ClawHub

MoonPay Commerce (Helio) Accept Crypto Payments

v0.3.0

Accept crypto payments on Solana via MoonPay Commerce (formerly Helio). Create Pay Links, generate checkout URLs, check transactions, and list supported currencies. Use when the user wants to accept crypto payments, create payment links, charge for products/services with crypto, or query payment transactions. Requires a MoonPay Commerce account with API key and secret.

⭐ 1· 1.7k·0 current·0 all-time
by@mavagio
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, declared env vars (HELIO_API_KEY, HELIO_API_SECRET), required binaries (curl, jq), referenced endpoints (api.hel.io, app.hel.io), and included helper scripts all align with a MoonPay Commerce / Helio merchant helper for creating pay links, charges, and querying transactions.
✓
Instruction Scope
SKILL.md instructs the agent to run the provided setup and helper scripts and to call the documented Helio API endpoints. The scripts only read/write a local config (~/.mpc/helio/config), read the declared env vars, and call api.hel.io; they do not attempt to read unrelated system files or send data to unexpected external endpoints.
✓
Install Mechanism
No install spec is present (instruction-only), so nothing arbitrary is downloaded or executed during install. The included scripts live in the skill bundle and are plain shell scripts — no network-based install or third-party archive extraction was requested.
✓
Credentials
Only the two credentials required by the Helio API are requested (API key and secret). The number and type of env vars are proportional to the skill's functionality and are referenced consistently by the scripts and SKILL.md.
ℹ
Persistence & Privilege
The setup script persistently saves credentials to ~/.mpc/helio/config with chmod 600 and performs ownership/permission checks; this is expected for a merchant CLI. The skill is not forced always-on and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it calls the official Helio (MoonPay Commerce) API and stores your API key/secret locally in ~/.mpc/helio/config (saved with mode 600 by the setup script). Before installing or running: (1) review the two scripts yourself to confirm comfort with saving credentials to your home directory; (2) do not paste API secrets into chat — use the interactive setup script which prompts locally; (3) verify network access is only to api.hel.io/app.hel.io (the scripts call those endpoints); (4) if you prefer not to persist credentials, you can export HELIO_API_KEY/HELIO_API_SECRET in your session and avoid running the setup save step. Overall the files are coherent and proportionate to the stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f93xg5vcyqek539hjdznjsd80zaf6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsjq, curl
EnvHELIO_API_KEY, HELIO_API_SECRET

Comments