@cryptoapis-io/mcp-x402-pay 0.2.0 → 0.4.0

package/README.md

@@ -52,6 +52,7 @@ bare name — and exactly one of `address` (any chain; **required for Solana/Kas
 | `method`/`body`/`headers` | | the request to make |
 | `allowedNetworks` | | restrict which CAIP-2 networks to pay on |
 | `maxAmount` | | safety cap — refuse if the required atomic-unit amount exceeds it |
+| `allowedHosts` | | restrict WHICH SITES may be paid, e.g. `["api.acme.com"]` (leading dot = subdomains). A url outside the list is refused **before any network call**. Falls back to `X402_ALLOWED_HOSTS` (comma-separated) — pin it there to keep the allowlist **outside the model's reach** |
 
 Returns `{ status, paid, body, settlement? }`. On a 402 with no acceptable option (or over `maxAmount`),
 `paid:false` with a `reason` — nothing is signed or paid.

package/dist/tools/index.d.ts

@@ -12,6 +12,7 @@ export declare const tools: readonly [import("./types.js").McpX402ToolDef<import
     kaspaKey: import("zod").ZodOptional<import("zod").ZodString>;
     xrpSeed: import("zod").ZodOptional<import("zod").ZodString>;
     allowedNetworks: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
+    allowedHosts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
     buyerBaseUrl: import("zod").ZodOptional<import("zod").ZodString>;
     maxAmount: import("zod").ZodOptional<import("zod").ZodString>;
 }, "strip", import("zod").ZodTypeAny, {
@@ -28,6 +29,7 @@ export declare const tools: readonly [import("./types.js").McpX402ToolDef<import
     kaspaKey?: string | undefined;
     xrpSeed?: string | undefined;
     allowedNetworks?: string[] | undefined;
+    allowedHosts?: string[] | undefined;
     buyerBaseUrl?: string | undefined;
     maxAmount?: string | undefined;
 }, {
@@ -44,6 +46,7 @@ export declare const tools: readonly [import("./types.js").McpX402ToolDef<import
     kaspaKey?: string | undefined;
     xrpSeed?: string | undefined;
     allowedNetworks?: string[] | undefined;
+    allowedHosts?: string[] | undefined;
     buyerBaseUrl?: string | undefined;
     maxAmount?: string | undefined;
 }>>, import("./types.js").McpX402ToolDef<import("zod").ZodObject<{
@@ -61,5 +64,70 @@ export declare const tools: readonly [import("./types.js").McpX402ToolDef<import
     limit?: number | undefined;
     offset?: number | undefined;
     facilitatorBaseUrl?: string | undefined;
+}>>, import("./types.js").McpX402ToolDef<import("zod").ZodObject<{
+    server: import("zod").ZodObject<{
+        command: import("zod").ZodString;
+        args: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
+        env: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>>;
+    }, "strip", import("zod").ZodTypeAny, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }>;
+    toolName: import("zod").ZodString;
+    arguments: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+    apiKey: import("zod").ZodOptional<import("zod").ZodString>;
+    walletId: import("zod").ZodOptional<import("zod").ZodString>;
+    privateKey: import("zod").ZodOptional<import("zod").ZodString>;
+    tronKey: import("zod").ZodOptional<import("zod").ZodString>;
+    svmSecret: import("zod").ZodOptional<import("zod").ZodString>;
+    utxoWif: import("zod").ZodOptional<import("zod").ZodString>;
+    kaspaKey: import("zod").ZodOptional<import("zod").ZodString>;
+    xrpSeed: import("zod").ZodOptional<import("zod").ZodString>;
+    allowedNetworks: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
+    maxAmount: import("zod").ZodOptional<import("zod").ZodString>;
+    buyerBaseUrl: import("zod").ZodOptional<import("zod").ZodString>;
+}, "strip", import("zod").ZodTypeAny, {
+    server: {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    };
+    toolName: string;
+    apiKey?: string | undefined;
+    walletId?: string | undefined;
+    privateKey?: string | undefined;
+    tronKey?: string | undefined;
+    svmSecret?: string | undefined;
+    utxoWif?: string | undefined;
+    kaspaKey?: string | undefined;
+    xrpSeed?: string | undefined;
+    allowedNetworks?: string[] | undefined;
+    buyerBaseUrl?: string | undefined;
+    maxAmount?: string | undefined;
+    arguments?: Record<string, unknown> | undefined;
+}, {
+    server: {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    };
+    toolName: string;
+    apiKey?: string | undefined;
+    walletId?: string | undefined;
+    privateKey?: string | undefined;
+    tronKey?: string | undefined;
+    svmSecret?: string | undefined;
+    utxoWif?: string | undefined;
+    kaspaKey?: string | undefined;
+    xrpSeed?: string | undefined;
+    allowedNetworks?: string[] | undefined;
+    buyerBaseUrl?: string | undefined;
+    maxAmount?: string | undefined;
+    arguments?: Record<string, unknown> | undefined;
 }>>];
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAA2C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAA2D,CAAC"}

package/dist/tools/index.js

@@ -1,4 +1,5 @@
 import { x402PayTool } from "./x402-pay/index.js";
 import { x402DiscoverTool } from "./x402-discover/index.js";
-export const tools = [x402PayTool, x402DiscoverTool];
+import { x402PayToolDef } from "./x402-pay-tool/index.js";
+export const tools = [x402PayTool, x402DiscoverTool, x402PayToolDef];
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,cAAc,CAAU,CAAC"}

package/dist/tools/payCore.d.ts

@@ -0,0 +1,92 @@
+/**
+ * The transport-independent half of paying an x402 challenge.
+ *
+ * Given the merchant's `accepts` list, this picks a requirement, authorizes it with the
+ * CryptoAPIs buyer service, signs LOCALLY, and returns the `PaymentPayload` to resubmit. It
+ * knows nothing about HTTP or MCP — the caller decides how the challenge arrived and how the
+ * payload travels back (a base64 `X-PAYMENT` header over HTTP, a raw object in
+ * `_meta["x402/payment"]` over MCP).
+ *
+ * Extracted so both transports run ONE implementation: the authorize→sign→build flow is
+ * identical, and a fix or a newly-enabled family must never land on only one of them. (The
+ * buyer SDK made the same split for the same reason — see its `payFlow.js`.)
+ */
+export declare const DEFAULT_BUYER_BASE_URL = "https://ai.cryptoapis.io/x402/buyer";
+export declare const X402_VERSION = 2;
+/** The WIRE payment scheme is ALWAYS "exact" — the facilitator derives the family from `network`. */
+export declare const SCHEME_EXACT = "exact";
+/** Artifact schemes live-verified end-to-end. Enabling a family = add its scheme here. */
+export declare const SUPPORTED_SCHEMES: Set<string>;
+/** UTXO CAIP-2 → the {blockchain, network} pair mcp-signer's utxo-sign needs. */
+export declare const UTXO_CAIP2: Record<string, {
+    blockchain: string;
+    network: string;
+}>;
+export type PaymentRequirements = {
+    scheme: string;
+    network: string;
+    amount: string;
+    asset: string;
+    payTo: string;
+    maxTimeoutSeconds?: number;
+    extra?: Record<string, unknown>;
+};
+/** Per-family signing keys, already resolved from params/env by the caller. */
+export type SigningKeys = {
+    evm?: string;
+    tron?: string;
+    svm?: string;
+    utxo?: string;
+    kaspa?: string;
+    xrp?: string;
+};
+/** Either a built payload, or a clean refusal reason. Never throws for an expected refusal. */
+export type BuildResult = {
+    ok: true;
+    paymentPayload: Record<string, unknown>;
+    requirements: PaymentRequirements;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Pick which offered requirement to pay: the first whose network is allowed, else the first.
+ *
+ * @param accepts the merchant's PaymentRequirements list
+ * @param allowed optional CAIP-2 allowlist
+ * @returns the chosen requirements, or null when none is acceptable
+ */
+export declare function selectRequirements(accepts: PaymentRequirements[], allowed?: string[]): PaymentRequirements | null;
+/**
+ * Authorize + sign one x402 challenge into a resubmittable PaymentPayload.
+ *
+ * @param params inputs
+ * @returns the payload to resubmit, or a refusal with an actionable reason
+ */
+export declare function buildPaymentForChallenge(params: {
+    accepts: PaymentRequirements[];
+    apiKey: string;
+    walletId: string;
+    keys: SigningKeys;
+    allowedNetworks?: string[];
+    maxAmount?: string;
+    buyerBaseUrl?: string;
+}): Promise<BuildResult>;
+/**
+ * Resolve the per-family signing keys from explicit params, then env.
+ *
+ * Tron falls back to the EVM key (same secp256k1 curve); the others have no safe fallback,
+ * since a hex key cannot sign a base58/WIF/seed payment.
+ *
+ * @param input the tool input carrying optional per-family keys
+ * @returns the resolved keys
+ */
+export declare function resolveSigningKeys(input: {
+    privateKey?: string;
+    tronKey?: string;
+    svmSecret?: string;
+    utxoWif?: string;
+    kaspaKey?: string;
+    xrpSeed?: string;
+}): SigningKeys;
+//# sourceMappingURL=payCore.d.ts.map

package/dist/tools/payCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payCore.d.ts","sourceRoot":"","sources":["../../src/tools/payCore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,eAAO,MAAM,sBAAsB,wCAAwC,CAAC;AAC5E,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,qGAAqG;AACrG,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,0FAA0F;AAC1F,eAAO,MAAM,iBAAiB,aAAyC,CAAC;AAExE,iFAAiF;AACjF,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAa9E,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9E,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,WAAW,GAAG;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CAC1F,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,WAAW,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,YAAY,EAAE,mBAAmB,CAAA;CAAE,GACxF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,mBAAmB,GAAG,IAAI,CAMjH;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACnD,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,WAAW,CAAC,CA0HvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CACzD,GAAG,WAAW,CAUd"}

package/dist/tools/payCore.js

@@ -0,0 +1,204 @@
+/**
+ * The transport-independent half of paying an x402 challenge.
+ *
+ * Given the merchant's `accepts` list, this picks a requirement, authorizes it with the
+ * CryptoAPIs buyer service, signs LOCALLY, and returns the `PaymentPayload` to resubmit. It
+ * knows nothing about HTTP or MCP — the caller decides how the challenge arrived and how the
+ * payload travels back (a base64 `X-PAYMENT` header over HTTP, a raw object in
+ * `_meta["x402/payment"]` over MCP).
+ *
+ * Extracted so both transports run ONE implementation: the authorize→sign→build flow is
+ * identical, and a fix or a newly-enabled family must never land on only one of them. (The
+ * buyer SDK made the same split for the same reason — see its `payFlow.js`.)
+ */
+import { evmSignTypedData, svmPartialSign, tronSignFromDetails, utxoSignFromDetails, kaspaSignFromDetails, xrpSignFromDetails, } from "@cryptoapis-io/mcp-signer";
+export const DEFAULT_BUYER_BASE_URL = "https://ai.cryptoapis.io/x402/buyer";
+export const X402_VERSION = 2;
+/** The WIRE payment scheme is ALWAYS "exact" — the facilitator derives the family from `network`. */
+export const SCHEME_EXACT = "exact";
+/** Artifact schemes live-verified end-to-end. Enabling a family = add its scheme here. */
+export const SUPPORTED_SCHEMES = new Set(["eip712", "svm-transaction"]);
+/** UTXO CAIP-2 → the {blockchain, network} pair mcp-signer's utxo-sign needs. */
+export const UTXO_CAIP2 = {
+    "bip122:000000000019d6689c085ae165831e93": { blockchain: "bitcoin", network: "mainnet" },
+    "bip122:000000000933ea01ad0ee984209779ba": { blockchain: "bitcoin", network: "testnet" },
+    "bip122:12a765e31ffd4059bada1e25190f6e98": { blockchain: "litecoin", network: "mainnet" },
+    "bip122:4966625a4b2851d9fdee139e56211a0d": { blockchain: "litecoin", network: "testnet" },
+    "bip122:1a91e3dace36e2be3bf030a65679fe82": { blockchain: "dogecoin", network: "mainnet" },
+    "bip122:bb0a78264637406b6360aad926284d54": { blockchain: "dogecoin", network: "testnet" },
+    "bip122:00000ffd590b1485b3caadc19b22e637": { blockchain: "dash", network: "mainnet" },
+    "bip122:00000bafbc94add76cb75e2ec92894837": { blockchain: "dash", network: "testnet" },
+    "bip122:000000000000000000651ef99cb9fcbe": { blockchain: "bitcoin-cash", network: "mainnet" },
+    "bip122:00000000dfd5d65c9d8561b4b8f60a63": { blockchain: "bitcoin-cash", network: "testnet" },
+    "bip122:0007104ccda289427919efc39dc9e4d4": { blockchain: "zcash", network: "mainnet" },
+    "bip122:05a60a92d99d85997cce3b87616c089f": { blockchain: "zcash", network: "testnet" },
+};
+/**
+ * Pick which offered requirement to pay: the first whose network is allowed, else the first.
+ *
+ * @param accepts the merchant's PaymentRequirements list
+ * @param allowed optional CAIP-2 allowlist
+ * @returns the chosen requirements, or null when none is acceptable
+ */
+export function selectRequirements(accepts, allowed) {
+    if (accepts.length === 0)
+        return null;
+    if (Array.isArray(allowed) && allowed.length > 0) {
+        return accepts.find((r) => allowed.includes(r.network)) ?? null;
+    }
+    return accepts[0] ?? null;
+}
+/**
+ * Authorize + sign one x402 challenge into a resubmittable PaymentPayload.
+ *
+ * @param params inputs
+ * @returns the payload to resubmit, or a refusal with an actionable reason
+ */
+export async function buildPaymentForChallenge(params) {
+    const requirements = selectRequirements(params.accepts, params.allowedNetworks);
+    if (!requirements) {
+        return { ok: false, reason: "no acceptable payment option" };
+    }
+    if (params.maxAmount != null && BigInt(requirements.amount) > BigInt(params.maxAmount)) {
+        return { ok: false, reason: `required amount ${requirements.amount} exceeds maxAmount ${params.maxAmount}` };
+    }
+    // 1. Authorize via the buyer service → the artifact to sign.
+    const root = (params.buyerBaseUrl ?? DEFAULT_BUYER_BASE_URL).replace(/\/$/, "");
+    const authRes = await fetch(`${root}/authorize`, {
+        method: "POST",
+        headers: { "content-type": "application/json", "x-api-key": params.apiKey },
+        body: JSON.stringify({ paymentRequirements: requirements, walletId: params.walletId }),
+    });
+    if (!authRes.ok) {
+        return { ok: false, reason: `buyer /authorize failed: ${authRes.status} ${await authRes.text()}`.trim() };
+    }
+    const auth = await authRes.json();
+    if (auth.authorized === false) {
+        return { ok: false, reason: `authorize refused: ${auth.reason ?? "unknown"}` };
+    }
+    // Gate off families that are wired but not yet live-verified.
+    if (!auth.scheme || !SUPPORTED_SCHEMES.has(auth.scheme)) {
+        return {
+            ok: false,
+            reason: `family_not_yet_supported: the "${auth.scheme}" family is coming soon — only EVM (eip712) and Solana (svm-transaction) are supported today`,
+        };
+    }
+    // 2. Sign LOCALLY + build the payload. Every family's facilitator parsePayload reads
+    //    `payload.transaction` first, so the non-EVM families use a uniform wrapper with the
+    //    per-family value the facilitator expects.
+    const network = requirements.network;
+    const sp = auth.signingPayload ?? {};
+    const keys = params.keys;
+    let payload;
+    /** A family whose signing key wasn't configured errors cleanly (never mis-signs). */
+    const needKey = (key, envName) => (key ? null : `no signing key for ${auth.scheme} — set ${envName} (or the matching param)`);
+    if (auth.scheme === "eip712") {
+        const missing = needKey(keys.evm, "X402_PRIVATE_KEY");
+        if (missing)
+            return { ok: false, reason: missing };
+        const td = sp;
+        const { signature } = await evmSignTypedData({
+            action: "sign-typed-data",
+            privateKey: keys.evm,
+            domain: td.domain,
+            types: td.types,
+            primaryType: td.primaryType,
+            message: td.message,
+        });
+        payload = { signature, authorization: td.message };
+    }
+    else if (auth.scheme === "svm-transaction") {
+        const missing = needKey(keys.svm, "X402_SVM_SECRET");
+        if (missing)
+            return { ok: false, reason: missing };
+        const { transaction } = svmPartialSign({
+            action: "partial-sign",
+            secretKeyBase58: keys.svm,
+            transaction: sp.transaction,
+        });
+        payload = { transaction };
+    }
+    else if (auth.scheme === "tron-transaction") {
+        const missing = needKey(keys.tron, "X402_TRON_KEY");
+        if (missing)
+            return { ok: false, reason: missing };
+        const { signedTransaction } = tronSignFromDetails({
+            action: "sign-from-details",
+            privateKey: keys.tron,
+            transaction: sp.transaction,
+        });
+        payload = { transaction: signedTransaction };
+    }
+    else if (auth.scheme === "utxo-transaction") {
+        const missing = needKey(keys.utxo, "X402_UTXO_WIF");
+        if (missing)
+            return { ok: false, reason: missing };
+        const chain = UTXO_CAIP2[network];
+        if (!chain)
+            return { ok: false, reason: `unknown UTXO network ${network}` };
+        const { signedTransactionHex } = utxoSignFromDetails({
+            action: "sign-from-details",
+            blockchain: chain.blockchain,
+            network: chain.network,
+            privateKeys: [keys.utxo],
+            preparedTransaction: sp.preparedTransaction,
+        });
+        payload = { transaction: signedTransactionHex };
+    }
+    else if (auth.scheme === "kaspa-transaction") {
+        const missing = needKey(keys.kaspa, "X402_KASPA_KEY");
+        if (missing)
+            return { ok: false, reason: missing };
+        const { signedTransaction } = kaspaSignFromDetails({
+            action: "sign-from-details",
+            privateKeys: [keys.kaspa],
+            preparedTransaction: sp.preparedTransaction,
+        });
+        payload = { transaction: signedTransaction };
+    }
+    else if (auth.scheme === "xrp-transaction") {
+        const missing = needKey(keys.xrp, "X402_XRP_SEED");
+        if (missing)
+            return { ok: false, reason: missing };
+        const { signedTransactionHex } = await xrpSignFromDetails({
+            action: "sign-from-details",
+            secret: keys.xrp,
+            transaction: sp.transaction,
+        });
+        payload = { transaction: signedTransactionHex };
+    }
+    else {
+        return { ok: false, reason: `unsupported_scheme: ${auth.scheme}` };
+    }
+    return {
+        ok: true,
+        requirements,
+        paymentPayload: {
+            x402Version: X402_VERSION,
+            scheme: SCHEME_EXACT,
+            network: network,
+            payload: payload,
+        },
+    };
+}
+/**
+ * Resolve the per-family signing keys from explicit params, then env.
+ *
+ * Tron falls back to the EVM key (same secp256k1 curve); the others have no safe fallback,
+ * since a hex key cannot sign a base58/WIF/seed payment.
+ *
+ * @param input the tool input carrying optional per-family keys
+ * @returns the resolved keys
+ */
+export function resolveSigningKeys(input) {
+    const evm = input.privateKey ?? process.env.X402_PRIVATE_KEY;
+    return {
+        evm,
+        tron: input.tronKey ?? process.env.X402_TRON_KEY ?? evm,
+        svm: input.svmSecret ?? process.env.X402_SVM_SECRET,
+        utxo: input.utxoWif ?? process.env.X402_UTXO_WIF,
+        kaspa: input.kaspaKey ?? process.env.X402_KASPA_KEY,
+        xrp: input.xrpSeed ?? process.env.X402_XRP_SEED,
+    };
+}
+//# sourceMappingURL=payCore.js.map

package/dist/tools/payCore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payCore.js","sourceRoot":"","sources":["../../src/tools/payCore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACH,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACrB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,qGAAqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAEpC,0FAA0F;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAExE,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAA4D;IAC/E,yCAAyC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;IACxF,yCAAyC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;IACxF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;IACrF,0CAA0C,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;IACtF,yCAAyC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;IAC7F,yCAAyC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;IAC7F,yCAAyC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;IACtF,yCAAyC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;CACzF,CAAC;AAiBF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA8B,EAAE,OAAkB;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAQ9C;IACG,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAChF,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,YAAY,CAAC,MAAM,sBAAsB,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;IACjH,CAAC;IAED,6DAA6D;IAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KACzF,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,OAAO,CAAC,MAAM,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAE9B,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC;IACnF,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kCAAkC,IAAI,CAAC,MAAM,8FAA8F;SACtJ,CAAC;IACN,CAAC;IAED,qFAAqF;IACrF,yFAAyF;IACzF,+CAA+C;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,OAAgC,CAAC;IAErC,qFAAqF;IACrF,MAAM,OAAO,GAAG,CAAC,GAAuB,EAAE,OAAe,EAAiB,EAAE,CACxE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,MAAM,UAAU,OAAO,0BAA0B,CAAC,CAAC;IAEhG,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACtD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,EAAyJ,CAAC;QACrK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,gBAAgB,CAAC;YACzC,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,IAAI,CAAC,GAAa;YAC9B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACrD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC;YACnC,MAAM,EAAE,cAAc;YACtB,eAAe,EAAE,IAAI,CAAC,GAAa;YACnC,WAAW,EAAE,EAAE,CAAC,WAAqB;SACxC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,CAAC;IAC9B,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CAAC;YAC9C,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,IAAI,CAAC,IAAc;YAC/B,WAAW,EAAE,EAAE,CAAC,WAAsC;SACzD,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,oBAAoB,EAAE,GAAG,mBAAmB,CAAC;YACjD,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,KAAK,CAAC,UAAmB;YACrC,OAAO,EAAE,KAAK,CAAC,OAAgB;YAC/B,WAAW,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC;YAClC,mBAAmB,EAAE,EAAE,CAAC,mBAA8C;SACzE,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACtD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC;YAC/C,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,CAAC,IAAI,CAAC,KAAe,CAAC;YACnC,mBAAmB,EAAE,EAAE,CAAC,mBAA8C;SACzE,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACnD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,kBAAkB,CAAC;YACtD,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,IAAI,CAAC,GAAa;YAC1B,WAAW,EAAE,EAAE,CAAC,WAAsC;SACzD,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;SAAM,CAAC;QACJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,OAAO;QACH,EAAE,EAAE,IAAI;QACR,YAAY;QACZ,cAAc,EAAE;YACZ,WAAW,EAAE,YAAY;YACzB,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;SACnB;KACJ,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAGlC;IACG,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC7D,OAAO;QACH,GAAG;QACH,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG;QACvD,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QACnD,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;QAChD,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QACnD,GAAG,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;KAClD,CAAC;AACN,CAAC"}

package/dist/tools/x402-pay/index.d.ts

@@ -2,7 +2,23 @@ import type { X402PayInput } from "./schema.js";
 import { X402PaySchema } from "./schema.js";
 import type { McpX402ToolDef } from "../types.js";
 /**
- * Fetch a URL and auto-pay a 402 with x402 (EVM eip712 path).
+ * Is `url` allowed by a host allowlist?
+ *
+ * An entry matches the host exactly; an entry with a LEADING DOT (`.acme.com`) also matches
+ * any subdomain. Matching is on the parsed hostname, never on substrings of the raw url —
+ * a substring test would let `evil.com/?x=api.acme.com` through.
+ *
+ * @param url the url about to be fetched
+ * @param allowed the allowlist (already resolved from param or env)
+ * @return true when the url may be paid
+ */
+export declare function isHostAllowed(url: string, allowed: string[]): boolean;
+/**
+ * Fetch a URL and auto-pay a 402 with x402.
+ *
+ * The authorize → sign → build-payload half lives in `payCore` and is SHARED with the
+ * MCP-tool payer (`x402_pay_tool`); only the HTTP envelope is here — the 402 status, the
+ * base64 `X-PAYMENT` header, and the `X-PAYMENT-RESPONSE` receipt.
  *
  * @param input the tool input
  * @return the final (paid) response summary

package/dist/tools/x402-pay/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/x402-pay/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA+ClD;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;IACxD,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACtF,CAAC,CA4KD;AAED,eAAO,MAAM,WAAW,EAAE,cAAc,CAAC,OAAO,aAAa,CAS5D,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/x402-pay/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAYrE;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;IACxD,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACtF,CAAC,CAkED;AAED,eAAO,MAAM,WAAW,EAAE,cAAc,CAAC,OAAO,aAAa,CAS5D,CAAC"}

package/dist/tools/x402-pay/index.js

@@ -1,68 +1,65 @@
-import { evmSignTypedData, svmPartialSign, tronSignFromDetails, utxoSignFromDetails, kaspaSignFromDetails, xrpSignFromDetails, } from "@cryptoapis-io/mcp-signer";
 import { X402PaySchema } from "./schema.js";
-const DEFAULT_BUYER_BASE_URL = "https://ai.cryptoapis.io/x402/buyer";
-const X402_VERSION = 2;
-/** The WIRE payment scheme is ALWAYS "exact" — the facilitator's parseEnvelope rejects
- *  anything else and derives the family from `network`. The buyer /authorize "scheme"
- *  (eip712/…) is the ARTIFACT type (how to sign), NOT this. */
-const SCHEME_EXACT = "exact";
-/** Artifact schemes that are LIVE-VERIFIED end-to-end and enabled today. EVM (eip712) and
- *  Solana (svm-transaction) are supported; Tron/UTXO/XRP/Kaspa are wired but not yet
- *  live-verified, so they are gated OFF ("coming soon") until each is exercised in prod.
- *  Enabling a family once verified = add its scheme here. */
-const SUPPORTED_SCHEMES = new Set(["eip712", "svm-transaction"]);
-/** UTXO CAIP-2 network id → the {blockchain, network} the mcp-signer utxo-sign needs
- *  (a bare CAIP-2 doesn't carry the chain name). Only UTXO signing needs this pair. */
-const UTXO_CAIP2 = {
-    "bip122:000000000019d6689c085ae165831e93": { blockchain: "bitcoin", network: "mainnet" },
-    "bip122:000000000933ea01ad0ee984209779ba": { blockchain: "bitcoin", network: "testnet" },
-    "bip122:12a765e31ffd4059bada1e25190f6e98": { blockchain: "litecoin", network: "mainnet" },
-    "bip122:4966625a4b2851d9fdee139e56211a0d": { blockchain: "litecoin", network: "testnet" },
-    "bip122:1a91e3dace36e2be3bf030a65679fe82": { blockchain: "dogecoin", network: "mainnet" },
-    "bip122:bb0a78264637406b6360aad926284d54": { blockchain: "dogecoin", network: "testnet" },
-    "bip122:00000ffd590b1485b3caadc19b22e637": { blockchain: "dash", network: "mainnet" },
-    "bip122:00000bafbc94add76cb75e2ec92894837": { blockchain: "dash", network: "testnet" },
-    "bip122:000000000000000000651ef99cb9fcbe": { blockchain: "bitcoin-cash", network: "mainnet" },
-    "bip122:00000000dfd5d65c9d8561b4b8f60a63": { blockchain: "bitcoin-cash", network: "testnet" },
-    "bip122:0007104ccda289427919efc39dc9e4d4": { blockchain: "zcash", network: "mainnet" },
-    "bip122:05a60a92d99d85997cce3b87616c089f": { blockchain: "zcash", network: "testnet" },
-};
-/** Pick which offered requirement to pay (allowlist-aware; else the first). */
-function selectRequirements(accepts, allowed) {
-    if (accepts.length === 0)
-        return null;
-    if (Array.isArray(allowed) && allowed.length > 0) {
-        return accepts.find((r) => allowed.includes(r.network)) ?? null;
+import { buildPaymentForChallenge, resolveSigningKeys } from "../payCore.js";
+/**
+ * Is `url` allowed by a host allowlist?
+ *
+ * An entry matches the host exactly; an entry with a LEADING DOT (`.acme.com`) also matches
+ * any subdomain. Matching is on the parsed hostname, never on substrings of the raw url —
+ * a substring test would let `evil.com/?x=api.acme.com` through.
+ *
+ * @param url the url about to be fetched
+ * @param allowed the allowlist (already resolved from param or env)
+ * @return true when the url may be paid
+ */
+export function isHostAllowed(url, allowed) {
+    let host;
+    try {
+        host = new URL(url).hostname.toLowerCase();
+    }
+    catch {
+        return false; // unparseable url is never allowed
     }
-    return accepts[0] ?? null;
+    return allowed.some((entry) => {
+        const e = entry.trim().toLowerCase();
+        if (!e)
+            return false;
+        return e.startsWith(".") ? host === e.slice(1) || host.endsWith(e) : host === e;
+    });
 }
 /**
- * Fetch a URL and auto-pay a 402 with x402 (EVM eip712 path).
+ * Fetch a URL and auto-pay a 402 with x402.
+ *
+ * The authorize → sign → build-payload half lives in `payCore` and is SHARED with the
+ * MCP-tool payer (`x402_pay_tool`); only the HTTP envelope is here — the 402 status, the
+ * base64 `X-PAYMENT` header, and the `X-PAYMENT-RESPONSE` receipt.
  *
  * @param input the tool input
  * @return the final (paid) response summary
  */
 export async function x402Pay(input) {
+    // Host allowlist FIRST — before credentials, before any fetch. This tool holds spending
+    // keys and will pay whatever url it is handed, so a url the operator never sanctioned
+    // must not even be contacted. Resolved from the param OR X402_ALLOWED_HOSTS so an
+    // operator can pin it outside the model's reach; unset = unrestricted (x402 is an open
+    // protocol and the tool must be able to pay any merchant, incl. our own customers).
+    const allowedHosts = input.allowedHosts
+        ?? (process.env.X402_ALLOWED_HOSTS ? process.env.X402_ALLOWED_HOSTS.split(",") : undefined);
+    if (allowedHosts && allowedHosts.length > 0 && !isHostAllowed(input.url, allowedHosts)) {
+        return {
+            status: 0,
+            paid: false,
+            reason: `host not allowed: ${input.url} is outside allowedHosts (${allowedHosts.join(", ")})`,
+            body: "",
+        };
+    }
     // Credentials: prefer the per-call params, else fall back to env (set once in the
     // MCP config so the agent only ever passes `url` — and the key stays out of logs).
-    // apiKey + walletId are always needed (to call /authorize); the SIGNING key is
-    // resolved per-family at the dispatch below (each chain uses its own key form).
     const apiKey = input.apiKey ?? process.env.CRYPTOAPIS_API_KEY;
     const walletId = input.walletId ?? process.env.X402_WALLET_ID;
     if (!apiKey || !walletId) {
         const missing = [!apiKey && "apiKey/CRYPTOAPIS_API_KEY", !walletId && "walletId/X402_WALLET_ID"].filter(Boolean).join(", ");
         return { status: 0, paid: false, reason: `missing credentials: ${missing} (pass as params or set the env vars)`, body: "" };
     }
-    // Per-family signing keys (param → family env → EVM fallback where the curve allows).
-    const evmKey = input.privateKey ?? process.env.X402_PRIVATE_KEY;
-    const keys = {
-        evm: evmKey,
-        tron: input.tronKey ?? process.env.X402_TRON_KEY ?? evmKey,
-        svm: input.svmSecret ?? process.env.X402_SVM_SECRET,
-        utxo: input.utxoWif ?? process.env.X402_UTXO_WIF,
-        kaspa: input.kaspaKey ?? process.env.X402_KASPA_KEY,
-        xrp: input.xrpSeed ?? process.env.X402_XRP_SEED,
-    };
     const method = input.method ?? "GET";
     const baseInit = {
         method,
@@ -74,136 +71,21 @@ export async function x402Pay(input) {
         return { status: first.status, paid: false, body: await first.text() };
     }
     const body402 = await first.json().catch(() => null);
-    const accepts = Array.isArray(body402?.accepts) ? body402.accepts : [];
-    const requirements = selectRequirements(accepts, input.allowedNetworks);
-    if (!requirements) {
-        return { status: 402, paid: false, reason: "no acceptable payment option", body: JSON.stringify(body402) };
-    }
-    if (input.maxAmount != null && BigInt(requirements.amount) > BigInt(input.maxAmount)) {
-        return { status: 402, paid: false, reason: `required amount ${requirements.amount} exceeds maxAmount ${input.maxAmount}`, body: "" };
-    }
-    // 1. Authorize via the buyer service → the artifact to sign.
-    const root = (input.buyerBaseUrl ?? DEFAULT_BUYER_BASE_URL).replace(/\/$/, "");
-    const authRes = await fetch(`${root}/authorize`, {
-        method: "POST",
-        headers: { "content-type": "application/json", "x-api-key": apiKey },
-        body: JSON.stringify({ paymentRequirements: requirements, walletId: walletId }),
+    const built = await buildPaymentForChallenge({
+        accepts: Array.isArray(body402?.accepts) ? body402.accepts : [],
+        apiKey: apiKey,
+        walletId: walletId,
+        keys: resolveSigningKeys(input),
+        allowedNetworks: input.allowedNetworks,
+        maxAmount: input.maxAmount,
+        buyerBaseUrl: input.buyerBaseUrl,
     });
-    if (!authRes.ok) {
-        return { status: 402, paid: false, reason: `buyer /authorize failed: ${authRes.status} ${await authRes.text()}`.trim(), body: "" };
-    }
-    const auth = await authRes.json();
-    if (auth.authorized === false) {
-        return { status: 402, paid: false, reason: `authorize refused: ${auth.reason ?? "unknown"}`, body: "" };
-    }
-    // 2. Sign LOCALLY + build the PaymentPayload. The WIRE scheme is ALWAYS "exact"
-    //    (family carried by `network`); the /authorize `scheme` says HOW to sign. Every
-    //    family's facilitator parsePayload reads `payload.transaction` first — so the
-    //    non-EVM families use a uniform `payload:{transaction}` wrapper, with the
-    //    per-family value the facilitator expects (SVM base64, UTXO/XRP hex, Kaspa JSON,
-    //    Tron the structured {txID, raw_data_hex, raw_data, signature[]} object).
-    const network = requirements.network;
-    // Gate off families that are wired but not yet live-verified (Tron/UTXO/XRP/Kaspa).
-    // EVM + Solana are supported today; the rest are on the roadmap ("coming soon").
-    if (!auth.scheme || !SUPPORTED_SCHEMES.has(auth.scheme)) {
-        return {
-            status: 402,
-            paid: false,
-            reason: `family_not_yet_supported: the "${auth.scheme}" family is coming soon — only EVM (eip712) and Solana (svm-transaction) are supported today`,
-            body: "",
-        };
-    }
-    const sp = auth.signingPayload ?? {};
-    let payload;
-    /** Guard: a family whose signing key wasn't configured errors cleanly (never mis-signs). */
-    const needKey = (key, envName) => (key ? null : `no signing key for ${auth.scheme} — set ${envName} (or the matching param)`);
-    if (auth.scheme === "eip712") {
-        const missing = needKey(keys.evm, "X402_PRIVATE_KEY");
-        if (missing)
-            return { status: 402, paid: false, reason: missing, body: "" };
-        const td = sp;
-        const { signature } = await evmSignTypedData({
-            action: "sign-typed-data",
-            privateKey: keys.evm,
-            domain: td.domain,
-            types: td.types,
-            primaryType: td.primaryType,
-            message: td.message,
-        });
-        payload = { signature, authorization: td.message };
+    if (!built.ok) {
+        return { status: 402, paid: false, reason: built.reason, body: JSON.stringify(body402 ?? {}) };
     }
-    else if (auth.scheme === "svm-transaction") {
-        const missing = needKey(keys.svm, "X402_SVM_SECRET");
-        if (missing)
-            return { status: 402, paid: false, reason: missing, body: "" };
-        const { transaction } = svmPartialSign({
-            action: "partial-sign",
-            secretKeyBase58: keys.svm,
-            transaction: sp.transaction,
-        });
-        payload = { transaction };
-    }
-    else if (auth.scheme === "tron-transaction") {
-        const missing = needKey(keys.tron, "X402_TRON_KEY");
-        if (missing)
-            return { status: 402, paid: false, reason: missing, body: "" };
-        const { signedTransaction } = tronSignFromDetails({
-            action: "sign-from-details",
-            privateKey: keys.tron,
-            transaction: sp.transaction,
-        });
-        // Tron's facilitator wants the structured {txID, raw_data_hex, raw_data, signature[]}.
-        payload = { transaction: signedTransaction };
-    }
-    else if (auth.scheme === "utxo-transaction") {
-        const missing = needKey(keys.utxo, "X402_UTXO_WIF");
-        if (missing)
-            return { status: 402, paid: false, reason: missing, body: "" };
-        const chain = UTXO_CAIP2[network];
-        if (!chain)
-            return { status: 402, paid: false, reason: `unknown UTXO network ${network}`, body: "" };
-        const { signedTransactionHex } = utxoSignFromDetails({
-            action: "sign-from-details",
-            blockchain: chain.blockchain,
-            network: chain.network,
-            privateKeys: [keys.utxo],
-            preparedTransaction: sp.preparedTransaction,
-        });
-        payload = { transaction: signedTransactionHex };
-    }
-    else if (auth.scheme === "kaspa-transaction") {
-        const missing = needKey(keys.kaspa, "X402_KASPA_KEY");
-        if (missing)
-            return { status: 402, paid: false, reason: missing, body: "" };
-        const { signedTransaction } = kaspaSignFromDetails({
-            action: "sign-from-details",
-            privateKeys: [keys.kaspa],
-            preparedTransaction: sp.preparedTransaction,
-        });
-        payload = { transaction: signedTransaction };
-    }
-    else if (auth.scheme === "xrp-transaction") {
-        const missing = needKey(keys.xrp, "X402_XRP_SEED");
-        if (missing)
-            return { status: 402, paid: false, reason: missing, body: "" };
-        const { signedTransactionHex } = await xrpSignFromDetails({
-            action: "sign-from-details",
-            secret: keys.xrp,
-            transaction: sp.transaction,
-        });
-        payload = { transaction: signedTransactionHex };
-    }
-    else {
-        return { status: 402, paid: false, reason: `unsupported_scheme: ${auth.scheme}`, body: "" };
-    }
-    const paymentPayload = {
-        x402Version: X402_VERSION,
-        scheme: SCHEME_EXACT,
-        network: network,
-        payload: payload,
-    };
-    // 3. Retry the ORIGINAL request with the X-PAYMENT header.
-    const xPayment = Buffer.from(JSON.stringify(paymentPayload), "utf8").toString("base64");
+    // Retry the ORIGINAL request with the X-PAYMENT header. HTTP carries the payload as a
+    // base64 header value; MCP carries the same object as structured JSON (see x402_pay_tool).
+    const xPayment = Buffer.from(JSON.stringify(built.paymentPayload), "utf8").toString("base64");
     const paid = await fetch(input.url, {
         ...baseInit,
         headers: { ...baseInit.headers, "x-payment": xPayment },
@@ -218,7 +100,7 @@ export async function x402Pay(input) {
 }
 export const x402PayTool = {
     name: "x402_pay",
-    description: "Fetch an HTTP resource and, if it returns 402 Payment Required, pay it automatically with x402 and return the paid response. On a 402 it: parses the merchant's price, authorizes via the CryptoAPIs buyer /authorize, signs the payment LOCALLY (non-custodial — the key never leaves this process), and retries with the X-PAYMENT header. Returns { status, paid, body, settlement? }. Supported today: EVM (eip712, e.g. Base USDC) and Solana. Tron, UTXO (bitcoin/ltc/doge/dash/bch/zcash), Kaspa and XRP are UPCOMING — wired but not yet enabled, and paying on them returns a clear coming-soon (family_not_yet_supported) result. Set CRYPTOAPIS_API_KEY + X402_WALLET_ID once, plus the signing key(s) for the chain(s) you pay on: X402_PRIVATE_KEY (EVM hex), X402_SVM_SECRET (base58). A scheme with no configured key errors cleanly (never mis-signs). Env vars keep keys OUT of tool-call logs. Use allowedNetworks to restrict, maxAmount as a safety cap. SECURITY: use only in trusted local environments.",
+    description: "Fetch an HTTP resource and, if it returns 402 Payment Required, pay it automatically with x402 and return the paid response. On a 402 it: parses the merchant's price, authorizes via the CryptoAPIs buyer /authorize, signs the payment LOCALLY (non-custodial — the key never leaves this process), and retries with the X-PAYMENT header. Returns { status, paid, body, settlement? }. This is for HTTP URLs — to pay a paid MCP TOOL on another server, use x402_pay_tool instead. Supported today: EVM (eip712, e.g. Base USDC) and Solana. Tron, UTXO (bitcoin/ltc/doge/dash/bch/zcash), Kaspa and XRP are UPCOMING — wired but not yet enabled, and paying on them returns a clear coming-soon (family_not_yet_supported) result. Set CRYPTOAPIS_API_KEY + X402_WALLET_ID once, plus the signing key(s) for the chain(s) you pay on: X402_PRIVATE_KEY (EVM hex), X402_SVM_SECRET (base58). A scheme with no configured key errors cleanly (never mis-signs). Env vars keep keys OUT of tool-call logs. Use allowedNetworks to restrict chains, maxAmount as a per-call spend cap, and allowedHosts to restrict WHICH SITES may be paid (a url outside the list is refused before any network call; set X402_ALLOWED_HOSTS in the MCP config to pin it outside the model's reach). SECURITY: this tool holds spending keys — use only in trusted local environments, and prefer pinning allowedHosts + maxAmount via env for unattended runs.",
     inputSchema: X402PaySchema,
     handler: async (input) => {
         const result = await x402Pay(input);

package/dist/tools/x402-pay/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/x402-pay/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACrB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AACrE,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB;;+DAE+D;AAC/D,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B;;;6DAG6D;AAC7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAEjE;uFACuF;AACvF,MAAM,UAAU,GAA4D;IACxE,yCAAyC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;IACxF,yCAAyC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;IACxF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,yCAAyC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;IACrF,0CAA0C,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;IACtF,yCAAyC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;IAC7F,yCAAyC,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;IAC7F,yCAAyC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;IACtF,yCAAyC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;CACzF,CAAC;AAQF,+EAA+E;AAC/E,SAAS,kBAAkB,CAAC,OAA8B,EAAE,OAAkB;IAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAmB;IAG7C,kFAAkF;IAClF,mFAAmF;IACnF,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5H,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,uCAAuC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChI,CAAC;IACD,sFAAsF;IACtF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAChE,MAAM,IAAI,GAAG;QACT,GAAG,EAAE,MAAM;QACX,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM;QAC1D,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QACnD,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;QAChD,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QACnD,GAAG,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;KAClD,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAgB;QAC1B,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QACrC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA+C,CAAC;IACnG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACxE,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,YAAY,CAAC,MAAM,sBAAsB,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzI,CAAC;IAED,6DAA6D;IAC7D,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,EAAE;QACpE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAClF,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,OAAO,CAAC,MAAM,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvI,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAA0G,CAAC;IAC1I,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5G,CAAC;IAED,gFAAgF;IAChF,oFAAoF;IACpF,kFAAkF;IAClF,8EAA8E;IAC9E,qFAAqF;IACrF,8EAA8E;IAC9E,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;IAErC,oFAAoF;IACpF,iFAAiF;IACjF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO;YACH,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,kCAAkC,IAAI,CAAC,MAAM,8FAA8F;YACnJ,IAAI,EAAE,EAAE;SACX,CAAC;IACN,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACrC,IAAI,OAAgC,CAAC;IAErC,4FAA4F;IAC5F,MAAM,OAAO,GAAG,CAAC,GAAuB,EAAE,OAAe,EAAiB,EAAE,CACxE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,MAAM,UAAU,OAAO,0BAA0B,CAAC,CAAC;IAEhG,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACtD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,GAAG,EAAyJ,CAAC;QACrK,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,gBAAgB,CAAC;YACzC,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,IAAI,CAAC,GAAa;YAC9B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACrD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC;YACnC,MAAM,EAAE,cAAc;YACtB,eAAe,EAAE,IAAI,CAAC,GAAa;YACnC,WAAW,EAAE,EAAE,CAAC,WAAqB;SACxC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,CAAC;IAC9B,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CAAC;YAC9C,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,IAAI,CAAC,IAAc;YAC/B,WAAW,EAAE,EAAE,CAAC,WAAsC;SACzD,CAAC,CAAC;QACH,uFAAuF;QACvF,OAAO,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrG,MAAM,EAAE,oBAAoB,EAAE,GAAG,mBAAmB,CAAC;YACjD,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,KAAK,CAAC,UAAmB;YACrC,OAAO,EAAE,KAAK,CAAC,OAAgB;YAC/B,WAAW,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC;YAClC,mBAAmB,EAAE,EAAE,CAAC,mBAA8C;SACzE,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACtD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC;YAC/C,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,CAAC,IAAI,CAAC,KAAe,CAAC;YACnC,mBAAmB,EAAE,EAAE,CAAC,mBAA8C;SACzE,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjD,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACnD,IAAI,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5E,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,kBAAkB,CAAC;YACtD,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,IAAI,CAAC,GAAa;YAC1B,WAAW,EAAE,EAAE,CAAC,WAAsC;SACzD,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;SAAM,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,cAAc,GAA4B;QAC5C,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,OAAO;KACnB,CAAC;IAEF,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;QAChC,GAAG,QAAQ;QACX,OAAO,EAAE,EAAE,GAAI,QAAQ,CAAC,OAAkC,EAAE,WAAW,EAAE,QAAQ,EAAE;KACtF,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC/D,OAAO;QACH,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAC7C,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE;QACvB,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAChH,CAAC;AACN,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAyC;IAC7D,IAAI,EAAE,UAAU;IAChB,WAAW,EACP,g+BAAg+B;IACp+B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAmB,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;CACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/x402-pay/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAiB;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACD,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC,CAAC,mCAAmC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAmB;IAG7C,wFAAwF;IACxF,sFAAsF;IACtF,kFAAkF;IAClF,uFAAuF;IACvF,oFAAoF;IACpF,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY;WAChC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChG,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;QACrF,OAAO;YACH,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,qBAAqB,KAAK,CAAC,GAAG,6BAA6B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC7F,IAAI,EAAE,EAAE;SACX,CAAC;IACN,CAAC;IAED,kFAAkF;IAClF,mFAAmF;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5H,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,uCAAuC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChI,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAgB;QAC1B,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QACrC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA+C,CAAC;IACnG,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC;QACzC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAC/D,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC;QAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IAED,sFAAsF;IACtF,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;QAChC,GAAG,QAAQ;QACX,OAAO,EAAE,EAAE,GAAI,QAAQ,CAAC,OAAkC,EAAE,WAAW,EAAE,QAAQ,EAAE;KACtF,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC/D,OAAO;QACH,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAC7C,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE;QACvB,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAChH,CAAC;AACN,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAyC;IAC7D,IAAI,EAAE,UAAU;IAChB,WAAW,EACP,q3CAAq3C;IACz3C,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAmB,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;CACJ,CAAC"}

package/dist/tools/x402-pay/schema.d.ts

@@ -24,6 +24,7 @@ export declare const X402PaySchema: z.ZodObject<{
     kaspaKey: z.ZodOptional<z.ZodString>;
     xrpSeed: z.ZodOptional<z.ZodString>;
     allowedNetworks: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    allowedHosts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     buyerBaseUrl: z.ZodOptional<z.ZodString>;
     maxAmount: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -40,6 +41,7 @@ export declare const X402PaySchema: z.ZodObject<{
     kaspaKey?: string | undefined;
     xrpSeed?: string | undefined;
     allowedNetworks?: string[] | undefined;
+    allowedHosts?: string[] | undefined;
     buyerBaseUrl?: string | undefined;
     maxAmount?: string | undefined;
 }, {
@@ -56,6 +58,7 @@ export declare const X402PaySchema: z.ZodObject<{
     kaspaKey?: string | undefined;
     xrpSeed?: string | undefined;
     allowedNetworks?: string[] | undefined;
+    allowedHosts?: string[] | undefined;
     buyerBaseUrl?: string | undefined;
     maxAmount?: string | undefined;
 }>;

package/dist/tools/x402-pay/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/tools/x402-pay/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBxB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/tools/x402-pay/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBxB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/tools/x402-pay/schema.js

@@ -27,6 +27,7 @@ export const X402PaySchema = z.object({
     kaspaKey: z.string().optional().describe("Kaspa private key (hex, 32 bytes) — signs kaspa-transaction payments. Falls back to X402_KASPA_KEY."),
     xrpSeed: z.string().optional().describe("XRP secret/seed (base58, e.g. s...) — signs xrp-transaction payments. Falls back to X402_XRP_SEED."),
     allowedNetworks: z.array(z.string()).optional().describe("Restrict which CAIP-2 networks to pay on (e.g. [\"eip155:8453\"])"),
+    allowedHosts: z.array(z.string()).optional().describe("Restrict WHICH HOSTS may be paid, e.g. [\"api.acme.com\"] (a leading dot matches subdomains: \".acme.com\"). A url outside the list is refused BEFORE any network call. Falls back to the X402_ALLOWED_HOSTS env var (comma-separated) — set it there to pin the allowlist OUTSIDE the model's reach, so a prompt-injected url cannot widen it."),
     buyerBaseUrl: z.string().url().optional().describe("Override the buyer service base URL (default https://ai.cryptoapis.io/x402/buyer)"),
     maxAmount: z.string().optional().describe("Optional safety cap: refuse to pay if the required atomic-unit amount exceeds this"),
 });

package/dist/tools/x402-pay/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/tools/x402-pay/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAChF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1G,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;IACrG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAEtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yKAAyK,CAAC;IACjN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sdAAsd,CAAC;IAEhgB,8EAA8E;IAC9E,+EAA+E;IAC/E,qDAAqD;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sKAAsK,CAAC;IAClN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kHAAkH,CAAC;IAC3J,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6HAA6H,CAAC;IACxK,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kIAAkI,CAAC;IAC3K,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC;IAC/I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IAE7I,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC7H,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mFAAmF,CAAC;IACvI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oFAAoF,CAAC;CAClI,CAAC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/tools/x402-pay/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAChF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1G,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;IACrG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAEtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yKAAyK,CAAC;IACjN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sdAAsd,CAAC;IAEhgB,8EAA8E;IAC9E,+EAA+E;IAC/E,qDAAqD;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sKAAsK,CAAC;IAClN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kHAAkH,CAAC;IAC3J,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6HAA6H,CAAC;IACxK,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kIAAkI,CAAC;IAC3K,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC;IAC/I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IAE7I,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC7H,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iVAAiV,CAAC;IACxY,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mFAAmF,CAAC;IACvI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oFAAoF,CAAC;CAClI,CAAC,CAAC"}

package/dist/tools/x402-pay-tool/index.d.ts

@@ -0,0 +1,45 @@
+import type { X402PayToolInput } from "./schema.js";
+import { X402PayToolSchema } from "./schema.js";
+import type { McpX402ToolDef } from "../types.js";
+import type { PaymentRequirements } from "../payCore.js";
+type ToolResult = {
+    isError?: boolean;
+    content?: {
+        type: string;
+        text?: string;
+    }[];
+    structuredContent?: unknown;
+    _meta?: Record<string, unknown>;
+};
+/**
+ * Read an x402 `PaymentRequired` challenge out of an MCP tool result.
+ *
+ * Per the spec a client SHOULD prefer `structuredContent` and fall back to parsing
+ * `content[0].text` — servers must send BOTH, but a server that sends only the text form is
+ * still payable, and treating it as unpayable would strand the user.
+ *
+ * @param result an MCP tool result
+ * @return the PaymentRequired body, or null when this is not a payment challenge
+ */
+export declare function parseToolChallenge(result: ToolResult | undefined): {
+    accepts?: PaymentRequirements[];
+} | null;
+/**
+ * Call a tool on another MCP server, paying it if it answers with an x402 challenge.
+ *
+ * The authorize → sign → build-payload half is SHARED with `x402_pay` (`payCore`); only the
+ * envelope differs. Over MCP the payment travels as a RAW OBJECT in `_meta["x402/payment"]` —
+ * no base64, because MCP carries structured JSON natively.
+ *
+ * @param input the tool input
+ * @return the tool result, plus whether a payment was made
+ */
+export declare function x402PayTool(input: X402PayToolInput): Promise<{
+    paid: boolean;
+    result?: unknown;
+    settlement?: unknown;
+    reason?: string;
+}>;
+export declare const x402PayToolDef: McpX402ToolDef<typeof X402PayToolSchema>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/x402-pay-tool/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/x402-pay-tool/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AASzD,KAAK,UAAU,GAAG;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG;IAAE,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAAG,IAAI,CAoB7G;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAChE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1E,CAAC,CA2DD;AAED,eAAO,MAAM,cAAc,EAAE,cAAc,CAAC,OAAO,iBAAiB,CASnE,CAAC"}

package/dist/tools/x402-pay-tool/index.js

@@ -0,0 +1,114 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { X402PayToolSchema } from "./schema.js";
+import { buildPaymentForChallenge, resolveSigningKeys } from "../payCore.js";
+/** `_meta` key the payment is sent under (x402 v2 MCP transport). */
+const PAYMENT_META_KEY = "x402/payment";
+/** `_meta` key the settlement receipt comes back under. */
+const PAYMENT_RESPONSE_META_KEY = "x402/payment-response";
+/**
+ * Read an x402 `PaymentRequired` challenge out of an MCP tool result.
+ *
+ * Per the spec a client SHOULD prefer `structuredContent` and fall back to parsing
+ * `content[0].text` — servers must send BOTH, but a server that sends only the text form is
+ * still payable, and treating it as unpayable would strand the user.
+ *
+ * @param result an MCP tool result
+ * @return the PaymentRequired body, or null when this is not a payment challenge
+ */
+export function parseToolChallenge(result) {
+    if (!result?.isError)
+        return null;
+    const isChallenge = (o) => !!o && typeof o === "object"
+        && o.x402Version !== undefined
+        && Array.isArray(o.accepts);
+    if (isChallenge(result.structuredContent))
+        return result.structuredContent;
+    const text = result.content?.[0]?.text;
+    if (typeof text === "string") {
+        try {
+            const parsed = JSON.parse(text);
+            if (isChallenge(parsed))
+                return parsed;
+        }
+        catch {
+            return null; // not JSON — an ordinary tool error, not a payment challenge
+        }
+    }
+    return null;
+}
+/**
+ * Call a tool on another MCP server, paying it if it answers with an x402 challenge.
+ *
+ * The authorize → sign → build-payload half is SHARED with `x402_pay` (`payCore`); only the
+ * envelope differs. Over MCP the payment travels as a RAW OBJECT in `_meta["x402/payment"]` —
+ * no base64, because MCP carries structured JSON natively.
+ *
+ * @param input the tool input
+ * @return the tool result, plus whether a payment was made
+ */
+export async function x402PayTool(input) {
+    const apiKey = input.apiKey ?? process.env.CRYPTOAPIS_API_KEY;
+    const walletId = input.walletId ?? process.env.X402_WALLET_ID;
+    if (!apiKey || !walletId) {
+        const missing = [!apiKey && "apiKey/CRYPTOAPIS_API_KEY", !walletId && "walletId/X402_WALLET_ID"].filter(Boolean).join(", ");
+        return { paid: false, reason: `missing credentials: ${missing} (pass as params or set the env vars)` };
+    }
+    const client = new Client({ name: "mcp-x402-pay", version: "0.4.0" }, { capabilities: {} });
+    const transport = new StdioClientTransport({
+        command: input.server.command,
+        args: input.server.args ?? [],
+        env: { ...process.env, ...(input.server.env ?? {}) },
+    });
+    try {
+        await client.connect(transport);
+        const params = { name: input.toolName, arguments: input.arguments ?? {} };
+        const first = await client.callTool(params);
+        const challenge = parseToolChallenge(first);
+        if (!challenge) {
+            // Not a payment challenge (success, or an ordinary tool error) — hand it back
+            // untouched rather than interpreting someone else's error.
+            return { paid: false, result: first };
+        }
+        const built = await buildPaymentForChallenge({
+            accepts: Array.isArray(challenge.accepts) ? challenge.accepts : [],
+            apiKey: apiKey,
+            walletId: walletId,
+            keys: resolveSigningKeys(input),
+            allowedNetworks: input.allowedNetworks,
+            maxAmount: input.maxAmount,
+            buyerBaseUrl: input.buyerBaseUrl,
+        });
+        if (!built.ok) {
+            // Return the original challenge alongside the reason so the agent can see the price.
+            return { paid: false, reason: built.reason, result: first };
+        }
+        // Exactly ONE retry, never a loop: a second challenge means the payment was rejected,
+        // and re-paying would risk paying twice for one call.
+        const paidResult = await client.callTool({
+            ...params,
+            _meta: { [PAYMENT_META_KEY]: built.paymentPayload },
+        });
+        return {
+            paid: !paidResult?.isError,
+            result: paidResult,
+            settlement: paidResult?._meta?.[PAYMENT_RESPONSE_META_KEY],
+        };
+    }
+    catch (err) {
+        return { paid: false, reason: `upstream MCP call failed: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    finally {
+        await client.close().catch(() => { });
+    }
+}
+export const x402PayToolDef = {
+    name: "x402_pay_tool",
+    description: "Call a TOOL on another MCP server and, if that tool requires payment, pay it automatically with x402 and return the paid result. This is the MCP-transport twin of x402_pay: use x402_pay for an HTTP url, and THIS for a paid tool on another MCP server. On a challenge it reads the PaymentRequired (from structuredContent, falling back to content[0].text), authorizes via the CryptoAPIs buyer /authorize, signs LOCALLY (non-custodial — the key never leaves this process), and retries the tool call once with the payment in _meta[\"x402/payment\"] (a raw object, no base64 — MCP carries structured JSON natively). Returns { paid, result, settlement? }; the settlement receipt comes back in _meta[\"x402/payment-response\"]. The upstream server is launched over stdio for the call and shut down afterwards. Same credentials and keys as x402_pay: CRYPTOAPIS_API_KEY + X402_WALLET_ID, plus X402_PRIVATE_KEY (EVM) / X402_SVM_SECRET (Solana). Supported today: EVM (eip712) and Solana; Tron, UTXO, Kaspa and XRP return a clear coming-soon result. Use allowedNetworks and maxAmount as guardrails. SECURITY: this tool holds spending keys and launches the process you name — use only in trusted local environments.",
+    inputSchema: X402PayToolSchema,
+    handler: async (input) => {
+        const result = await x402PayTool(input);
+        return { content: [{ type: "text", text: JSON.stringify(result) }] };
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/tools/x402-pay-tool/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/x402-pay-tool/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE7E,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,2DAA2D;AAC3D,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAS1D;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA8B;IAC7D,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,WAAW,GAAG,CAAC,CAAU,EAAgE,EAAE,CAC7F,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;WACxB,CAA6B,CAAC,WAAW,KAAK,SAAS;WACxD,KAAK,CAAC,OAAO,CAAE,CAA6B,CAAC,OAAO,CAAC,CAAC;IAE7D,IAAI,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAE3E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC;YACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,WAAW,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,CAAC,6DAA6D;QAC9E,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB;IAGrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5H,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,uCAAuC,EAAE,CAAC;IAC3G,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE;QAC7B,GAAG,EAAE,EAAE,GAAI,OAAO,CAAC,GAA8B,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;KACnF,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAe,CAAC;QAE1D,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,8EAA8E;YAC9E,2DAA2D;YAC3D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC;YAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACZ,qFAAqF;YACrF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChE,CAAC;QAED,sFAAsF;QACtF,sDAAsD;QACtD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACrC,GAAG,MAAM;YACT,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,cAAc,EAAE;SACtD,CAAe,CAAC;QAEjB,OAAO;YACH,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO;YAC1B,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,yBAAyB,CAAC;SAC7D,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACpH,CAAC;YAAS,CAAC;QACP,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAA6C;IACpE,IAAI,EAAE,eAAe;IACrB,WAAW,EACP,mrCAAmrC;IACvrC,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,KAAK,EAAE,KAAuB,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;CACJ,CAAC"}

package/dist/tools/x402-pay-tool/schema.d.ts

@@ -0,0 +1,76 @@
+import * as z from "zod";
+/**
+ * Call a TOOL on another MCP server and, if it answers with an x402 payment challenge, pay it
+ * and retry — the MCP-transport twin of `x402_pay` (which pays HTTP urls).
+ *
+ * Same credentials and per-family keys as `x402_pay`; only the envelope differs. See
+ * `specs/transports-v2/mcp.md`.
+ */
+export declare const X402PayToolSchema: z.ZodObject<{
+    server: z.ZodObject<{
+        command: z.ZodString;
+        args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }>;
+    toolName: z.ZodString;
+    arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    walletId: z.ZodOptional<z.ZodString>;
+    privateKey: z.ZodOptional<z.ZodString>;
+    tronKey: z.ZodOptional<z.ZodString>;
+    svmSecret: z.ZodOptional<z.ZodString>;
+    utxoWif: z.ZodOptional<z.ZodString>;
+    kaspaKey: z.ZodOptional<z.ZodString>;
+    xrpSeed: z.ZodOptional<z.ZodString>;
+    allowedNetworks: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    maxAmount: z.ZodOptional<z.ZodString>;
+    buyerBaseUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    server: {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    };
+    toolName: string;
+    apiKey?: string | undefined;
+    walletId?: string | undefined;
+    privateKey?: string | undefined;
+    tronKey?: string | undefined;
+    svmSecret?: string | undefined;
+    utxoWif?: string | undefined;
+    kaspaKey?: string | undefined;
+    xrpSeed?: string | undefined;
+    allowedNetworks?: string[] | undefined;
+    buyerBaseUrl?: string | undefined;
+    maxAmount?: string | undefined;
+    arguments?: Record<string, unknown> | undefined;
+}, {
+    server: {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    };
+    toolName: string;
+    apiKey?: string | undefined;
+    walletId?: string | undefined;
+    privateKey?: string | undefined;
+    tronKey?: string | undefined;
+    svmSecret?: string | undefined;
+    utxoWif?: string | undefined;
+    kaspaKey?: string | undefined;
+    xrpSeed?: string | undefined;
+    allowedNetworks?: string[] | undefined;
+    buyerBaseUrl?: string | undefined;
+    maxAmount?: string | undefined;
+    arguments?: Record<string, unknown> | undefined;
+}>;
+export type X402PayToolInput = z.infer<typeof X402PayToolSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/tools/x402-pay-tool/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/tools/x402-pay-tool/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B5B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/tools/x402-pay-tool/schema.js

@@ -0,0 +1,33 @@
+import * as z from "zod";
+/**
+ * Call a TOOL on another MCP server and, if it answers with an x402 payment challenge, pay it
+ * and retry — the MCP-transport twin of `x402_pay` (which pays HTTP urls).
+ *
+ * Same credentials and per-family keys as `x402_pay`; only the envelope differs. See
+ * `specs/transports-v2/mcp.md`.
+ */
+export const X402PayToolSchema = z.object({
+    // --- which upstream tool to call -------------------------------------------------------
+    server: z.object({
+        command: z.string().describe("Executable to launch the upstream MCP server, e.g. \"npx\""),
+        args: z.array(z.string()).optional().describe("Arguments, e.g. [\"-y\",\"@vendor/their-mcp-server\"]"),
+        env: z.record(z.string(), z.string()).optional().describe("Extra env for the upstream process (its own credentials, if it needs any)"),
+    }).describe("The upstream MCP server to call, launched over stdio. It is started for this call and shut down afterwards."),
+    toolName: z.string().describe("The name of the tool to call on that server"),
+    arguments: z.record(z.string(), z.unknown()).optional().describe("Arguments to pass to that tool"),
+    // --- credentials (identical to x402_pay) -----------------------------------------------
+    apiKey: z.string().optional().describe("Your CryptoAPIs API key with the X402_BUYER feature (used only to call the buyer /authorize). Falls back to the CRYPTOAPIS_API_KEY env var."),
+    walletId: z.string().optional().describe("The CryptoAPIs buyer-service wallet RECORD ID (from POST /wallets) — NOT the on-chain address. Falls back to the X402_WALLET_ID env var."),
+    // --- per-family signing keys (identical to x402_pay) -----------------------------------
+    privateKey: z.string().optional().describe("EVM private key (hex, 0x optional) — signs the eip712 payment, and Tron by default. Falls back to X402_PRIVATE_KEY. SECURITY: trusted local environments only."),
+    tronKey: z.string().optional().describe("Tron private key (hex). Falls back to X402_TRON_KEY, then to privateKey/X402_PRIVATE_KEY."),
+    svmSecret: z.string().optional().describe("Solana secret key, base58-encoded — signs svm-transaction payments. Falls back to X402_SVM_SECRET."),
+    utxoWif: z.string().optional().describe("UTXO private key in WIF format. Falls back to X402_UTXO_WIF."),
+    kaspaKey: z.string().optional().describe("Kaspa private key (hex). Falls back to X402_KASPA_KEY."),
+    xrpSeed: z.string().optional().describe("XRP secret/seed. Falls back to X402_XRP_SEED."),
+    // --- guardrails -------------------------------------------------------------------------
+    allowedNetworks: z.array(z.string()).optional().describe("Restrict which CAIP-2 networks to pay on (e.g. [\"eip155:8453\"])"),
+    maxAmount: z.string().optional().describe("Safety cap: refuse to pay if the required atomic-unit amount exceeds this"),
+    buyerBaseUrl: z.string().url().optional().describe("Override the buyer service base URL (default https://ai.cryptoapis.io/x402/buyer)"),
+});
+//# sourceMappingURL=schema.js.map

package/dist/tools/x402-pay-tool/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/tools/x402-pay-tool/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,0FAA0F;IAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAC1F,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QACtG,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2EAA2E,CAAC;KACzI,CAAC,CAAC,QAAQ,CAAC,6GAA6G,CAAC;IAE1H,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAElG,0FAA0F;IAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6IAA6I,CAAC;IACrL,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0IAA0I,CAAC;IAEpL,0FAA0F;IAC1F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gKAAgK,CAAC;IAC5M,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2FAA2F,CAAC;IACpI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IAC/I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;IACvG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAExF,2FAA2F;IAC3F,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC7H,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2EAA2E,CAAC;IACtH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mFAAmF,CAAC;CAC1I,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cryptoapis-io/mcp-x402-pay",
   "mcpName": "io.github.CryptoAPIs-io/mcp-x402-pay",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "MCP server that pays x402-gated HTTP endpoints — one x402_pay tool that fetches, and on a 402 authorizes via the CryptoAPIs buyer service, signs LOCALLY, and retries.",
   "license": "MIT",
   "type": "module",
@@ -37,6 +37,7 @@
     "test": "node -e \"console.log('test: add later')\"",
     "test:x402-pay": "tsx scripts/test-x402-pay.ts",
     "clean": "rimraf dist",
-    "test:x402-pay-families": "tsx scripts/test-x402-pay-families.ts"
+    "test:x402-pay-families": "tsx scripts/test-x402-pay-families.ts",
+    "test:x402-pay-tool": "tsx scripts/test-x402-pay-tool.ts"
   }
 }

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/CryptoAPIs-io/cryptoapis-mcp-x402-pay",
     "source": "github"
   },
-  "version": "0.2.0",
+  "version": "0.4.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@cryptoapis-io/mcp-x402-pay",
-      "version": "0.2.0",
+      "version": "0.4.0",
       "transport": {
         "type": "stdio"
       }