MoonPay Commerce (Helio) Accept Crypto Payments

Accept crypto payments on Solana via MoonPay Commerce (formerly Helio). Create Pay Links, generate checkout URLs, check transactions, and list supported currencies. Use when the user wants to accept crypto payments, create payment links, charge for products/services with crypto, or query payment transactions. Requires a MoonPay Commerce account with API key and secret.

Security Scan

The skill's code, instructions, and required credentials are coherent with its stated purpose (MoonPay Commerce / Helio payment operations); it only needs API key/secret and uses curl/jq to call the documented API endpoints and save credentials locally.

Purpose & Capability

Name/description, declared env vars (HELIO_API_KEY, HELIO_API_SECRET), required binaries (curl, jq), referenced endpoints (api.hel.io, app.hel.io), and included helper scripts all align with a MoonPay Commerce / Helio merchant helper for creating pay links, charges, and querying transactions.

Instruction Scope

SKILL.md instructs the agent to run the provided setup and helper scripts and to call the documented Helio API endpoints. The scripts only read/write a local config (~/.mpc/helio/config), read the declared env vars, and call api.hel.io; they do not attempt to read unrelated system files or send data to unexpected external endpoints.

Install Mechanism

No install spec is present (instruction-only), so nothing arbitrary is downloaded or executed during install. The included scripts live in the skill bundle and are plain shell scripts — no network-based install or third-party archive extraction was requested.

Credentials

Only the two credentials required by the Helio API are requested (API key and secret). The number and type of env vars are proportional to the skill's functionality and are referenced consistently by the scripts and SKILL.md.

Persistence & Privilege

The setup script persistently saves credentials to ~/.mpc/helio/config with chmod 600 and performs ownership/permission checks; this is expected for a merchant CLI. The skill is not forced always-on and does not modify other skills or system-wide settings.

Assessment

This skill appears to do what it says: it calls the official Helio (MoonPay Commerce) API and stores your API key/secret locally in ~/.mpc/helio/config (saved with mode 600 by the setup script). Before installing or running: (1) review the two scripts yourself to confirm comfort with saving credentials to your home directory; (2) do not paste API secrets into chat — use the interactive setup script which prompts locally; (3) verify network access is only to api.hel.io/app.hel.io (the scripts call those endpoints); (4) if you prefer not to persist credentials, you can export HELIO_API_KEY/HELIO_API_SECRET in your session and avoid running the setup save step. Overall the files are coherent and proportionate to the stated purpose.

MPC Accept Crypto Payments

Merchant-side skill for accepting crypto payments on Solana via MoonPay Commerce (formerly Helio).

Setup

Run the setup script with your API credentials (wallet ID is fetched automatically):

bash scripts/setup.sh

You'll need:

• API Key — from https://app.hel.io → Settings → API Keys
• API Secret — from the same page (save it when generated)

The setup script will:

1. Validate your credentials against the API
2. Fetch your Solana wallets automatically
3. Select the PAYOUT wallet (or CONNECTED if no PAYOUT exists)
4. Save everything to ~/.mpc/helio/config

If the user doesn't have an account, direct them to https://app.hel.io to sign up.

Config Management

bash scripts/setup.sh status   # Show current config
bash scripts/setup.sh clear    # Remove saved credentials

Quick Reference

Base URL: https://api.hel.io/v1

List Supported Currencies (no auth needed)

curl -s https://api.hel.io/v1/currency | jq '.[].symbol'

Create a Pay Link

curl -s -X POST "https://api.hel.io/v1/paylink/create/api-key?apiKey=$HELIO_API_KEY" \
  -H "Authorization: Bearer $HELIO_API_SECRET" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "My Payment",
    "template": "OTHER",
    "pricingCurrency": "<CURRENCY_ID>",
    "price": "<AMOUNT_IN_BASE_UNITS>",
    "features": {
      "canChangePrice": false,
      "canChangeQuantity": false,
      "canSwapTokens": true
    },
    "recipients": [{
      "currencyId": "<CURRENCY_ID>",
      "walletId": "<YOUR_WALLET_ID>"
    }]
  }'

Defaults: Currency is USDC (6340313846e4f91b8abc519b). Token swapping is enabled so payers can pay with any supported Solana token (auto-converted to USDC).

Price format: price is in base units (int64 string). For USDC (6 decimals): "1000000" = 1 USDC. For SOL (9 decimals): "1000000000" = 1 SOL.

Create a Charge (Checkout URL)

curl -s -X POST "https://api.hel.io/v1/charge/api-key?apiKey=$HELIO_API_KEY" \
  -H "Authorization: Bearer $HELIO_API_SECRET" \
  -H "Content-Type: application/json" \
  -d '{"paymentRequestId": "<PAYLINK_ID>"}'

Returns { "id": "...", "pageUrl": "https://..." } — share pageUrl with the payer.

Check Transactions

curl -s "https://api.hel.io/v1/paylink/<PAYLINK_ID>/transactions?apiKey=$HELIO_API_KEY" \
  -H "Authorization: Bearer $HELIO_API_SECRET"

Disable / Enable a Pay Link

curl -s -X PATCH "https://api.hel.io/v1/paylink/<PAYLINK_ID>/disable?apiKey=$HELIO_API_KEY&disabled=true" \
  -H "Authorization: Bearer $HELIO_API_SECRET"

Helper Script

# Setup (run first)
bash scripts/setup.sh

# Operations
bash scripts/helio.sh currencies
bash scripts/helio.sh create-paylink "Coffee" 5.00 USDC
bash scripts/helio.sh charge <paylink-id>
bash scripts/helio.sh transactions <paylink-id>
bash scripts/helio.sh disable <paylink-id>
bash scripts/helio.sh enable <paylink-id>

Templates

The template field controls Pay Link type:

• OTHER — generic payment
• PRODUCT — physical/digital product
• INVOICE — invoice
• SUBSCRIPTION — recurring (requires subscriptionDetails)
• EVENT — event ticket

Credential Handling

When setting up credentials, run the setup script interactively:

bash scripts/setup.sh

The script prompts for credentials directly in the terminal — they are never stored in chat history or logs. Credentials are saved to ~/.mpc/helio/config (mode 600).

Advanced

• Full API schema details: see references/api-reference.md
• OpenAPI spec: https://api.hel.io/v1/docs-json
• Dashboard: https://app.hel.io
• Docs: https://docs.hel.io