@oobe-protocol-labs/sap-mcp-server 0.1.0

package/.env.example

@@ -0,0 +1,159 @@
+# SAP MCP Server - Environment Configuration
+# Copy this file to .env and customize for your environment
+
+# =============================================================================
+# Server Mode (default: readonly)
+# =============================================================================
+# - readonly: No signing, read-only operations only (SAFE)
+# - local-dev-keypair: Uses local wallet for signing (DEV ONLY)
+# - external-signer: Prepares TXs for external signing service
+# - delegated-session: Uses delegated session with permissions
+# - hosted-api: Hosted mode with HTTP transport
+
+SAP_MCP_MODE=readonly
+
+# Prefer profile/config pointers for MCP clients such as Hermes, Claude, Codex, or OpenClaw.
+# This avoids stale YAML env values shadowing the active JSON profile.
+# SAP_MCP_PROFILE=gianni-market-nft-agent
+# SAP_MCP_CONFIG_PATH=~/.config/mcp-sap/config-gianni-market-nft-agent.json
+# Set this only when you intentionally want env RPC/mode/wallet to override a profile JSON.
+# SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE=false
+
+# =============================================================================
+# Solana RPC Configuration
+# =============================================================================
+
+SAP_RPC_URL=https://api.mainnet-beta.solana.com
+# SAP_MCP_RPC_URL is a compatibility alias for explicit RPC override.
+# Do not set it in MCP client YAML when using SAP_MCP_PROFILE or SAP_MCP_CONFIG_PATH.
+# SAP_MCP_RPC_URL=https://api.mainnet-beta.solana.com
+# SAP_RPC_URL_DEVNET=https://api.devnet.solana.com
+# SAP_RPC_URL_TESTNET=https://api.testnet.solana.com
+
+# =============================================================================
+# SAP Program Configuration
+# =============================================================================
+
+SAP_PROGRAM_ID=SAPpUhsWLJG1FfkGRcXagEDMrMsWGjbky7AyhGpFETZ
+
+# =============================================================================
+# Commitment & Performance
+# =============================================================================
+
+SAP_COMMITMENT=confirmed
+SAP_MAX_RETRIES=3
+SAP_RETRY_DELAY_MS=1000
+
+# =============================================================================
+# Signer Configuration (for local-dev-keypair mode)
+# =============================================================================
+
+# Path to wallet keypair JSON file (KEEP SECURE!)
+# SAP_WALLET_PATH=/path/to/your/wallet.json
+# SAP_WALLET_ENCRYPTED=false
+# SAP_WALLET_PASSPHRASE_ENV=WALLET_PASSPHRASE
+
+# =============================================================================
+# External Signer Configuration (for external-signer mode)
+# =============================================================================
+
+# SAP_EXTERNAL_SIGNER_URL=https://signer.example.com/api/v1/sign
+# Local signing proxy form:
+# SAP_EXTERNAL_SIGNER_URL=http://127.0.0.1:8765/sign/<profile>
+# Start with:
+# SAP_SIGNING_AUTH_TOKEN=replace-with-local-token sap-signing-proxy
+# SAP_EXTERNAL_SIGNER_AUTH_TOKEN=replace-with-local-token
+# SAP_EXTERNAL_SIGNER_TIMEOUT_MS=30000
+
+# =============================================================================
+# HTTP Transport Configuration (for hosted-api mode)
+# =============================================================================
+
+SAP_ENABLE_HTTP=false
+SAP_HTTP_PORT=8787
+SAP_HTTP_HOST=127.0.0.1
+# SAP_HTTP_CORS_ORIGINS=https://app.example.com,https://admin.example.com
+
+# =============================================================================
+# Remote MCP Access Control
+# =============================================================================
+# Public agent-facing deployments can be bearerless and rely on x402 for paid
+# tools plus rate limits/policy for free tools. Enterprise/private deployments
+# can still use api_key or jwt.
+# SAP_MCP_AUTH_TYPE=none
+# SAP_MCP_AUTH_TYPE=api_key
+# SAP_MCP_API_KEYS=<api-key>=<operator-id>
+# SAP_MCP_AUTH_TYPE=jwt
+# SAP_MCP_AUTH_SECRET=<private-jwt-secret>
+
+# =============================================================================
+# Security & Spending Limits
+# =============================================================================
+
+SAP_MAX_TX_VALUE_SOL=10
+SAP_REQUIRE_APPROVAL_ABOVE_SOL=1
+SAP_DAILY_LIMIT_SOL=100
+# SAP_ALLOWED_TOOLS=all
+# SAP_ALLOWED_TOOLS=sap_get_agent,sap_list_agents,sap_get_reputation
+
+# =============================================================================
+# Logging & Observability
+# =============================================================================
+
+SAP_LOG_LEVEL=info
+SAP_LOG_FORMAT=pretty
+# SAP_LOG_FILE=/path/to/sap-mcp.log
+SAP_ENABLE_METRICS=false
+# SAP_METRICS_PORT=9090
+
+# =============================================================================
+# Advanced Configuration
+# =============================================================================
+
+SAP_ENABLE_CACHE=true
+SAP_CACHE_TTL_SECONDS=300
+SAP_ENABLE_RATE_LIMIT=true
+SAP_RATE_LIMIT_PER_MINUTE=60
+
+# =============================================================================
+# Hosted Remote Monetization (x402 v2 / pay.sh)
+# =============================================================================
+# Applies only to hosted HTTP MCP traffic. Local stdio remains free.
+
+SAP_MCP_MONETIZATION_ENABLED=false
+SAP_MCP_MONETIZATION_PROVIDER=x402
+# SAP_MCP_MONETIZATION_PAY_TO=YOUR_SOLANA_USDC_RECIPIENT
+# Optional CAIP-2 override. If omitted, derived from SAP_RPC_URL.
+# SAP_MCP_MONETIZATION_NETWORK=solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
+# Required when monetization is enabled. Use OOBE hosted facilitator or a self-hosted sap-mcp-facilitator.
+# SAP_MCP_X402_FACILITATOR_URL=<private-or-hosted-facilitator-url>
+SAP_MCP_X402_MAX_TIMEOUT_SECONDS=120
+# SAP_MCP_X402_FACILITATOR_AUTH_TOKEN=
+# Optional browser/manual checkout link included in 402 JSON responses.
+# SAP_MCP_PAY_SH_CHECKOUT_URL=https://pay.sh/checkout/YOUR_CHECKOUT_ID
+
+# OOBE self-hosted x402 facilitator.
+# The facilitator signer is a dedicated fee-payer keypair used only to complete
+# and submit x402 SVM settlement transactions. It is NOT the payTo recipient,
+# NOT an SAP agent wallet, and NOT the Solana CLI default keypair.
+# Create it with: npx sap-mcp-facilitator init
+# Fund its public key with SOL on every configured network for transaction fees.
+SAP_MCP_FACILITATOR_HOST=127.0.0.1
+SAP_MCP_FACILITATOR_PORT=1111
+SAP_MCP_FACILITATOR_PATH_PREFIX=/facilitator
+SAP_MCP_FACILITATOR_NETWORKS=devnet
+# SAP_MCP_FACILITATOR_SIGNER_PATH=~/.config/mcp-sap/keypairs/oobe-x402-facilitator-keypair.json
+# SAP_MCP_FACILITATOR_RPC_URL=https://api.devnet.solana.com
+# SAP_MCP_FACILITATOR_AUTH_TOKEN=
+
+# Initial pricing:
+# Free: tools/list, prompts/list, resources/list, sap_profile_current, base overview.
+# Read premium: enriched discovery/indexes/network stats.
+# Builder: SNS batch checks, analytics, transaction builders.
+# Value action: fixed fee plus basis-points fee when public USD notional is present.
+SAP_MCP_PRICE_READ_PREMIUM_USD=0.008
+SAP_MCP_PRICE_BUILDER_USD=0.05
+SAP_MCP_PRICE_VALUE_FIXED_USD=0.20
+SAP_MCP_PRICE_VALUE_BPS=50
+SAP_MCP_PRICE_MIN_USD=0.001
+SAP_MCP_PRICE_MAX_USD=100

package/CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+## 0.1.0 - 2026-06-29
+
+### Added
+
+- Added production local and remote MCP launch documentation.
+- Added profile-managed configuration docs for `~/.config/mcp-sap`.
+- Added bundled SAP MCP skills and SAP SDK tool-routing documentation.
+- Added profile inspection and switching tools for MCP clients.
+- Added transaction decode, preview, signing, and submission tools with policy checks.
+- Added SNS tool coverage for `synapse-sap-sdk` 0.21.x.
+- Added MCP client config injection support for Claude, Hermes, OpenClaw, and Codex.
+- Added optional remote-only x402 v2/pay.sh monetization gate for hosted MCP `tools/call` requests.
+- Added hosted MCP pricing registry, payment usage ledger, and monetization documentation.
+- Added `sap-mcp-facilitator` for OOBE-operated x402 SVM `/supported`, `/verify`, and `/settle` facilitation.
+- Added `sap-mcp-pay-sh-spec` to generate a pay.sh provider YAML for hosted SAP MCP proxy monetization.
+- Added a code quality audit document with release gates, engineering rules, and residual risk tracking.
+
+### Changed
+
+- Runtime profile configuration now protects profile-owned RPC, mode, program, and wallet values from stale MCP client environment variables unless `SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE=true`.
+- The wizard creates named profiles and dedicated keypairs under `~/.config/mcp-sap`.
+- The wizard UI now uses an aqua-first visual system, clearer step descriptions, and no-color accessibility support for terminal environments.
+- The wizard MCP client setup step can now print manual JSON snippets for hosted `https://mcp.sap.oobeprotocol.ai/mcp` and local active-profile setups.
+- The wizard now exposes hosted `https://mcp.sap.oobeprotocol.ai/mcp` as the recommended MCP client connection path and keeps it separate from local profile injection.
+- Hosted MCP onboarding now states that users connect to the hosted URL while x402/pay.sh payments and value-moving tool transactions still require a wizard-created user SAP profile and user-controlled signer.
+- Remote hosted deployments now publish `/.well-known/sap-mcp-wizard.json` and `/wizard/install.sh` so agents can direct users to the wizard when local SAP MCP config is missing or inaccessible.
+- Agent context prompts now instruct agents to preserve the user's request language and avoid exposing keypair material.
+- Tool documentation now reflects the current runtime registry: 232 tools.
+- Remote HTTP transports can now gate paid tool calls before execution and settle x402 payments after successful MCP responses.
+- Monetization now requires an explicit facilitator URL and documents OOBE hosted/self-hosted facilitator deployment.
+- Hybrid policy logging now uses the structured runtime logger instead of direct console output.
+
+### Fixed
+
+- Fixed ESM-safe Solana balance support through `sol_get_balance`.
+- Fixed stale permission mappings with an alignment test against the registered MCP tool surface.
+- Fixed Bento policy integration tests and fail-open/fail-closed behavior.
+- Fixed package release hygiene with a real MIT license, public docs, examples, schema, and changelog.
+- Fixed TypeScript ESLint setup for open-source CI readiness.
+- Fixed profile reloads to use the canonical runtime config pipeline, including new monetization defaults.
+- Fixed signing proxy startup so env-only deployments do not require a default `config.json`.
+- Removed legacy root-level documentation that conflicted with the numbered public docs.
+- Removed generated macOS metadata from the source tree.
+
+### Security
+
+- Local keypair signing is isolated to the SAP MCP profile wallet and does not touch the Solana CLI keypair.
+- MCP client injection no longer pins wallet paths or RPC overrides by default.
+- Private key and transaction policy guards run before MCP tool execution/signing paths.
+- Payment audit logs store request hashes and settlement metadata, not keypair bytes, raw arguments, or x402 payment signatures.
+- Paid x402 virtual resource paths are bound to the SHA-256 hash of the exact JSON-RPC request body.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OOBE Protocol Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,223 @@
+# SAP MCP Server
+
+Production-oriented Model Context Protocol server for OOBE Synapse Agent Protocol, Solana, Synapse AgentKit, SNS, and monetized hosted agent workflows.
+
+SAP MCP exposes the same typed tool registry through two supported MCP launch modes:
+
+1. Local stdio for desktop agents and local development.
+2. Remote Streamable HTTP at `/mcp` for hosted customers and orchestrators.
+
+It also includes a professional setup wizard, profile-managed config under `~/.config/mcp-sap`, optional Bento policy integration, local and external signing modes, x402 monetization, a self-hosted OOBE facilitator, pay.sh provider YAML generation, and an A2A-compatible discovery card.
+
+## 1. Status
+
+| Area | Current behavior |
+| --- | --- |
+| Package version | `0.1.0` |
+| MCP transport | stdio locally, Streamable HTTP remotely |
+| Remote access | Bearerless public mode for hosted agents; API key or JWT for private modes |
+| Config directory | `~/.config/mcp-sap` only |
+| Agent wallet | Dedicated wallet path under `~/.config/mcp-sap/keypairs/` by default |
+| Solana CLI keypair | Never modified by the wizard |
+| Policy | Local policy by default, optional Bento or hybrid policy |
+| Monetization | Optional remote-only x402/pay.sh payment flow with per-tool pricing |
+| Signing | Local dedicated wallet or external signer, depending on profile mode |
+| Discovery | A2A-compatible card at `/.well-known/agent-card.json` |
+
+## 2. Install
+
+From source:
+
+```bash
+pnpm install
+pnpm run build
+```
+
+From the published package:
+
+```bash
+npm install -g @oobe-protocol-labs/sap-mcp-server
+```
+
+## 3. Quick Start
+
+Create or select a profile:
+
+```bash
+npx sap-mcp-config wizard
+```
+
+Inspect the active profile:
+
+```bash
+npx sap-mcp-config show
+npx sap-mcp-config pubkey
+npx sap-mcp-config profiles
+```
+
+Start local stdio MCP:
+
+```bash
+sap-mcp-server
+```
+
+or from source:
+
+```bash
+node dist/cli.js
+```
+
+Hosted customers connect their agents to `https://mcp.sap.oobeprotocol.ai/mcp`, but signing remains user-controlled. Any user who wants to pay x402/pay.sh charges, register or operate a SAP identity, or execute value-moving Solana/SAP tools should run the wizard first and keep the dedicated wallet under `~/.config/mcp-sap/keypairs/` or behind an external signer. Read-only hosted discovery can use the remote URL without a local signer.
+
+## 4. Local Client Config
+
+For local agents, let SAP MCP follow the active profile manager instead of hard-coding wallet paths or stale RPC overrides:
+
+```json
+{
+  "mcpServers": {
+    "sap": {
+      "command": "sap-mcp-server",
+      "env": {
+        "SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE": "false",
+        "SAP_LOG_LEVEL": "info"
+      }
+    }
+  }
+}
+```
+
+See [04. Local Stdio Usage](docs/04_LOCAL_STDIO_USAGE.md).
+
+## 5. Remote Server
+
+Remote deployments expose MCP over Streamable HTTP:
+
+```bash
+node dist/remote/server.js
+```
+
+Production environment values should come from a private secret store or private deployment file, not from public docs. Public hosted agent-facing deployments can use `SAP_MCP_AUTH_TYPE=none` when x402, rate limits, and policy are enabled. API key or JWT auth remains available for private beta, enterprise, and admin deployments.
+
+Remote endpoints:
+
+```text
+GET     /health
+GET     /.well-known/agent-card.json
+GET     /.well-known/sap-mcp-wizard.json
+GET     /wizard/install.sh
+POST    /mcp
+GET     /mcp
+DELETE  /mcp
+```
+
+See [05. Remote VPS Deployment](docs/05_REMOTE_VPS_DEPLOYMENT.md) and [07. Endpoints And Clients](docs/07_ENDPOINTS_AND_CLIENTS.md).
+
+## 6. Monetization
+
+Hosted HTTP deployments can require payment for paid `tools/call` requests while leaving local stdio and base MCP protocol calls free.
+
+Initial model:
+
+| Tier | Examples | Price |
+| --- | --- | --- |
+| Free | `tools/list`, `prompts/list`, `resources/list`, `sap_profile_current`, base overview | Free |
+| Premium read | `sap_list_all_agents`, enriched network stats, indexed discovery | `$0.007` to `$0.01` |
+| Builder or batch | complex builders, SNS/domain batch checks, enriched analytics | `$0.01` to `$0.10` |
+| Value action | selected value-linked operations | fixed `$0.20` plus optional `0.5%` |
+
+Enable x402:
+
+```bash
+SAP_MCP_MONETIZATION_ENABLED=true
+SAP_MCP_MONETIZATION_PROVIDER=x402
+SAP_MCP_MONETIZATION_PAY_TO=YOUR_SOLANA_USDC_RECIPIENT
+SAP_MCP_X402_FACILITATOR_URL=YOUR_PRIVATE_OR_HOSTED_FACILITATOR_URL
+```
+
+Initialize and run the OOBE facilitator:
+
+```bash
+npx sap-mcp-facilitator init
+npx sap-mcp-facilitator start
+```
+
+Generate a pay.sh provider YAML:
+
+```bash
+npx sap-mcp-pay-sh-spec \
+  --out sap-mcp-pay-sh.yml \
+  --upstream-url https://mcp.sap.oobeprotocol.ai \
+  --network mainnet \
+  --recipient YOUR_SOLANA_USDC_RECIPIENT
+```
+
+See [06. Payments, x402, And pay.sh](docs/06_PAYMENTS_X402_AND_PAYSH.md).
+
+## 7. Commands
+
+```bash
+pnpm run typecheck
+pnpm run lint
+pnpm test -- --run
+pnpm run build
+pnpm run verify:release
+```
+
+Installed binaries:
+
+| Command | Purpose |
+| --- | --- |
+| `sap-mcp-server` | Local stdio MCP server and CLI entry point |
+| `sap-mcp-remote` | Remote MCP server with bearerless, API key, and JWT modes |
+| `sap-mcp-config` | Config CLI, profile manager, approval workflow, and wizard |
+| `sap-mcp-wizard` | TUI configuration wizard |
+| `sap-signing-proxy` | Local signing proxy |
+| `sap-mcp-facilitator` | Self-hosted x402 SVM facilitator |
+| `sap-mcp-pay-sh-spec` | pay.sh provider YAML generator |
+
+## 8. Documentation
+
+Start with [00. Documentation Index](docs/00_README.md).
+
+| Document | Purpose |
+| --- | --- |
+| [01. Product Overview](docs/01_PRODUCT_OVERVIEW.md) | Product model, users, public/private repo guidance, and wizard distribution. |
+| [02. Architecture And Request Flow](docs/02_ARCHITECTURE_AND_REQUEST_FLOW.md) | Runtime modules, local flow, remote flow, signing, payments, and trust boundaries. |
+| [03. Configuration And Wizard](docs/03_CONFIGURATION_AND_WIZARD.md) | Profile manager, wizard, wallet isolation, client injection, and config CLI. |
+| [04. Local Stdio Usage](docs/04_LOCAL_STDIO_USAGE.md) | Local setup for Claude, Hermes, Codex, OpenClaw, and development agents. |
+| [05. Remote VPS Deployment](docs/05_REMOTE_VPS_DEPLOYMENT.md) | Hosted deployment, reverse proxy, PM2, and customer onboarding. |
+| [06. Payments, x402, And pay.sh](docs/06_PAYMENTS_X402_AND_PAYSH.md) | Pricing, x402 gate, pay.sh provider YAML, facilitator signer, and settlement. |
+| [07. Endpoints And Clients](docs/07_ENDPOINTS_AND_CLIENTS.md) | HTTP endpoints, headers, smoke tests, and client examples. |
+| [08. Security, Policy, And Signing](docs/08_SECURITY_POLICY_AND_SIGNING.md) | Key material rules, signer modes, Bento policy, and transaction safety. |
+| [09. Tools, Skills, And Agent Guide](docs/09_TOOLS_SKILLS_AND_AGENT_GUIDE.md) | Tool families, SDK doc pointers, skills, and agent behavior. |
+| [10. Operations, Release, And PM2](docs/10_OPERATIONS_RELEASE_AND_PM2.md) | Quality gates, PM2, secrets, release packaging, and changelog discipline. |
+| [11. Code Quality Audit](docs/11_CODE_QUALITY_AUDIT.md) | Current engineering scorecard, release gates, quality rules, and residual risks. |
+
+## 9. Repository Layout
+
+```text
+src/
+  adapters/      MCP and Solana adapter helpers
+  config/        Runtime config, secure config manager, setup wizard pipeline
+  core/          Shared runtime types, errors, logger, constants
+  payments/      x402 monetization, facilitator, usage ledger, pay.sh spec
+  policy/        Local, Bento, and hybrid policy engines
+  remote/        Streamable HTTP MCP server
+  resources/     MCP resources
+  security/      Private-key, unsafe-action, and permission guards
+  server/        MCP server factory and capability registration
+  signer/        Local, delegated, and external signer adapters
+  tools/         SAP, Solana, AgentKit, SNS, profile, skill, and payment tools
+  transports/    stdio and local HTTP transport helpers
+```
+
+## 10. License
+
+SAP MCP Server is released under the [MIT License](LICENSE).
+
+## 11. Partner Products
+
+| Partner / Product | Integration |
+| --- | --- |
+| [@bentoguard / Bento Guard](https://github.com/bentoguard) | Optional policy layer for AI-assisted intent scoring, escalation, and hybrid local/Bento guardrails. Uses the optional `@bentoguard/sdk` package and credentials from [app.bentoguard.xyz](https://app.bentoguard.xyz). |

package/config.example.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "./config.schema.json",
+  "_comment": "SAP MCP Server Configuration - User-specific overrides",
+  "_docs": "https://github.com/oobe-protocol-labs/sap-mcp-server#configuration",
+  
+  "mode": "readonly",
+  
+  "rpcUrl": "https://api.mainnet-beta.solana.com",
+  "rpcUrlDevnet": "https://api.devnet.solana.com",
+  "rpcUrlTestnet": "https://api.testnet.solana.com",
+  
+  "programId": "SAPpUhsWLJG1FfkGRcXagEDMrMsWGjbky7AyhGpFETZ",
+  
+  "commitment": "confirmed",
+  "maxRetries": 3,
+  "retryDelayMs": 1000,
+  
+  "walletPath": "~/.config/mcp-sap/keypairs/dev-wallet-keypair.json",
+  "walletEncrypted": false,
+  
+  "externalSignerUrl": "https://signer.example.com/api/v1/sign",
+  "externalSignerTimeoutMs": 30000,
+  
+  "enableHttp": false,
+  "httpPort": 8787,
+  "httpHost": "127.0.0.1",
+  "httpCorsOrigins": ["https://app.example.com", "https://admin.example.com"],
+  
+  "maxTxValueSol": 10,
+  "requireApprovalAboveSol": 1,
+  "dailyLimitSol": 100,
+  "allowedTools": "all",
+  
+  "logLevel": "info",
+  "logFormat": "pretty",
+  "logFile": "~/.local/share/mcp-sap/logs/sap-mcp.log",
+  
+  "enableMetrics": false,
+  "metricsPort": 9090,
+  
+  "enableCache": true,
+  "cacheTtlSeconds": 300,
+  
+  "enableRateLimit": true,
+  "rateLimitPerMinute": 60,
+
+  "monetization": {
+    "enabled": false,
+    "provider": "x402",
+    "payTo": "YOUR_SOLANA_USDC_RECIPIENT",
+    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
+    "facilitatorUrl": "https://x402.oobeprotocol.ai/facilitator",
+    "maxTimeoutSeconds": 120,
+    "payShCheckoutUrl": "https://pay.sh/checkout/YOUR_CHECKOUT_ID",
+    "prices": {
+      "readPremiumUsd": 0.008,
+      "builderUsd": 0.05,
+      "valueFixedUsd": 0.2,
+      "valueBps": 50,
+      "minUsd": 0.001,
+      "maxUsd": 100
+    }
+  }
+}