@moonpay/cli 0.3.2 → 0.3.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moonpay/cli",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "publishConfig": {
     "access": "public"
   },
@@ -21,8 +21,13 @@
   },
   "dependencies": {
     "@solana/web3.js": "^1.98.4",
+    "@x402/axios": "^2.4.0",
+    "@x402/core": "^2.4.0",
+    "@x402/svm": "^2.4.0",
+    "axios": "^1.13.5",
     "bs58": "^6.0.0",
     "commander": "^12.1.0",
+    "tweetnacl": "^1.0.3",
     "zod": "^3.25.76"
   },
   "devDependencies": {

package/skills/moonpay-auth/SKILL.md

@@ -1,14 +1,25 @@
 ---
 name: moonpay-auth
-description: Authenticate and manage local wallets with MoonPay CLI. Use when you need to log in, check auth state, or manage wallets for signing transactions.
+description: Set up the MoonPay CLI, authenticate, and manage local wallets. Use when commands fail, for login, or to create/import wallets.
 tags: [setup]
 ---
 
-# MoonPay auth
+# MoonPay auth and setup
 
-## Goal
+## Install
 
-Set up authentication and local wallet management for the MoonPay CLI (`mp`).
+```bash
+npm i -g @moonpay/cli
+```
+
+This installs the `mp` (and `moonpay`) binary globally.
+
+## Verify installation
+
+```bash
+mp --version
+mp --help
+```
 
 ## Auth commands
 
@@ -39,7 +50,6 @@ mp wallet list
 
 # Get wallet details (by name or address)
 mp wallet retrieve --wallet "my-wallet"
-mp wallet retrieve --wallet <address>
 
 # Delete a wallet (irreversible)
 mp wallet delete --wallet "my-wallet" --confirm
@@ -52,13 +62,37 @@ mp wallet delete --wallet "my-wallet" --confirm
 3. Run `mp wallet list` to see local wallets.
 4. If no wallets, create one: `mp wallet create --name "default"`.
 
-## Notes
+## Config locations
+
+- **Credentials:** `~/.config/moonpay/credentials.json` (OAuth tokens)
+- **Config:** `~/.config/moonpay/config.json` (base URL, client ID)
+- **Wallets:** `~/.config/moonpay/wallets/` (local keypairs, 0600 permissions)
+
+## Output formats
+
+```bash
+mp -f json wallet list    # Pretty JSON (default)
+mp -f compact wallet list # Single-line JSON
+mp -f table wallet list   # ASCII table
+```
+
+## Environment for scripts/agents
+
+If running `mp` from a script or agent subprocess, ensure PATH includes the npm global bin:
+
+```bash
+export PATH="$(npm config get prefix)/bin:$PATH"
+mp --version
+```
+
+## Troubleshooting
 
-- Credentials: `~/.config/moonpay/credentials.json`
-- Wallets: `~/.config/moonpay/wallets/`
+- **"command not found"** — `npm i -g @moonpay/cli` and check PATH.
+- **401 / auth errors** — Run `mp login`.
+- **"fetch failed"** — Check network connectivity to agents.moonpay.com.
 - Tokens auto-refresh on expiry. If refresh fails, run `mp login` again.
 
 ## Related skills
 
-- **moonpay-env** — Environment and PATH setup.
 - **moonpay-swap-tokens** — Swap tokens using local wallets.
+- **moonpay-check-wallet** — Check wallet balances.

package/skills/moonpay-buy-crypto/SKILL.md

@@ -28,7 +28,7 @@ mp buy \
 
 1. User: "I want to buy 1 SOL with my credit card."
 2. Run: `mp buy --token sol --amount 1 --wallet <address> --email user@example.com`
-3. Return the checkout URL for the user to open in their browser.
+3. Open the returned checkout URL in the user's browser so they can complete the purchase.
 
 ## Notes
 

package/skills/moonpay-check-wallet/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: moonpay-check-wallet
-description: Check wallet balances and holdings. Use for "what's in my wallet", portfolio breakdown, token balances, and USD values.
+description: Check wallet balances and holdings. Use for "what's in my wallet", portfolio breakdown, token balances, allocation percentages, and USD values.
 tags: [portfolio]
 ---
 
@@ -8,7 +8,7 @@ tags: [portfolio]
 
 ## Goal
 
-List all token balances held in a wallet with current USD values.
+List all token balances in a wallet with USD values, allocation breakdown, and total portfolio value.
 
 ## Commands
 
@@ -19,27 +19,39 @@ mp token balance list --wallet <address> --chain solana
 # List balances for an EVM wallet
 mp token balance list --wallet 0x... --chain ethereum
 mp token balance list --wallet 0x... --chain base
+
+# Find wallet address
+mp wallet list
 ```
 
 ## Supported chains
 
 `solana`, `ethereum`, `base`, `polygon`, `arbitrum`, `optimism`
 
-## Output handling
+## Workflow
 
-- Summarize top holdings by USD value.
-- Call out small dust balances separately.
-- Sum `balance.value` across items for total portfolio value.
+1. Run `mp wallet list` to find the user's wallet address.
+2. Run `mp token balance list --wallet <address> --chain solana`.
+3. Sort holdings by USD value descending.
+4. Calculate allocation percentages (each holding's USD / total USD).
+5. Present: top holdings, dust balances, total value.
 
 ## Example flow
 
-1. User: "What's in my wallet?"
-2. Run `mp wallet list` to find the user's wallet address.
-3. Run `mp token balance list --wallet <address> --chain solana`.
-4. Present holdings sorted by value.
+1. User: "What's in my wallet?" or "Generate a portfolio report."
+2. Run: `mp token balance list --wallet <address> --chain solana`
+3. Present:
+   - **Total value:** $168.05
+   - **SOL** — 0.61 ($51.87) — 30.9%
+   - **WBTC** — 0.00127 ($85.48) — 50.9%
+   - **USDC** — 29.81 ($29.81) — 17.7%
+   - **Dust:** none
+
+## Output formats
+
+Use `mp -f table token balance list ...` for a quick table view, or `mp -f json ...` for programmatic processing.
 
 ## Related skills
 
 - **moonpay-auth** — Set up wallets if none exist.
-- **moonpay-portfolio-report** — Full report with allocation percentages.
-- **moonpay-rug-check** — Risk-check a token before buying.
+- **moonpay-discover-tokens** — Research specific tokens in the portfolio.

package/skills/moonpay-discover-tokens/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: moonpay-discover-tokens
-description: Search for tokens and retrieve detailed market data. Use to find token addresses, check prices, volume, liquidity, and trading activity.
+description: Search for tokens, check prices, get trading briefs, and evaluate risk. Use for token research, "is this token safe?", price checks, and market analysis.
 tags: [research]
 ---
 
@@ -8,26 +8,20 @@ tags: [research]
 
 ## Goal
 
-Search for tokens by name/symbol and retrieve detailed market data including price, volume, liquidity, and trading activity.
+Search for tokens, retrieve market data, generate trading briefs, and assess risk — all from one skill.
 
 ## Commands
 
-### Search for tokens
-
 ```bash
-mp token search --query "SOL" --chain solana
-mp token search --query "BONK" --chain solana --limit 3
-```
-
-Returns matching tokens with market data (price, volume, liquidity, trades, buys/sells, unique wallets).
+# Search by name or symbol
+mp token search --query "BONK" --chain solana
 
-### Retrieve token details
-
-```bash
+# Get full details for a specific token
 mp token retrieve --token <mint-address> --chain solana
-```
 
-Returns token metadata (name, symbol, decimals, image) and market data.
+# See what's trending
+mp token trending list --chain solana
+```
 
 ## Supported chains
 
@@ -37,18 +31,46 @@ Returns token metadata (name, symbol, decimals, image) and market data.
 
 1. Search by name/symbol with `mp token search`.
 2. Use the returned address to get details with `mp token retrieve`.
-3. Evaluate risk with **moonpay-rug-check** for unknown tokens.
-4. Proceed to buy/swap if desired.
+3. Assess risk and generate a brief from the market data.
 
-## Example flow
+## Trading brief format
 
+When the user wants a brief or analysis, format the output like:
+
+```
+BONK (DezX...pump) — mcap $850M, liq $12M, vol24 $45M
+  momentum: 1h +2.3%, 4h -0.5%, 24h +8.1%
+  activity: trades24 12,500, wallets24 3,200
+  note: healthy volume, broad wallet distribution
+```
+
+## Risk assessment
+
+When the user asks "is this safe?" or wants to evaluate an unknown token, check these indicators from the market data:
+
+1. **Liquidity** — Under $10K is a red flag.
+2. **Volume pattern** — Sudden spikes with no context = suspicious.
+3. **Buy/sell ratio** — Extremely one-sided trading = dump risk.
+4. **Unique wallets** — Very few unique wallets = concentrated activity.
+5. **Market cap vs liquidity** — Huge mcap with tiny liquidity = inflated, hard to exit.
+6. **Price volatility** — Extreme short-term swings (>50% in 1h) = high risk.
+
+Present a risk summary with traffic-light ratings. This is a heuristic check based on market data, not a smart contract audit — always recommend caution with unknown tokens.
+
+## Example flows
+
+**Price check:**
 1. User: "What's the price of BONK?"
 2. Run: `mp token search --query "BONK" --chain solana`
 3. Present: name, symbol, price, 24h change, volume, liquidity.
 
+**Risk check:**
+1. User: "Is BONK safe to buy?"
+2. Run: `mp token search --query "BONK" --chain solana` then `mp token retrieve --token <address> --chain solana`
+3. Present risk indicators with ratings.
+
 ## Related skills
 
-- **moonpay-token-brief** — Detailed trading brief for a specific token.
-- **moonpay-rug-check** — Risk assessment for unknown tokens.
-- **moonpay-swap-tokens** — Swap after research.
+- **moonpay-swap-tokens** — Trade after research.
 - **moonpay-buy-crypto** — Buy with fiat after research.
+- **moonpay-check-wallet** — Check your current holdings.

package/skills/moonpay-missions/SKILL.md

@@ -4,7 +4,7 @@ description: A series of missions that walk through every MoonPay CLI capability
 tags: [setup]
 ---
 
-# MoonPay Orientation
+# MoonPay Missions
 
 Walk the user through a series of missions. Complete each one before moving to the next. After each mission, give a brief summary of what they just did and what's next.
 
@@ -27,9 +27,17 @@ Tell the user their email, wallet address, and that this wallet's private key li
 
 ## Mission 2: Recon
 
-**Goal:** Search for a token and pull up its intel.
+**Goal:** See what's trending and research a token.
 
-Ask the user to pick a token (or default to SOL). Then:
+First, check what's hot:
+
+```bash
+mp token trending list --chain solana --limit 5 --page 1
+```
+
+Present the top trending tokens with price, 24h change, and volume.
+
+Then ask the user to pick a token to research (or default to SOL):
 
 ```bash
 mp token search --query "<token>" --chain solana
@@ -71,13 +79,13 @@ If no, move on. Either way, explain what just happened: the transaction was buil
 
 ## Mission 5: Buy with Fiat
 
-**Goal:** Generate a fiat checkout link.
+**Goal:** Generate a fiat checkout link and open it.
 
 ```bash
 mp buy --token sol --amount 1 --wallet <address> --email <email-from-mission-1>
 ```
 
-Present the checkout URL. Explain: this opens MoonPay's fiat gateway where they can pay with a card or bank transfer. Tokens get sent to their wallet.
+Present the checkout URL and open it in the user's browser. Explain: this is MoonPay's fiat gateway where they can buy crypto with a card or bank transfer. Tokens get sent directly to their wallet.
 
 ## Mission 6: Message Signing
 

package/skills/moonpay-x402/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: moonpay-x402
+description: Make paid API requests to x402-protected endpoints. Automatically handles payment with your local wallet.
+tags: [payments, api]
+---
+
+# x402 paid API requests
+
+## Goal
+
+Make HTTP requests to x402-protected endpoints. The CLI automatically detects 402 Payment Required responses, builds and signs a Solana payment transaction with your local wallet, and retries the request with the payment proof.
+
+## Command
+
+```bash
+mp x402 request \
+  --method POST \
+  --url <x402-endpoint-url> \
+  --body '<json-body>' \
+  --wallet <wallet-name-or-address>
+```
+
+## Available x402 endpoints
+
+| Endpoint | Cost | Input |
+|----------|------|-------|
+| `https://agents.moonpay.com/api/x402/tools/market_digest_retrieve` | $0.01 | `{"chain": "solana"}` |
+| `https://agents.moonpay.com/api/x402/tools/token_digest_retrieve` | $0.01 | `{"token": "<mint>", "chain": "solana"}` |
+| `https://agents.moonpay.com/api/x402/tools/wallet_digest_retrieve` | $0.01 | `{"wallet": "<address>", "chain": "solana"}` |
+
+## Example flow
+
+1. User: "Get me a market digest for Solana."
+2. Run: `mp x402 request --method POST --url "https://agents.moonpay.com/api/x402/tools/market_digest_retrieve" --body '{"chain": "solana"}' --wallet my-wallet`
+3. The CLI handles the 402 payment flow automatically and returns the digest.
+
+## Notes
+
+- Requires a local wallet with USDC to pay for requests.
+- Payments are on Solana mainnet.
+- If the tool request fails (status >= 400), the payment is not settled — you don't pay for errors.
+- Use **moonpay-auth** to set up a local wallet first.
+
+## Related skills
+
+- **moonpay-auth** — Create or import a local wallet.
+- **moonpay-check-wallet** — Check your wallet balance before making paid requests.

package/skills/moonpay-env/SKILL.md

@@ -1,57 +0,0 @@
----
-name: moonpay-env
-description: Ensure the MoonPay CLI environment is set up correctly. Use when commands fail due to PATH or config issues.
-tags: [setup]
----
-
-# MoonPay environment setup
-
-## Install
-
-```bash
-npm i -g @moonpay/cli
-```
-
-This installs the `mp` (and `moonpay`) binary globally.
-
-## Verify installation
-
-```bash
-mp --version
-mp --help
-```
-
-## Config locations
-
-- **Credentials:** `~/.config/moonpay/credentials.json` (OAuth tokens)
-- **Config:** `~/.config/moonpay/config.json` (base URL, client ID)
-- **Wallets:** `~/.config/moonpay/wallets/` (local keypairs, 0600 permissions)
-
-## Environment for scripts/agents
-
-If running `mp` from a script or agent subprocess, ensure PATH includes the npm global bin:
-
-```bash
-export PATH="$(npm config get prefix)/bin:$PATH"
-mp --version
-```
-
-## Output formats
-
-The CLI supports three output formats via `-f`:
-
-```bash
-mp -f json wallet list    # Pretty JSON (default)
-mp -f compact wallet list # Single-line JSON
-mp -f table wallet list   # ASCII table
-```
-
-## Troubleshooting
-
-- **"command not found"** — `npm i -g @moonpay/cli` and check PATH.
-- **401 / auth errors** — Run `mp login`.
-- **"fetch failed"** — Check network connectivity to agents.moonpay.com.
-
-## Related skills
-
-- **moonpay-auth** — Login, logout, wallet management.

package/skills/moonpay-portfolio-report/SKILL.md

@@ -1,49 +0,0 @@
----
-name: moonpay-portfolio-report
-description: Generate a portfolio summary with holdings, allocation breakdown, and USD totals. Use when the user asks for a portfolio overview or report.
-tags: [portfolio]
----
-
-# Portfolio report
-
-## Goal
-
-Produce a structured portfolio report for a wallet: holdings with USD values, allocation percentages, and total portfolio value.
-
-## Commands
-
-```bash
-# Get all balances
-mp token balance list --wallet <address> --chain solana
-
-# Get details on a specific token (optional)
-mp token retrieve --token <mint-address> --chain solana
-```
-
-## Workflow
-
-1. Run `mp wallet list` to find the user's wallet address.
-2. Call `mp token balance list` with the wallet and chain.
-3. Sort holdings by USD value descending.
-4. Calculate allocation percentages (each holding's USD / total USD).
-5. Format into sections: Top Holdings, Dust Balances, Total Value.
-
-## Example flow
-
-1. User: "Generate a portfolio report."
-2. Run: `mp token balance list --wallet <address> --chain solana`
-3. Present:
-   - **Total value:** $168.05
-   - **SOL** — 0.61 ($51.87) — 30.9%
-   - **WBTC** — 0.00127 ($85.48) — 50.9%
-   - **USDC** — 29.81 ($29.81) — 17.7%
-   - **Dust:** none
-
-## Output formats
-
-Use `mp -f table token balance list ...` for a quick table view, or `mp -f json ...` for programmatic processing.
-
-## Related skills
-
-- **moonpay-check-wallet** — Quick balance check (this skill builds on it).
-- **moonpay-discover-tokens** — Research specific tokens in the portfolio.

package/skills/moonpay-rug-check/SKILL.md

@@ -1,59 +0,0 @@
----
-name: moonpay-rug-check
-description: Analyze a token for rug pull risk indicators. Use when the user asks "is this token safe?" or wants to evaluate an unknown token before buying.
-tags: [research]
----
-
-# Rug check
-
-## Goal
-
-Assess a token's risk profile using available market data. Give the user a clear risk summary before they buy.
-
-## Commands
-
-```bash
-# Resolve token address
-mp token search --query "BONK" --chain solana
-
-# Get market data
-mp token retrieve --token <mint-address> --chain solana
-```
-
-## Risk indicators to check
-
-1. **Liquidity** — Low liquidity = easy to manipulate. Under $10K is a red flag.
-2. **Volume pattern** — Compare 5m/1h/4h/24h volume. Sudden spikes with no context = suspicious.
-3. **Buy/sell ratio** — Heavy sell pressure or extremely one-sided trading = dump risk.
-4. **Unique wallets** — Very few unique wallets trading = concentrated activity.
-5. **Market cap vs liquidity** — Huge mcap with tiny liquidity = inflated, hard to exit.
-6. **Price volatility** — Extreme short-term swings (>50% in 1h) = high risk.
-
-## Workflow
-
-1. Resolve token via `mp token search` if user provides name/symbol.
-2. Call `mp token retrieve` for market data.
-3. Analyze against risk indicators above.
-4. Present a risk summary with traffic-light ratings.
-
-## Example flow
-
-1. User: "Is BONK safe to buy?"
-2. Search: `mp token search --query "BONK" --chain solana`
-3. Retrieve: `mp token retrieve --token <address> --chain solana`
-4. Present:
-   - Liquidity: $12M (green)
-   - Volume 24h: $45M (green)
-   - Buy/sell ratio: balanced (green)
-   - Unique wallets 24h: 3,200 (green)
-   - **Overall: Low risk**
-
-## Notes
-
-- This is a heuristic check based on market data, not a smart contract audit.
-- Always recommend caution with unknown tokens regardless of data.
-
-## Related skills
-
-- **moonpay-discover-tokens** — Token search and research.
-- **moonpay-token-brief** — Detailed market data brief.

package/skills/moonpay-token-brief/SKILL.md

@@ -1,47 +0,0 @@
----
-name: moonpay-token-brief
-description: Generate a concise trading brief for a token with market cap, liquidity, volume, momentum, and activity metrics.
-tags: [research]
----
-
-# Token brief
-
-## Goal
-
-Given a token address, produce a compact brief with key trading metrics.
-
-## Command
-
-```bash
-mp token retrieve --token <mint-address> --chain solana
-```
-
-## What to include
-
-- **Identity:** name, symbol, address
-- **Market data:**
-  - Market cap, liquidity, volume (24h)
-  - Price change % (5m, 1h, 4h, 12h, 24h)
-  - Trades, buys/sells, unique wallets (5m through 24h)
-- **Risk notes:** thin liquidity, cooling volume, extreme swings
-
-## Example output format
-
-```
-BONK (DezX...pump) — mcap $850M, liq $12M, vol24 $45M
-  momentum: 1h +2.3%, 4h -0.5%, 24h +8.1%
-  activity: trades24 12,500, wallets24 3,200
-  note: healthy volume, broad wallet distribution
-```
-
-## Workflow
-
-1. If user provides name/symbol, resolve with `mp token search`.
-2. Call `mp token retrieve` for the full data.
-3. Format into a brief.
-
-## Related skills
-
-- **moonpay-discover-tokens** — Search if you only have a name/symbol.
-- **moonpay-rug-check** — Risk assessment for unknown tokens.
-- **moonpay-swap-tokens** — Trade after analysis.