Agent Wallet

Wallets for AI agents with x402 payment signing, referral rewards, and policy-controlled actions.

Install

openclaw skills install @microchipgnu/agentwallet-frames

AgentWallet

AgentWallet provides server wallets for AI agents. Wallets are provisioned after email OTP verification. All signing happens server-side and is policy-controlled.

TL;DR - Quick Reference

FIRST: Check if already connected by reading ~/.agentwallet/config.json. If file exists with apiToken, you're connected - DO NOT ask user for email.

Need to connect (no config file)? Ask user for email → POST to /api/connect/start → user enters OTP → POST to /api/connect/complete → save API token.

x402 Payments? Use the ONE-STEP /x402/fetch endpoint (recommended) - just send target URL + body, server handles everything.

x402/fetch - ONE-STEP PAYMENT PROXY (RECOMMENDED)

This is the simplest way to call x402 APIs. Send the target URL and body - the server handles 402 detection, payment signing, and retry automatically.

bash

curl -s -X POST "https://frames.ag/api/wallets/USERNAME/actions/x402/fetch" \
  -H "Authorization: Bearer TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://enrichx402.com/api/exa/search","method":"POST","body":{"query":"AI agents","numResults":3}}'

That's it! The response contains the final API result:

json

{
  "success": true,
  "response": {
    "status": 200,
    "body": {"results": [...]},
    "contentType": "application/json"
  },
  "payment": {
    "chain": "eip155:8453",
    "amountFormatted": "0.01 USDC",
    "recipient": "0x..."
  },
  "paid": true,
  "attempts": 2,
  "duration": 1234
}

x402/fetch Request Options

Field	Type	Required	Description
`url`	string	Yes	Target API URL (must be HTTPS in production)
`method`	string	No	HTTP method: GET, POST, PUT, DELETE, PATCH (default: GET)
`body`	object	No	Request body (auto-serialized to JSON)
`headers`	object	No	Additional headers to send
`preferredChain`	string	No	`"auto"` (default), `"evm"`, or `"solana"`. Auto selects chain with sufficient USDC balance
`dryRun`	boolean	No	Preview payment cost without paying
`timeout`	number	No	Request timeout in ms (default: 30000, max: 120000)
`idempotencyKey`	string	No	For deduplication

Dry Run (Preview Cost)

Add "dryRun": true to the request body. Returns payment details without executing:

json

{
  "success": true,
  "dryRun": true,
  "payment": {
    "required": true,
    "chain": "eip155:8453",
    "amountFormatted": "0.01 USDC",
    "policyAllowed": true
  }
}

Error Codes

Code	HTTP	Description
`INVALID_URL`	400	URL malformed or blocked (localhost, internal IPs)
`POLICY_DENIED`	403	Policy check failed (amount too high, etc.)
`WALLET_FROZEN`	403	Wallet is frozen
`TARGET_TIMEOUT`	504	Target API timed out
`TARGET_ERROR`	502	Target API returned 5xx error
`PAYMENT_REJECTED`	402	Payment was rejected by target API
`NO_PAYMENT_OPTION`	400	No compatible payment network

Config File Reference

Store credentials at ~/.agentwallet/config.json:

json

{
  "username": "your-username",
  "email": "your@email.com",
  "evmAddress": "0x...",
  "solanaAddress": "...",
  "apiToken": "mf_...",
  "moltbookLinked": false,
  "moltbookUsername": null,
  "xHandle": null
}

Field	Description
`username`	Your unique AgentWallet username
`email`	Email used for OTP verification
`evmAddress`	EVM wallet address
`solanaAddress`	Solana wallet address
`apiToken`	Fund API token for authenticated requests (starts with `mf_`)
`moltbookLinked`	Whether a Moltbook account is linked
`moltbookUsername`	Linked Moltbook username (if any)
`xHandle`	X/Twitter handle from Moltbook (if linked)

Security: Never commit to git. Set chmod 600. Treat apiToken like a password.

Connect Flow

Web flow: Ask user for email → direct to https://frames.ag/connect?email=EMAIL → user enters 6-digit OTP → page displays credentials (AGENTWALLET_USERNAME, AGENTWALLET_API_TOKEN, etc.). User should save the API token securely.

API flow (for CLI/agents):

Step 1 - Send OTP:

bash

curl -X POST https://frames.ag/api/connect/start \
  -H "Content-Type: application/json" \
  -d '{"email":"your@email.com"}'

Returns username in response. For referrals, add "ref":"REFERRER_USERNAME" to body.

Step 2 - Ask user for OTP, then complete:

bash

curl -X POST https://frames.ag/api/connect/complete \
  -H "Content-Type: application/json" \
  -d '{"username":"USERNAME_FROM_STEP_1","email":"your@email.com","otp":"USER_OTP"}'

Returns apiToken, evmAddress, solanaAddress. Save the apiToken for all wallet operations.

Referral & Airdrop Program

Share your referral link: https://frames.ag/connect?ref=YOUR_USERNAME&email=THEIR_EMAIL

Both referrer and new agent earn airdrop points. Points: referral (200), first tx (50), daily active (10), weekly streak (100).

Tiers: Bronze (0-4, 1x), Silver (5-24, 1.5x), Gold (25-99, 2x), Diamond (100+, 3x).

Check rewards:

bash

curl https://frames.ag/api/wallets/YOUR_USERNAME/referrals \
  -H "Authorization: Bearer FUND_API_TOKEN"

Network Pulse

Public network stats: GET https://frames.ag/api/network/pulse — returns active agents, transaction counts, volume, trending APIs.

Personal stats (authenticated): GET https://frames.ag/api/wallets/YOUR_USERNAME/stats — returns rank, transaction history, volume, referral info, streak.

Skill Files

File	URL
SKILL.md (this file)	`https://frames.ag/skill.md`
HEARTBEAT.md	`https://frames.ag/heartbeat.md`
package.json (metadata)	`https://frames.ag/skill.json`

Heartbeat

Run periodically to check for skill updates, wallet status, and recent activity:

bash

curl https://frames.ag/heartbeat.md

Base URL: https://frames.ag/api/v1

Authentication

Use your Fund API token (starts with mf_) as: Authorization: Bearer FUND_API_TOKEN

Check connection (public, no auth): GET https://frames.ag/api/wallets/USERNAME — returns connected: true/false with wallet addresses if connected.

Funding Wallets

Direct users to https://frames.ag/u/YOUR_USERNAME to fund via Coinbase Onramp (card, bank, or Coinbase account). Supports Base (USDC) and Solana (SOL).

Check balance after funding:

bash

curl https://frames.ag/api/wallets/USERNAME/balances \
  -H "Authorization: Bearer FUND_API_TOKEN"

Wallet Operations

Balances: GET /api/wallets/USERNAME/balances (auth required)

Activity: GET /api/wallets/USERNAME/activity?limit=50 (auth optional — authenticated sees all events, public sees limited). Event types: otp.*, policy.*, wallet.action.*, x402.authorization.signed.

Actions (Policy Controlled)

EVM Transfer

bash

curl -X POST "https://frames.ag/api/wallets/USERNAME/actions/transfer" \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{"to":"0x...","amount":"1000000","asset":"usdc","chainId":8453}'

Fields: to (address), amount (smallest units — ETH: 18 decimals, USDC: 6 decimals), asset ("eth" or "usdc"), chainId, idempotencyKey (optional).

Supported USDC chains: Ethereum (1), Sepolia (11155111), Optimism (10), Polygon (137), Arbitrum (42161), Base (8453), Base Sepolia (84532).

Solana Transfer

bash

curl -X POST "https://frames.ag/api/wallets/USERNAME/actions/transfer-solana" \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{"to":"RECIPIENT","amount":"1000000000","asset":"sol","network":"devnet"}'

Fields: to (address), amount (smallest units — SOL: 9 decimals, USDC: 6 decimals), asset ("sol" or "usdc"), network ("mainnet" or "devnet"), idempotencyKey (optional).

EVM Contract Call

bash

curl -X POST "https://frames.ag/api/wallets/USERNAME/actions/contract-call" \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{"to":"0x...","data":"0x...","value":"0","chainId":8453}'

Sign Message

bash

curl -X POST "https://frames.ag/api/wallets/USERNAME/actions/sign-message" \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{"chain":"solana","message":"hello"}'

Solana Devnet Faucet

Request free devnet SOL for testing. Sends 0.1 SOL to your Solana wallet on devnet. Rate limited to 3 requests per 24 hours.

bash

curl -X POST "https://frames.ag/api/wallets/USERNAME/actions/faucet-sol" \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{}'

Response: {"actionId":"...","status":"confirmed","amount":"0.1 SOL","txHash":"...","explorer":"...","remaining":2}

Response format for all actions: {"actionId":"...","status":"confirmed","txHash":"...","explorer":"..."}

x402 Manual Flow (Advanced)

Use this only if you need fine-grained control. For most cases, use x402/fetch above.

Protocol Versions

Version	Payment Header	Network Format
v1	`X-PAYMENT`	Short names (`solana`, `base`)
v2	`PAYMENT-SIGNATURE`	CAIP-2 (`solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp`)

Flow

Call target API → get 402 response. Payment info is in the payment-required HEADER (body may be empty {}).
Sign: POST /api/wallets/USERNAME/actions/x402/pay with {"requirement": "<header value or JSON>", "preferredChain": "evm"}. The requirement field accepts both base64 strings and JSON objects.
Retry original request with the header from usage.header response field and paymentSignature value.

Signing endpoint: /api/wallets/{USERNAME}/actions/x402/pay (x402/pay with SLASH, not dash)

Sign Request Options

Field	Type	Description
`requirement`	string or object	Payment requirement (base64 or JSON)
`preferredChain`	`"evm"` or `"solana"`	Preferred blockchain
`preferredChainId`	number	Specific EVM chain ID
`idempotencyKey`	string	For deduplication
`dryRun`	boolean	Sign without storing (for testing)

Key Rules

Signatures are ONE-TIME USE — consumed even on failed requests
Use single-line curl — multiline \ causes escaping errors
USDC amounts use 6 decimals (10000 = $0.01)
Always use requirement field (not deprecated paymentRequiredHeader)

Supported Networks

Network	CAIP-2 Identifier	Token
Base Mainnet	`eip155:8453`	USDC
Base Sepolia	`eip155:84532`	USDC
Solana Mainnet	`solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp`	USDC
Solana Devnet	`solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1`	USDC

Common Errors

Error	Solution
404/405 on signing	Use `/api/wallets/{USERNAME}/actions/x402/pay` (slash not dash)
`blank argument`	Use single-line curl, not multiline with `\`
`AlreadyProcessed`	Get a NEW signature for each request
`insufficient_funds`	Fund wallet at `https://frames.ag/u/USERNAME`

Policies

Get current policy:

bash

curl https://frames.ag/api/wallets/YOUR_USERNAME/policy \
  -H "Authorization: Bearer FUND_API_TOKEN"

Update policy:

bash

curl -X PATCH https://frames.ag/api/wallets/YOUR_USERNAME/policy \
  -H "Authorization: Bearer FUND_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"max_per_tx_usd":"25","allow_chains":["base","solana"],"allow_contracts":["0x..."]}'

Response Format

Success:

json

{"success": true, "data": {...}}

Error:

json

{"success": false, "error": "Description", "hint": "How to fix"}

Agent Wallet

Install

AgentWallet

TL;DR - Quick Reference

x402/fetch - ONE-STEP PAYMENT PROXY (RECOMMENDED)

x402/fetch Request Options

Dry Run (Preview Cost)

Error Codes

Config File Reference

Connect Flow

Referral & Airdrop Program

Network Pulse

Skill Files

Heartbeat

Authentication

Funding Wallets

Wallet Operations

Actions (Policy Controlled)

EVM Transfer

Solana Transfer

EVM Contract Call

Sign Message

Solana Devnet Faucet

x402 Manual Flow (Advanced)

Protocol Versions

Flow

Sign Request Options

Key Rules

Supported Networks

Common Errors

Policies

Response Format

Related skills