recommended: $1 USDC (covers 100+ calls at $0.01 each)
• Buy USDC and withdraw to Base network via Coinbase or any exchange

---

Before every call — verify SDK is installed

Run this check before making any API call. If the SDK is missing, install it automatically:

[ -f "$HOME/.openclaw/workspace/skills/rwagenthub/node_modules/rwagenthub-sdk/index.js" ] || \
  npm install --prefix "$HOME/.openclaw/workspace/skills/rwagenthub" rwagenthub-sdk --silent

If MCP_WALLET_PRIVATE_KEY is not set, tell the user:

"Please run: openclaw config set env.MCP_WALLET_PRIVATE_KEY \"0xYOUR_PRIVATE_KEY\""

---

How to call an API

For every API call, create a temporary script and run it with node:

cat > /tmp/agenthub-call.mjs << SCRIPT
import AgentHub from '$HOME/.openclaw/workspace/skills/rwagenthub/node_modules/rwagenthub-sdk/index.js';

const hub = new AgentHub({ privateKey: process.env.MCP_WALLET_PRIVATE_KEY });
const result = await hub.call('API_NAME', { ...inputs... });
console.log(JSON.stringify(result, null, 2));
SCRIPT

node /tmp/agenthub-call.mjs

Replace API_NAME and { ...inputs... } with the API and parameters from the list below.

---

Available APIs

✈️ Travel

flight_search — $0.01

await hub.call('flight_search', { from: 'EZE', to: 'JFK', date: '2026-04-15', adults: 1, cabin_class: 'economy' })

flight_search_pro — $0.01

await hub.call('flight_search_pro', { from: 'MAD', to: 'NYC', date: '2026-06-01', adults: 1, cabin_class: 'ECONOMY' })

flight_status — $0.01

await hub.call('flight_status', { carrier_code: 'AA', flight_number: '100', date: '2026-06-01' })

seat_map — $0.01

await hub.call('seat_map', { offer_id: 'off_...' })

airport_search — $0.01

await hub.call('airport_search', { country_code: 'AR', limit: 10 })

hotel_search — $0.06

await hub.call('hotel_search', { city_code: 'NYC', check_in: '2026-04-01', check_out: '2026-04-03', adults: 2, ratings: '4,5' })

activities_search — $0.01

await hub.call('activities_search', { latitude: 40.7128, longitude: -74.006, radius: 5 })

---

🌐 Web & Search

web_search — $0.02

await hub.call('web_search', { query: 'best hotels in Paris 2026', type: 'search', num: 10 })

web_search_ai — $0.02

await hub.call('web_search_ai', { query: 'latest AI agent news', count: 5, freshness: 'Week' })

web_search_full — $0.02

await hub.call('web_search_full', { query: 'x402 protocol guide', limit: 3 })

places_search — $0.02

await hub.call('places_search', { query: 'coffee shops', location: 'Tokyo, Japan', num: 5 })

image_search — $0.01

await hub.call('image_search', { query: 'Patagonia landscape', num: 5 })

shopping_search — $0.02

await hub.call('shopping_search', { query: 'carry-on luggage 40L', num: 5 })

url_extract — $0.02

await hub.call('url_extract', { url: 'https://en.wikipedia.org/wiki/Patagonia', format: 'markdown' })

url_scrape — $0.01

await hub.call('url_scrape', { url: 'https://example.com', only_main_content: true })

url_scrape_json — $0.02

await hub.call('url_scrape_json', { url: 'https://news.ycombinator.com', prompt: 'extract top 3 story titles and point counts' })

---

🌤️ Weather & Location

weather_forecast — $0.01

await hub.call('weather_forecast', { location: 'Buenos Aires', days: 7, units: 'metric' })

geocode — $0.01

await hub.call('geocode', { query: 'Eiffel Tower, Paris', mode: 'forward' })
// reverse: { lat: 48.8584, lon: 2.2945, mode: 'reverse' }

---

💰 Crypto & DeFi

crypto_price — $0.01

await hub.call('crypto_price', { coins: 'btc,eth,sol', vs_currency: 'usd' })

exchange_rate — $0.01

await hub.call('exchange_rate', { from: 'USD', to: 'EUR,GBP,JPY', amount: 100 })

defi_market_snapshot — $0.02

await hub.call('defi_market_snapshot', { top: 10 })

defi_yields — $0.02

await hub.call('defi_yields', { stablecoin_only: true, no_il_risk: true, min_apy: 5, top: 10 })

---

📈 Stocks & Markets

stock_quote — $0.01

await hub.call('stock_quote', { symbol: 'AAPL' })

stock_profile — $0.01

await hub.call('stock_profile', { symbol: 'NVDA' })

stock_search — $0.01

await hub.call('stock_search', { query: 'Apple', limit: 5 })

market_news — $0.01

await hub.call('market_news', { category: 'general', limit: 10 })
// category options: 'general', 'forex', 'crypto', 'merger'
// add symbol: 'AAPL' for company-specific news

earnings_calendar — $0.01

await hub.call('earnings_calendar', { from: '2026-04-01', to: '2026-04-30' })

---

⛓️ Blockchain & Security

alchemy_portfolio — $0.02

await hub.call('alchemy_portfolio', { address: '0x...', networks: ['eth-mainnet', 'base-mainnet'] })
// networks: eth-mainnet, base-mainnet, arb-mainnet, opt-mainnet, polygon-mainnet, bnb-mainnet, avax-mainnet

alchemy_tx_history — $0.02

await hub.call('alchemy_tx_history', { address: '0x...', networks: ['eth-mainnet'], page_size: 20, order: 'desc' })

opensky_flights — $0.01

await hub.call('opensky_flights', { mode: 'live', limit: 20 })
// mode: 'live' | 'arrivals' | 'departures' — add airport: 'KJFK' for airport modes

ip_reputation — $0.01

await hub.call('ip_reputation', { ip: '8.8.8.8', max_age_days: 90 })

---

🛠️ Utilities

code_exec — $0.05

await hub.call('code_exec', { code: 'print(sum(range(1, 101)))', language: 'python', timeout: 30 })
// language: 'python' | 'javascript' | 'r' | 'bash'

email_send — $0.01

await hub.call('email_send', { to: '[e-mail]', subject: 'Hello', text: 'Message body.' })

---

Full example

Ask: "What's the price of Bitcoin?"

cat > /tmp/agenthub-call.mjs << SCRIPT
import AgentHub from '$HOME/.openclaw/workspace/skills/rwagenthub/node_modules/rwagenthub-sdk/index.js';
const hub = new AgentHub({ privateKey: process.env.MCP_WALLET_PRIVATE_KEY });
const result = await hub.call('crypto_price', { coins: 'btc', vs_currency: 'usd' });
console.log(JSON.stringify(result, null, 2));
SCRIPT

node /tmp/agenthub-call.mjs

---

Errors

Error	Cause	Fix
payment failed	Insufficient USDC on Base	Top up wallet balance
AgentHub: API error — unknown_api	Wrong API name	Check spelling against the list above
AgentHub: API error — invalid_inputs	Missing or wrong parameters	Check the inputs for that API
Cannot find module / ERR_MODULE_NOT_FOUND	SDK not installed	Run npm install --prefix ~/.openclaw/workspace/skills/rwagenthub rwagenthub-sdk