@clawpump/claw-agent 0.1.1 → 0.1.3

package/agent/hermes_cli/runtime_provider.py

@@ -368,6 +368,19 @@ def _resolve_runtime_from_pool_entry(
         # For Anthropic-style endpoints, strip /v1 suffix
         if api_mode == "anthropic_messages":
             base_url = re.sub(r"/v1/?$", "", base_url)
+    elif provider == "usepod":
+        # UsePod authenticates by the token in the URL path, so the pool
+        # entry's base_url is only the proxy root — derive the real per-token
+        # base URL from the resolved key. A config base_url or USEPOD_BASE_URL
+        # (self-hosted gateway) still wins.
+        from hermes_cli.auth import _resolve_usepod_base_url
+        cfg_provider = str(model_cfg.get("provider") or "").strip().lower()
+        cfg_base_url = ""
+        if cfg_provider == "usepod":
+            cfg_base_url = str(model_cfg.get("base_url") or "").strip().rstrip("/")
+        env_override = os.getenv("USEPOD_BASE_URL", "").strip()
+        base_url = cfg_base_url or _resolve_usepod_base_url(api_key, env_override).rstrip("/")
+        api_mode = "chat_completions"
     else:
         configured_provider = str(model_cfg.get("provider") or "").strip().lower()
         # Honour model.base_url from config.yaml when the configured provider
@@ -1165,6 +1178,11 @@ def _resolve_explicit_runtime(
             if provider in {"kimi-coding", "kimi-coding-cn"}:
                 creds = resolve_api_key_provider_credentials(provider)
                 base_url = creds.get("base_url", "").rstrip("/")
+            elif provider == "usepod":
+                # UsePod embeds the token in the URL path; defer base_url until
+                # the token is resolved below so it always reflects the current
+                # key (covers explicit --api-key overrides too).
+                base_url = ""
             else:
                 base_url = env_url or pconfig.inference_base_url
 
@@ -1175,6 +1193,12 @@ def _resolve_explicit_runtime(
             if not base_url:
                 base_url = creds.get("base_url", "").rstrip("/")
 
+        if provider == "usepod" and not explicit_base_url:
+            # Derive the proxy base URL from the resolved token. An explicit
+            # --base-url (or USEPOD_BASE_URL, carried via env_url) still wins.
+            from hermes_cli.auth import _resolve_usepod_base_url
+            base_url = _resolve_usepod_base_url(api_key, env_url).rstrip("/")
+
         api_mode = "chat_completions"
         if provider == "copilot":
             api_mode = _copilot_runtime_api_mode(model_cfg, api_key)

package/agent/hermes_cli/skin_engine.py

@@ -196,87 +196,6 @@ _BUILTIN_SKINS: Dict[str, Dict[str, Any]] = {
         },
         "tool_prefix": "┊",
     },
-    "clawpump": {
-        "name": "clawpump",
-        "description": "ClawPump — Solana green, claw mark (built on Hermes)",
-        "colors": {
-            "banner_border": "#16A34A",
-            "banner_title": "#4ADE80",
-            "banner_accent": "#22C55E",
-            "banner_dim": "#15803D",
-            "banner_text": "#DCFCE7",
-            "ui_accent": "#22C55E",
-            "ui_label": "#4ADE80",
-            "ui_ok": "#22C55E",
-            "ui_error": "#ef5350",
-            "ui_warn": "#ffa726",
-            "prompt": "#DCFCE7",
-            "input_rule": "#16A34A",
-            "response_border": "#4ADE80",
-            "status_bar_bg": "#0B1F14",
-            "status_bar_text": "#DCFCE7",
-            "status_bar_strong": "#4ADE80",
-            "status_bar_dim": "#3F6B50",
-            "status_bar_good": "#22C55E",
-            "status_bar_warn": "#FACC15",
-            "status_bar_bad": "#F59E0B",
-            "status_bar_critical": "#EF5350",
-            "session_label": "#4ADE80",
-            "session_border": "#3F6B50",
-            "selection_bg": "#14532D",
-            "completion_menu_bg": "#06140C",
-            "completion_menu_current_bg": "#14532D",
-            "completion_menu_meta_bg": "#0B1F14",
-            "completion_menu_meta_current_bg": "#14532D",
-        },
-        "spinner": {
-            "waiting_faces": ["(◴)", "(◷)", "(◶)", "(◵)", "(<>)"],
-            "thinking_faces": ["(✦)", "(◇)", "(◈)", "(⌁)", "(<>)"],
-            "thinking_verbs": [
-                "pumping", "launching", "scanning the mints", "routing the swap",
-                "reading the chart", "minting", "snapping the claw", "checking liquidity",
-            ],
-            "wings": [
-                ["⟪◇", "◇⟫"],
-                ["⟪✦", "✦⟫"],
-                ["⟪>", "<⟫"],
-                ["⟪◈", "◈⟫"],
-            ],
-        },
-        "branding": {
-            "agent_name": "ClawPump",
-            "org": "ClawPump",
-            "credit": "built on Hermes ☤ by Nous Research",
-            "welcome": "Welcome to ClawPump 🦀 — Solana agents, trading & token launch. Type your message or /help for commands.",
-            "goodbye": "Claws out! 🦀",
-            "response_label": " ✦ ClawPump ",
-            "prompt_symbol": "❯",
-            "help_header": "(✦) Available Commands",
-        },
-        "tool_prefix": "┊",
-        "banner_logo": """[bold #86EFAC] ██████╗██╗      █████╗ ██╗    ██╗██████╗ ██╗   ██╗███╗   ███╗██████╗ [/]
-[bold #4ADE80]██╔════╝██║     ██╔══██╗██║    ██║██╔══██╗██║   ██║████╗ ████║██╔══██╗[/]
-[#22C55E]██║     ██║     ███████║██║ █╗ ██║██████╔╝██║   ██║██╔████╔██║██████╔╝[/]
-[#16A34A]██║     ██║     ██╔══██║██║███╗██║██╔═══╝ ██║   ██║██║╚██╔╝██║██╔═══╝ [/]
-[#15803D]╚██████╗███████╗██║  ██║╚███╔███╔╝██║     ╚██████╔╝██║ ╚═╝ ██║██║     [/]
-[#166534] ╚═════╝╚══════╝╚═╝  ╚═╝ ╚══╝╚══╝ ╚═╝      ╚═════╝ ╚═╝     ╚═╝╚═╝     [/]""",
-        "banner_hero": """[#86EFAC]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠠⣀⣂⣤⣤⣤⣤⣤⣤⠄[/]
-[#7EE5A4]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣢⣵⣾⣿⣿⣿⣿⣿⣿⣿⡿⠃⠀[/]
-[#77DA9B]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣴⠿⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠟⠀⠀⠀[/]
-[#6FD093]⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣾⠟⠁⢀⣼⣿⣿⣿⣿⣿⣿⣿⡿⠀⠀⠀⠀⠀[/]
-[#68C58A]⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣜⡿⠁⢀⣴⣿⣿⣿⣿⣿⣿⣿⣿⣿⠗⠀⠀⠀⠀⠀[/]
-[#60BB82]⠀⠀⠀⠀⠀⠀⠀⠀⢀⣮⣿⣇⣴⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠁⠀⠀⠀⠀⠀⠀[/]
-[#58B179]⠀⠀⠀⠀⠀⠀⠀⢠⣿⣿⠃⣸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀⠀⠀⠀⠀⠀⠀[/]
-[#51A671]⠀⠀⠀⠀⠀⠀⢀⣾⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠃⠀⠀⠀⠀⠀⠀⠀[/]
-[#499C68]⠀⠀⠀⠀⠀⠀⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠿⠋⠀⠀⠀⠀⠀⠀⠀⠀⠀[/]
-[#429160]⠀⠀⠀⠀⠀⣀⣈⡙⠻⢿⣿⣿⣿⣿⣿⣿⡿⠋⣡⣤⣤⠀⠀⠀⠀⠀⠐⢀⣠⣴[/]
-[#3A8757]⠀⠀⠀⢀⣞⣿⠟⠉⣷⣦⣌⠙⢿⣿⣿⣿⣠⣾⣿⣿⣿⣷⣷⣶⣶⣶⣿⣿⣿⠃[/]
-[#327D4F]⠀⠀⣀⣉⡛⠳⢴⣾⣿⣿⣿⣷⣄⠹⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠁⠀[/]
-[#2B7246]⢠⣞⣿⡟⣩⣿⣶⣌⠻⢿⣿⣿⣿⣆⠘⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠋⠀⠀⠀[/]
-[#23683E]⠀⠉⠙⠻⢿⣿⣿⣿⣷⣄⠻⣿⣿⣿⡀⠹⢿⣿⣿⣿⣿⠿⠟⠋⠁⠀⠀⠀⠀⠀[/]
-[#1C5D35]⠀⠀⠀⠀⠀⠈⠻⣿⣿⣿⣆⠹⣿⠟⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/]
-[#14532D]⠀⠀⠀⠀⠀⠀⠀⠘⢿⣿⠟⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀[/]""",
-    },
     "ares": {
         "name": "ares",
         "description": "War-god theme — crimson and bronze",
@@ -730,8 +649,21 @@ _BUILTIN_SKINS: Dict[str, Dict[str, Any]] = {
 # Skin loading and management
 # =============================================================================
 
+# -- ClawPump distribution overlay (downstream) ---------------------------
+# Pull ClawPump's skins + default-skin name from the downstream-owned
+# overlay so this upstream-owned file stays mergeable. Falls back to
+# vanilla Hermes ("default") when the overlay module is absent.
+try:
+    from hermes_cli.distribution import (
+        BUILTIN_SKINS as _DIST_SKINS,
+        DEFAULT_SKIN as _DISTRIBUTION_DEFAULT_SKIN,
+    )
+    _BUILTIN_SKINS.update(_DIST_SKINS)
+except Exception:
+    _DISTRIBUTION_DEFAULT_SKIN = "default"
+
 _active_skin: Optional[SkinConfig] = None
-_active_skin_name: str = "clawpump"
+_active_skin_name: str = _DISTRIBUTION_DEFAULT_SKIN
 
 
 def _skins_dir() -> Path:
@@ -856,8 +788,23 @@ def get_active_skin() -> SkinConfig:
 
 
 def set_active_skin(name: str) -> SkinConfig:
-    """Switch the active skin. Returns the new SkinConfig."""
+    """Switch the active skin. Returns the new SkinConfig.
+
+    In a downstream distribution (e.g. ClawPump) the built-in ``default`` skin
+    name resolves to the distribution's own skin, so users who have
+    ``display.skin: default`` persisted in config — or who pick ``default``
+    interactively via ``/skin`` — get the distribution brand instead of vanilla
+    Hermes. The remap happens here, at the single activation chokepoint, rather
+    than by overwriting ``_BUILTIN_SKINS["default"]``: that entry is also the
+    base from which every *other* skin inherits unset keys (see
+    ``_build_skin_config``), so replacing it would bleed the distribution's
+    colors into unrelated skins. ``load_skin("default")`` therefore still
+    returns the untouched vanilla base. Degrades to a no-op on vanilla Hermes,
+    where ``_DISTRIBUTION_DEFAULT_SKIN == "default"``.
+    """
     global _active_skin, _active_skin_name
+    if name == "default" and _DISTRIBUTION_DEFAULT_SKIN != "default":
+        name = _DISTRIBUTION_DEFAULT_SKIN
     _active_skin_name = name
     _active_skin = load_skin(name)
     return _active_skin
@@ -876,11 +823,11 @@ def init_skin_from_config(config: dict) -> None:
     display = config.get("display") or {}
     if not isinstance(display, dict):
         display = {}
-    skin_name = display.get("skin", "clawpump")
+    skin_name = display.get("skin", _DISTRIBUTION_DEFAULT_SKIN)
     if isinstance(skin_name, str) and skin_name.strip():
         set_active_skin(skin_name.strip())
     else:
-        set_active_skin("clawpump")
+        set_active_skin(_DISTRIBUTION_DEFAULT_SKIN)
 
 
 # =============================================================================

package/agent/optional-mcps/clawpump/manifest.yaml

@@ -3,7 +3,7 @@
 manifest_version: 1
 
 name: clawpump
-description: ClawPump — Solana AI agents, trading, perps, DCA, token launch, marketplace, lending, predictions, market intelligence (104 tools).
+description: ClawPump — Solana AI agents, trading, perps, DCA, token launch, marketplace, lending, predictions, gift cards, agent mail, x402 paid APIs, market intelligence (131 tools).
 source: https://mcp.clawpump.tech
 
 # ClawPump ships a remote MCP server: Streamable HTTP + native OAuth 2.1 +
@@ -29,11 +29,13 @@ auth:
   # first probe / first connect.
 
 # Tool selection at install time.
-# ClawPump exposes 104 tools; 28 of them move real funds or are irreversible
+# ClawPump exposes 131 tools; 37 of them move real funds or are irreversible
 # (perps orders, swaps, DCA/limit orders, lending deposit/withdraw, prediction
-# positions, marketplace bids, external-wallet changes, token launches).
+# positions, marketplace bids, external-wallet changes, wallet transfers,
+# token launches, gift-card purchases/withdrawals, agent-mail
+# provisioning/sending, x402 paid-API execution).
 # Hermes does NOT auto-gate MCP tools by their destructiveHint, so we ship a
-# read-mostly default: the 76 safe tools below are pre-checked in the install
+# read-mostly default: the 94 safe tools below are pre-checked in the install
 # checklist (and applied directly if the server can't be probed before auth).
 # Users opt into the financial tools per their threat model in the checklist,
 # or later with `hermes mcp configure clawpump`.
@@ -54,6 +56,23 @@ tools:
     - upload_agent_avatar
     - get_agent_asset_url
     - list_available_skills
+    # agent cards (Laso — reads / linking / quotes; purchase & withdraw are opt-in)
+    - agent_card_list
+    - agent_card_get
+    - agent_card_status
+    - agent_card_balance
+    - agent_card_data
+    - agent_card_withdrawals
+    - agent_card_quote
+    - agent_card_refresh
+    - agent_card_search_gift_cards
+    - agent_card_search_merchants
+    - agent_card_connect
+    - agent_card_connect_link
+    # agent mail (reads; inbox provisioning & sending are opt-in)
+    - agent_mail_get_address
+    - agent_mail_list
+    - agent_mail_read
     # automations
     - list_automations
     - get_automation
@@ -95,6 +114,10 @@ tools:
     - get_my_bids
     - get_received_bids
     - get_marketplace_history
+    # pay.sh x402 (catalog / pricing / approval prep — paid execution is opt-in)
+    - pay_sh_search
+    - pay_sh_provider_details
+    - pay_sh_prepare_call
     # perps (read / preview only)
     - perps_markets
     - perps_market_data
@@ -143,8 +166,12 @@ post_install: |
 
   FINANCIAL / IRREVERSIBLE TOOLS are OFF by default (perps_*, swap_execute,
   dca_create, limit_order_create, jup_lend_deposit/withdraw, predictions_open/
-  close, place_bid / accept_marketplace_bid, set_external_wallet, and the
-  token-launch tools). Several require confirmRisk=true / confirm_launch=true.
+  close, place_bid / accept_marketplace_bid, set_external_wallet,
+  wallet_transfer, agent_card_create/cancel/reveal/withdraw,
+  agent_mail_create/send, pay_sh_execute_approved, and the token-launch
+  tools). Several require explicit confirm flags (confirmRisk,
+  confirm_launch, confirm_spend, confirm_send, confirm_transfer,
+  confirm_payment, …).
   Enable the ones you want and review every call:
     hermes mcp configure clawpump
 

package/agent/optional-mcps/clawpump-stdio/manifest.yaml

@@ -3,7 +3,7 @@
 manifest_version: 1
 
 name: clawpump-stdio
-description: ClawPump (stdio) — the same 104 tools via the npm package, authed with a cpk_* API key (no browser).
+description: ClawPump (stdio) — the same 131 tools via the npm package, authed with a cpk_* API key (no browser).
 source: https://www.npmjs.com/package/@clawpump/agents
 
 # Same tool surface as the `clawpump` remote entry, but run locally over stdio
@@ -31,8 +31,8 @@ auth:
       secret: false
       default: ""
 
-# Same read-mostly default as the remote `clawpump` entry: 76 safe tools
-# pre-checked; the 28 financial/irreversible tools are opt-in. See the
+# Same read-mostly default as the remote `clawpump` entry: 94 safe tools
+# pre-checked; the 37 financial/irreversible tools are opt-in. See the
 # `clawpump` manifest for the rationale (Hermes does not auto-gate MCP tools
 # by destructiveHint).
 tools:
@@ -52,6 +52,23 @@ tools:
     - upload_agent_avatar
     - get_agent_asset_url
     - list_available_skills
+    # agent cards (Laso — reads / linking / quotes; purchase & withdraw are opt-in)
+    - agent_card_list
+    - agent_card_get
+    - agent_card_status
+    - agent_card_balance
+    - agent_card_data
+    - agent_card_withdrawals
+    - agent_card_quote
+    - agent_card_refresh
+    - agent_card_search_gift_cards
+    - agent_card_search_merchants
+    - agent_card_connect
+    - agent_card_connect_link
+    # agent mail (reads; inbox provisioning & sending are opt-in)
+    - agent_mail_get_address
+    - agent_mail_list
+    - agent_mail_read
     # automations
     - list_automations
     - get_automation
@@ -93,6 +110,10 @@ tools:
     - get_my_bids
     - get_received_bids
     - get_marketplace_history
+    # pay.sh x402 (catalog / pricing / approval prep — paid execution is opt-in)
+    - pay_sh_search
+    - pay_sh_provider_details
+    - pay_sh_prepare_call
     # perps (read / preview only)
     - perps_markets
     - perps_market_data

package/agent/plugins/model-providers/usepod/__init__.py

@@ -0,0 +1,100 @@
+"""UsePod provider profile.
+
+UsePod (usepod.ai) is a drop-in OpenAI- and Anthropic-compatible inference
+marketplace.  Independent operators serve open-weight models (or relay their
+own upstream keys) and centralized providers stay available as a fallback;
+billing is pay-per-request, settled in USDC from a per-token balance.
+
+Unlike a normal API-key provider, UsePod authenticates by the token embedded
+in the request *path* (``/proxy/<token>/v1/...``) and ignores the
+Authorization header.  The base URL is therefore DERIVED from the API key
+rather than being static — see ``hermes_cli.auth._resolve_usepod_base_url`` and
+the ``usepod`` branches in ``resolve_api_key_provider_credentials`` /
+``get_api_key_provider_status`` (auth.py) and ``_resolve_explicit_runtime``
+(runtime_provider.py).
+
+The net effect for the user: they only paste the token they obtained from
+``POST https://api.usepod.ai/v1/register`` (and funded on https://usepod.ai/fund)
+— the proxy URL is built for them.  An explicit ``USEPOD_BASE_URL`` env var
+still wins, e.g. for a self-hosted UsePod gateway.
+"""
+
+from __future__ import annotations
+
+import json
+import logging
+import urllib.request
+
+from providers import register_provider
+from providers.base import ProviderProfile, _profile_user_agent
+
+logger = logging.getLogger(__name__)
+
+# Production gateway host. The token-bearing inference base URL is
+# ``{USEPOD_API_BASE}/proxy/<token>/v1``; the catalog is
+# ``{USEPOD_API_BASE}/proxy/<token>/v1/models``.
+USEPOD_API_BASE = "https://api.usepod.ai"
+
+
+class UsePodProfile(ProviderProfile):
+    """UsePod — OpenAI-compatible proxy with the auth token in the URL path."""
+
+    def fetch_models(self, *, api_key: str | None = None, timeout: float = 8.0):
+        """List models from the per-token catalog endpoint.
+
+        UsePod exposes ``/proxy/<token>/v1/models``; the token lives in the
+        path, so the base-class implementation (which builds the URL from the
+        static ``base_url``) cannot reach it. Returns None when no token is
+        available so callers fall back to ``fallback_models``.
+        """
+        token = (api_key or "").strip()
+        if not token:
+            return None
+        url = f"{USEPOD_API_BASE}/proxy/{token}/v1/models"
+        req = urllib.request.Request(url)
+        # Harmless — UsePod ignores it (auth is the path token) — but send it
+        # for parity with standard OpenAI clients / intermediaries.
+        req.add_header("Authorization", f"Bearer {token}")
+        req.add_header("Accept", "application/json")
+        req.add_header("User-Agent", _profile_user_agent())
+        try:
+            with urllib.request.urlopen(req, timeout=timeout) as resp:
+                data = json.loads(resp.read().decode())
+            items = data if isinstance(data, list) else data.get("data", [])
+            return [m["id"] for m in items if isinstance(m, dict) and "id" in m]
+        except Exception as exc:
+            logger.debug("fetch_models(usepod): %s", exc)
+            return None
+
+
+usepod = UsePodProfile(
+    name="usepod",
+    # USEPOD_API_KEY = the token (paste-in). USEPOD_BASE_URL = optional override
+    # for self-hosted gateways; the registry auto-maps the *_BASE_URL var to the
+    # base_url override env var.
+    env_vars=("USEPOD_API_KEY", "USEPOD_BASE_URL"),
+    display_name="UsePod",
+    description="UsePod (drop-in OpenAI-compatible inference marketplace, pay-per-use in USDC)",
+    signup_url="https://usepod.ai",
+    # Non-empty so the picker + live-fetch plumbing engages; the *effective*
+    # inference URL is derived per-token (see module docstring). hostname pins
+    # the URL→provider reverse mapping to api.usepod.ai.
+    base_url=f"{USEPOD_API_BASE}/proxy",
+    hostname="api.usepod.ai",
+    # The token is in the URL path, so doctor's static /models probe (built from
+    # base_url) can't reach the per-token catalog. Skip it — key presence is the
+    # meaningful "configured" signal for this provider.
+    supports_health_check=False,
+    # Best-effort offline picker list — UsePod's real catalog is dynamic and is
+    # fetched live from /proxy/<token>/v1/models whenever a key is present.
+    fallback_models=(
+        "claude-opus-4-8",
+        "claude-sonnet-4-6",
+        "gpt-5.5",
+        "deepseek-v4",
+        "glm-4-7",
+        "kimi-k2.5",
+    ),
+)
+
+register_provider(usepod)

package/agent/plugins/model-providers/usepod/plugin.yaml

@@ -0,0 +1,5 @@
+name: usepod-provider
+kind: model-provider
+version: 1.0.0
+description: UsePod (drop-in OpenAI-compatible inference marketplace)
+author: "@0xgilbert"

package/agent/scripts/release.py

@@ -45,6 +45,7 @@ ACP_REGISTRY_MANIFEST = REPO_ROOT / "acp_registry" / "agent.json"
 
 # Auto-extracted from noreply emails + manual overrides
 AUTHOR_MAP = {
+    "chris@100x.dev": "chris-gilbert",
     "ben.bartholomew@vectorize.io": "benfrank241",
     "74339271+SaguaroDev@users.noreply.github.com": "SaguaroDev",
     "subw3@mail2.sysu.edu.cn": "Subway2023",

package/agent/skills/clawpump/SKILL.md

@@ -1,20 +1,21 @@
 ---
 name: clawpump
-description: "ClawPump on Solana — create/chat with agents, trade, perps, DCA, lend, launch tokens, marketplace, predictions, intelligence via mcp_clawpump_* tools. Use when the user mentions ClawPump, launching a token, an agent's wallet/balance, swaps, perps, or DeFi on Solana."
-version: 1.0.0
+description: "ClawPump on Solana — create/chat with agents, trade, perps, DCA, lend, launch tokens, marketplace, predictions, gift cards, agent email, intelligence via mcp_clawpump_* tools. Use when the user mentions ClawPump, launching a token, an agent's wallet/balance, swaps, perps, gift cards, agent email, or DeFi on Solana."
+version: 1.3.0
 platforms: [linux, macos, windows]
 metadata:
   hermes:
-    tags: [clawpump, solana, defi, trading, perps, dca, lending, token-launch, marketplace, predictions, agents, mcp]
-    related_skills: [mcp]
+    tags: [clawpump, solana, defi, trading, perps, dca, lending, token-launch, marketplace, predictions, gift-cards, agent-mail, agents, mcp]
+    related_skills: [mcp, pay-sh]
 ---
 
 # ClawPump
 
 ClawPump is a Solana platform for AI agents: each agent has a wallet and can
-trade, run perps, DCA, lend, launch tokens, and be bought/sold on a
-marketplace. Its full feature set reaches Hermes through the **ClawPump MCP
-server** (104 tools, 10 resources, 10 prompts).
+trade, run perps, DCA, lend, launch tokens, buy gift cards, send email from
+its own inbox, and be bought/sold on a marketplace. Its full feature set
+reaches Hermes through the **ClawPump MCP server** (131 tools, 10 resources,
+10 prompts).
 
 ## Enabling ClawPump
 
@@ -43,7 +44,7 @@ Most tools act on a specific agent. Resolve it once with `list_agents`, then
 pass `agent_id`. If the user set `CLAWPUMP_DEFAULT_AGENT` (or has exactly one
 agent), `agent_id` can usually be omitted. When unsure which agent, ask.
 
-## What's available (104 tools, 17 groups)
+## What's available (131 tools, 20 groups)
 
 | Group | Representative tools |
 |-------|----------------------|
@@ -53,19 +54,22 @@ agent), `agent_id` can usually be omitted. When unsure which agent, ask.
 | Custom skills | `list_custom_skills`, `get_custom_skill`, `create_custom_skill`, `update_custom_skill`, `delete_custom_skill` |
 | Trading | `swap_quote`, `swap_execute`, `token_search`, `get_portfolio`, `get_price`, `get_market_signals`, `get_indicators`, `arbitrage_quote`/`arbitrage_prices` |
 | DCA / limits | `dca_create`, `dca_list`, `dca_cancel`, `limit_order_create`, `limit_order_cancel`, `limit_order_history` |
-| Phoenix perps | `perps_markets`, `perps_market_data`, `perps_account`, `perps_account_prepare`, `perps_trader_register`, `perps_collateral_deposit`, `perps_order_preview`, `perps_order_execute`, `perps_order_cancel` |
+| Phoenix perps | `perps_markets`, `perps_market_data`, `perps_account`, `perps_account_prepare`, `perps_trader_register`, `perps_collateral_deposit`, `perps_collateral_withdraw`, `perps_order_preview`, `perps_order_execute`, `perps_order_cancel` |
 | Lending (Jupiter) | `jup_lend_tokens`, `jup_lend_positions`, `jup_lend_deposit`, `jup_lend_withdraw` |
 | Predictions | `predictions_events`, `predictions_positions`, `predictions_open`, `predictions_close` |
 | Token launch | `get_launch_status`, `launch_token_gasless`, `launch_metaplex_genesis_token` |
 | Marketplace | `browse_marketplace`, `create_marketplace_listing`, `delist_marketplace_listing`, `browse_public_agents`, `place_bid`, `get_my_bids`, `get_received_bids`, `accept_marketplace_bid`, `reject_marketplace_bid`, `withdraw_marketplace_bid`, `get_marketplace_history` |
-| Wallet & billing | `get_balance`, `get_budget`, `get_usage`, `get_transactions`, `get_wallet_summaries`, `get_wallet_history`, `get_private_wallet_balance`, `get_balance_history`, `sync_billing` |
+| Agent cards (Laso) | `agent_card_search_merchants`, `agent_card_search_gift_cards`, `agent_card_quote`, `agent_card_create`, `agent_card_list`, `agent_card_get`, `agent_card_status`, `agent_card_data`, `agent_card_balance`, `agent_card_reveal`, `agent_card_cancel`, `agent_card_refresh`, `agent_card_withdraw`, `agent_card_withdrawals`, `agent_card_connect`, `agent_card_connect_link` |
+| Agent mail | `agent_mail_create`, `agent_mail_get_address`, `agent_mail_send`, `agent_mail_list`, `agent_mail_read` |
+| Pay.sh x402 (agent-wallet paid APIs) | `pay_sh_search`, `pay_sh_provider_details`, `pay_sh_prepare_call`, `pay_sh_execute_approved` |
+| Wallet & billing | `get_balance`, `get_budget`, `get_usage`, `get_transactions`, `get_wallet_summaries`, `get_wallet_history`, `get_private_wallet_balance`, `get_balance_history`, `sync_billing`, `wallet_transfer` |
 | Market intelligence | `intelligence_capabilities`, `intelligence_market`, `intelligence_signals`, `intelligence_macro`, `intelligence_perps` |
 | Integrations | `list_integrations`, `save_integration`, `remove_integration`, `get_linked_accounts` |
 | Account | `get_account_status`, `connect_twitter`, `configure_twitter_posting`, `set_external_wallet`, `generate_link_code`, `link_google_account`, `get_dashboard_urls` |
 | Whitelist | `get_whitelist`, `add_to_whitelist`, `remove_from_whitelist` |
 | Utility | `get_model_catalog`, `get_news_feed` |
 
-By default only the **76 read-mostly** tools are enabled. The financial ones
+By default only the **94 read-mostly** tools are enabled. The financial ones
 below are opt-in via `hermes mcp configure clawpump`.
 
 ## ⚠️ FINANCIAL & IRREVERSIBLE TOOLS — confirmation is mandatory
@@ -73,20 +77,27 @@ below are opt-in via `hermes mcp configure clawpump`.
 These move real funds on-chain or are irreversible. **Never call them without
 the user's explicit, specific go-ahead in this conversation.** Quote the exact
 action (amounts, token, agent) and wait for a clear yes. Several require an
-explicit confirm flag (e.g. `confirmRisk: true`, `confirm_launch: true`) — only
-set it after the user agrees.
+explicit confirm flag (e.g. `confirmRisk: true`, `confirm_launch: true`,
+`confirm_spend: true`, `confirm_send: true`, `confirm_transfer: true`,
+`confirm_payment: true`) — only set it after the user agrees.
 
 - Trading: `swap_execute`, `dca_create`, `dca_cancel`, `limit_order_create`, `limit_order_cancel`
-- Perps: `perps_account_prepare`, `perps_trader_register`, `perps_collateral_deposit`, `perps_order_execute`, `perps_order_cancel`
+- Perps: `perps_account_prepare`, `perps_trader_register`, `perps_collateral_deposit`, `perps_collateral_withdraw`, `perps_order_execute`, `perps_order_cancel`
 - Lending: `jup_lend_deposit`, `jup_lend_withdraw`
 - Predictions: `predictions_open`, `predictions_close`
 - Marketplace (funds/ownership): `place_bid`, `accept_marketplace_bid`, `reject_marketplace_bid`, `withdraw_marketplace_bid`, `delist_marketplace_listing`
 - Token launch: `launch_token_gasless`, `launch_metaplex_genesis_token`
 - Account / lifecycle: `set_external_wallet`, `delete_agent`, `delete_automation`, `delete_custom_skill`, `cancel_agent_run`, `remove_integration`, `remove_from_whitelist`
+- Agent cards (Laso): `agent_card_create` (pays USDC from the agent wallet — quote first), `agent_card_withdraw`, `agent_card_cancel`, `agent_card_reveal` (exposes the card number / redemption secret)
+- Agent mail: `agent_mail_create` (one-time ~$2 USDC from the agent wallet), `agent_mail_send` (outward-facing email; paid per send via x402 from the agent wallet)
+- Wallet: `wallet_transfer` (irreversible on-chain send; destination must be on the agent's whitelist via `add_to_whitelist`; quote the exact amount, token, and address, then `confirm_transfer: true`)
+- Pay.sh x402: `pay_sh_execute_approved` (pays USDC from the agent wallet via x402 — always `pay_sh_prepare_call` first; quote the exact endpoint + price; approval codes expire in 10 minutes; requires the `x402` skill on the agent)
 
 **Always get a quote/preview first** (`swap_quote` before `swap_execute`,
-`perps_order_preview` before `perps_order_execute`) and show it to the user
-before executing. Report tx signatures back when a call succeeds.
+`perps_order_preview` before `perps_order_execute`, `agent_card_quote` before
+`agent_card_create`, `pay_sh_prepare_call` before `pay_sh_execute_approved`)
+and show it to the user before executing. Report tx signatures back when a
+call succeeds.
 
 ## Resources (read with the MCP resource reader)
 
@@ -120,3 +131,8 @@ Common patterns:
 - **Launch a token:** `get_launch_status` → confirm details → `launch_token_gasless` (gasless) or `launch_metaplex_genesis_token`.
 - **Check portfolio:** `get_balance` + `get_portfolio` + `get_wallet_summaries`.
 - **Perps:** `perps_markets`/`perps_market_data` → `perps_order_preview` → (confirm) → `perps_order_execute`.
+- **Gift card:** `agent_card_search_merchants`/`agent_card_search_gift_cards` → `agent_card_quote` → (confirm) → `agent_card_create` → `agent_card_status`; `agent_card_reveal` only when the user asks for the card details.
+- **Agent email:** `agent_mail_get_address`; no inbox → (confirm ~$2 USDC) `agent_mail_create`; then `agent_mail_send` (confirm) or `agent_mail_list` → `agent_mail_read`.
+  - **Deliverability (avoid spam):** write genuine, complete messages — a specific subject, a greeting, 2–4 sentences of real purpose, and a sign-off. Never send one-word/empty bodies or test-like "hello": low-content mail from a fresh sender domain is the #1 spam trigger. Do **not** use fake-urgent or deceptive subjects ("IMPORTANT!!", "URGENT") to game filters — that backfires and is deceptive. Tell first-time recipients to mark "Not spam" + add the address to contacts; that trains their inbox fastest.
+- **Fund an external wallet (e.g. a pay.sh allowance):** `get_balance` → `add_to_whitelist` (user-approved address) → (confirm) `wallet_transfer`. See the `pay-sh` skill.
+- **Paid x402 API call (agent wallet pays):** `pay_sh_search` → `pay_sh_provider_details` (price) → `pay_sh_prepare_call` → (confirm price with user) → `pay_sh_execute_approved`. The agent needs the `x402` skill (`update_agent` with `enabled_skills`).

package/agent/skills/pay-sh/SKILL.md

@@ -0,0 +1,66 @@
+---
+name: pay-sh
+description: "Pay.sh / x402 paid APIs paid with the ClawPump agent wallet — search a catalog of pay-per-call services (images, data, email, voice…) and pay per call in USDC straight from the agent's custodial wallet via the ClawPump MCP. Use when the user mentions pay.sh, x402, 402 payments, or paying for an API/service with the agent's funds."
+version: 2.0.0
+platforms: [linux, macos, windows]
+metadata:
+  hermes:
+    tags: [pay-sh, x402, solana, payments, usdc, apis, mcp, clawpump]
+    related_skills: [clawpump, mcp]
+---
+
+# Pay.sh (x402 paid APIs) — paid by the ClawPump wallet
+
+Pay.sh is a catalog of APIs gated by stablecoin payments instead of accounts
+and keys: call an endpoint, get HTTP 402 with a price, pay in USDC, get the
+response. ClawPump pays these **from the agent's own custodial wallet** — there
+is no separate wallet to create or fund.
+
+## Use the ClawPump MCP tools — nothing else
+
+These come from the ClawPump MCP (`mcp_clawpump_*` / `mcp_clawpump-stdio_*`):
+
+- `pay_sh_search` — find providers (free)
+- `pay_sh_provider_details` — endpoints + per-call price for one provider (free)
+- `pay_sh_prepare_call` — balance preflight + payment preview + a 10-minute
+  approval code; **pays nothing**
+- `pay_sh_execute_approved` — pays from the agent wallet via x402 and returns
+  the response; needs the approval code + `confirm_payment: true`
+
+## ⛔ Never do this
+
+- **Do NOT run the `pay` CLI** (`npx @solana/pay …`) — `pay setup`,
+  `pay account new`, `pay topup`, `pay curl`, etc. That creates a *separate
+  local wallet*, which is exactly what we are avoiding. The user wants the
+  **ClawPump agent wallet** to pay.
+- **Do NOT** create, fund, or transfer to any local/external pay wallet for
+  this. No `wallet_transfer` "allowance" hop either.
+- If the ClawPump pay_sh tools are missing, tell the user to enable them
+  (`hermes mcp configure clawpump`, opt in `pay_sh_execute_approved`) and that
+  the agent needs the `x402` skill — do **not** fall back to the CLI.
+
+## Requirement: the `x402` skill
+
+`pay_sh_prepare_call` / `pay_sh_execute_approved` require the ClawPump agent to
+have the **`x402`** skill enabled. If a call is rejected for capability, enable
+it with `update_agent` (`enabled_skills` += `x402`), then retry — never reach
+for the CLI.
+
+## ⚠️ Spending rules
+
+`pay_sh_execute_approved` spends real USDC. Before it:
+
+1. Get the price first — `pay_sh_provider_details` / the `pay_sh_prepare_call`
+   preview include per-call pricing.
+2. Tell the user the exact endpoint and price; wait for a clear yes.
+3. Only then call `pay_sh_execute_approved` with the approval code and
+   `confirm_payment: true`. Never loop paid calls without telling the user the
+   total.
+4. Report what was spent and the result.
+
+## Pattern
+
+`pay_sh_search` → `pay_sh_provider_details` (price) → quote it to the user →
+`pay_sh_prepare_call` → (user approves) → `pay_sh_execute_approved`. All paid
+from the agent's ClawPump wallet. See the `clawpump` skill for the full tool
+reference.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawpump/claw-agent",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "publishConfig": {
     "access": "public"
   },