@oobe-protocol-labs/sap-mcp-server 0.1.0

package/skills/sap-mcp/SKILL.md

@@ -0,0 +1,202 @@
+# SAP MCP
+
+Use this skill when an agent needs to operate the SAP MCP server through MCP,
+configure local or remote launch, inspect the loaded profile, or reason about
+safe signing behavior.
+
+## First Step
+
+Always inspect runtime context through MCP tools, not by reading config files:
+
+1. `sap_profile_current`
+2. `sap_profile_list`
+3. `sap_profile_public_key`
+4. `sap_network_stats`
+
+The server profile is the source of truth. Environment variables from the MCP
+client must not override profile-owned RPC or wallet settings unless
+`SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE=true`.
+
+## Response Language
+
+Answer in the same natural language as the user's latest request. If the user
+asks in English, answer in English even when previous chat history, tool output,
+or repository docs contain Italian. Keep tool names, protocol IDs, addresses,
+and error strings unchanged.
+
+## Discovery Rules
+
+- Use `sap_get_network_overview` for live ecosystem counters.
+- Use `sap_list_all_agents` when the user asks for all current SAP ecosystem
+  agents. It performs global on-chain `AgentAccount` enumeration.
+- Use `sap_discover_agents` or `sap_list_agents` only for filtered lookups by
+  `protocol`, `capability`, or `capabilities`.
+- Use `sap_fetch_protocol_index` when a specific protocol ID is known.
+- Do not tell the user that all-agent enumeration is impossible unless
+  `sap_list_all_agents` fails and you report the exact failure.
+
+## Tool Name Prefixes
+
+Some MCP clients display SAP tools as `mcp_sap_<tool>`. The callable tool name
+inside this server omits the client prefix. Example: a client may display
+`mcp_sap_jupiter_getQuote`, while the MCP tool name is `jupiter_getQuote`.
+
+## Upstream References
+
+Use these official upstream references for the latest SAP SDK documentation and
+source skill taxonomy:
+
+- Synapse SAP SDK docs: https://github.com/OOBE-PROTOCOL/synapse-sap-sdk/tree/main/docs
+- Synapse SAP SDK skills: https://github.com/OOBE-PROTOCOL/synapse-sap-sdk/tree/main/skills
+
+Use the bundled routing map for local MCP tool selection:
+
+- `docs/SAP_SDK_SKILLS.md`
+
+## Profile Tools
+
+| Tool | Purpose |
+| --- | --- |
+| `sap_profile_current` | Show loaded profile, active profile, RPC, network, program, signer public key |
+| `sap_profile_list` | List available profiles without exposing wallet paths |
+| `sap_profile_public_key` | Show profile agent public key |
+| `sap_profile_switch` | Reload runtime to another profile; requires `confirm: true` |
+
+## Wizard And CLI
+
+Create or update a profile:
+
+```bash
+npx sap-mcp-wizard
+# or
+npx sap-mcp-config wizard
+```
+
+### `npx sap-mcp-config` Usage
+
+Use `sap-mcp-config` for all local profile and wallet configuration. Do not
+edit generated JSON files manually unless you are repairing a broken profile.
+
+Recommended first setup:
+
+```bash
+npx sap-mcp-config wizard
+```
+
+The wizard creates `~/.config/mcp-sap/`, stores profile configs as
+`config-<profile>.json`, and creates or links dedicated keypairs under the SAP
+MCP config directory. It must not use or overwrite the Solana CLI keypair unless
+the user explicitly chooses that path.
+
+Show the currently loaded/active config:
+
+```bash
+npx sap-mcp-config show
+npx sap-mcp-config info
+```
+
+List, inspect, and switch profiles:
+
+```bash
+npx sap-mcp-config profiles
+npx sap-mcp-config profile-info
+npx sap-mcp-config profile <profile-name>
+```
+
+Show the public agent identity:
+
+```bash
+npx sap-mcp-config pubkey
+```
+
+Check wallet status without printing keypair bytes:
+
+```bash
+npx sap-mcp-config wallet
+```
+
+Update safe scalar settings:
+
+```bash
+npx sap-mcp-config set rpcUrl https://api.mainnet-beta.solana.com
+npx sap-mcp-config set logLevel info
+npx sap-mcp-config set maxTxValueSol 10
+npx sap-mcp-config set requireApprovalAboveSol 1
+npx sap-mcp-config set dailyLimitSol 100
+```
+
+MCP client configuration should prefer the dynamic profile manager over
+duplicated RPC or wallet env vars. In dynamic mode the server reads
+`~/.config/mcp-sap/.active-profile`, so the user can change profile with
+`sap-mcp-config profile <name>` and then restart the MCP client:
+
+```yaml
+mcp_servers:
+  sap:
+    command: node
+    args:
+      - /absolute/path/to/sap-mcp-server/dist/cli.js
+    cwd: /absolute/path/to/sap-mcp-server
+    env:
+      SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE: "false"
+      SAP_LOG_LEVEL: info
+```
+
+Only pin a fixed profile when that is intentional:
+
+```yaml
+env:
+  SAP_MCP_PROFILE: gianni-market-nft-agent
+  SAP_MCP_CONFIG_PATH: ~/.config/mcp-sap/config-gianni-market-nft-agent.json
+  SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE: "false"
+  SAP_LOG_LEVEL: info
+```
+
+Avoid passing `SAP_WALLET_PATH` or `SAP_MCP_RPC_URL` from the MCP client unless
+the user intentionally wants env overrides and has set
+`SAP_MCP_ALLOW_ENV_CONFIG_OVERRIDE=true`.
+
+Show active profile:
+
+```bash
+npx sap-mcp-config show
+npx sap-mcp-config profile-info
+npx sap-mcp-config pubkey
+```
+
+List and switch profiles:
+
+```bash
+npx sap-mcp-config profiles
+npx sap-mcp-config profile <name>
+```
+
+Start local MCP over stdio:
+
+```bash
+npx sap-mcp-server start
+```
+
+Start remote MCP over Streamable HTTP:
+
+```bash
+SAP_MCP_AUTH_TYPE=api_key \
+SAP_MCP_API_KEYS=<api-key>=<operator-id> \
+npx sap-mcp-remote
+```
+
+## Signing Rules
+
+- Do not read wallet/keypair files.
+- Do not ask the user to paste private key bytes.
+- Use `sap_preview_transaction` before any signing.
+- Use `sap_sign_transaction` only after preview and policy checks.
+- Use `sap_submit_signed_transaction` only for a signed transaction that the
+  user or policy explicitly allows.
+- If a transaction exceeds policy limits, stop and ask the user for approval
+  through the surrounding agent UI.
+
+## MCP Tool Reference
+
+See `TOOL_REFERENCE.md` in this skill directory for the complete 232-tool
+mapping to the most specific SAP skill domain.

package/skills/sap-mcp/TOOL_REFERENCE.md

@@ -0,0 +1,184 @@
+# SAP MCP Tool Reference
+
+This file maps every SAP MCP server tool to the most specific local skill.
+
+## Granular SAP SDK Skills
+
+Use these specific skills before falling back to the broader `sap-operations`
+or `sap-agentkit` skills:
+
+| Skill | Domain |
+| --- | --- |
+| `sap-agent-registry` | Agent identity, lifecycle, profile, global directory |
+| `sap-discovery-indexing` | Network overview, protocol/capability/category indexes |
+| `sap-tool-registry` | Tool descriptors, schemas, invocation reporting |
+| `sap-reputation-attestation` | Feedback, reputation, attestations, FairScale |
+| `sap-memory-vault` | Vaults, sessions, inscriptions, epoch pages |
+| `sap-ledger-session` | Session continuity and latest durable reads |
+| `sap-payments-x402` | x402 payment context, balances, subscriptions |
+| `sap-escrow-settlement` | Escrow v1/v2, settlement, pending settlement, disputes |
+| `sap-staking` | SAP stake deposit, unstake, stake reads |
+| `sap-solana-token` | SOL/SPL balances, transfers, token admin |
+| `sap-defi` | Jupiter, perps, liquidity, orderbooks, bridges, staking protocols |
+| `sap-market-data` | Pyth, CoinGecko, Jupiter token intelligence |
+| `sap-nft-metaplex` | DAS, Metaplex, 3.Land NFT workflows |
+| `sap-social-gaming` | Blinks, bounties, gaming |
+
+## `sap-mcp`
+
+Profile, config, runtime context, and raw transaction lifecycle:
+
+`sap_profile_current`, `sap_profile_list`, `sap_profile_public_key`,
+`sap_profile_switch`, `sap_decode_transaction`, `sap_preview_transaction`,
+`sap_sign_transaction`, `sap_submit_signed_transaction`, `sap_skills_list`,
+`sap_skills_bundle`, `sap_skills_install`.
+
+## `sap-operations`
+
+SAP registry and discovery:
+
+`sap_register_agent`, `sap_update_agent`, `sap_deactivate_agent`,
+`sap_reactivate_agent`, `sap_close_agent`, `sap_get_agent`,
+`sap_get_agent_profile`, `sap_get_agent_stats`, `sap_get_global_state`,
+`sap_get_network_overview`, `sap_discover_agents`, `sap_list_agents`,
+`sap_list_all_agents`, `sap_is_agent_active`, `sap_network_stats`,
+`sap_fetch_capability_index`, `sap_fetch_protocol_index`,
+`sap_find_tools_by_category`,
+`sap_get_tool_category_summary`, `sap_fetch_tool_category_index`,
+`sap_fetch_tool`, `sap_publish_tool_by_name`, `sap_update_tool`,
+`sap_deactivate_tool`, `sap_reactivate_tool`,
+`sap_report_tool_invocations`, `sap_report_calls`.
+
+Use `sap_list_all_agents` for user requests such as "give me a list of all
+agents in the SAP ecosystem rn". Use `sap_discover_agents` only when the user
+provides a protocol or capability filter.
+
+SAP memory and sessions:
+
+`sap_init_vault`, `sap_fetch_vault`, `sap_open_vault_session`,
+`sap_fetch_session`, `sap_inscribe_memory`, `sap_compact_inscribe_memory`,
+`sap_fetch_epoch_page`, `sap_session_start`, `sap_session_read_latest`,
+`sap_session_status`.
+
+SAP reputation, feedback, attestations, and FairScale:
+
+`sap_fetch_feedback`, `sap_give_feedback`, `sap_update_feedback`,
+`sap_revoke_feedback`, `sap_fetch_attestation`, `sap_create_attestation`,
+`sap_revoke_attestation`, `sap_update_reputation_metrics`,
+`sap_fairscale_score`, `sap_fairscale_trust_gate`.
+
+SAP payments, x402, subscriptions, escrow, settlement, disputes, staking:
+
+`sap_x402_prepare_payment`, `sap_x402_get_balance`,
+`sap_create_subscription`, `sap_fund_subscription`,
+`sap_cancel_subscription`, `sap_fetch_subscription`,
+`sap_create_escrow`, `sap_deposit_escrow`, `sap_settle_escrow`,
+`sap_settle_escrow_batch`, `sap_withdraw_escrow`, `sap_close_escrow`,
+`sap_fetch_escrow`, `sap_create_escrow_v2`, `sap_deposit_escrow_v2`,
+`sap_settle_escrow_v2`, `sap_finalize_settlement_v2`,
+`sap_file_dispute_v2`, `sap_withdraw_escrow_v2`, `sap_close_escrow_v2`,
+`sap_fetch_escrow_v2`, `sap_fetch_pending_settlement`,
+`sap_next_settlement_index`, `sap_fetch_dispute`, `sap_init_stake`,
+`sap_deposit_stake`, `sap_request_unstake`, `sap_complete_unstake`,
+`sap_fetch_stake`.
+
+## `sap-sns`
+
+SAP SNS and direct SNS domain workflows:
+
+`sap_sns_check_domain`, `sap_sns_batch_check_domains`,
+`sap_sns_resolve_domain`, `sap_sns_validate_records`,
+`sap_sns_get_domain_records`, `sap_sns_get_record`,
+`sap_sns_resolve_wallet`, `sap_sns_check_ownership`,
+`sap_sns_get_domain_pda`, `sap_sns_get_record_pda`,
+`sap_sns_build_register_domain_transaction`,
+`sap_sns_build_manage_record_transaction`,
+`sap_sns_build_set_primary_domain_transaction`,
+`sap_sns_register_agent_domain`, `sns_registerDomain`, `sns_resolveDomain`,
+`sns_reverseLookup`, `alldomains_getOwnedDomains`,
+`alldomains_registerDomain`, `alldomains_resolveDomain`.
+
+## `sap-agentkit`
+
+Solana RPC, SPL token, pricing, DAS:
+
+`sol_get_balance`, `spl-token_getBalance`, `spl-token_getTokenAccounts`,
+`spl-token_transfer`, `spl-token_transferSol`, `spl-token_deployToken`,
+`spl-token_mintTo`, `spl-token_burn`, `spl-token_closeAccount`,
+`spl-token_freezeAccount`, `spl-token_thawAccount`, `spl-token_rugCheck`,
+`coingecko_getTokenPrice`, `coingecko_getTokenInfo`,
+`coingecko_getOHLCV`, `coingecko_getPoolsByToken`,
+`coingecko_getTopGainersLosers`, `coingecko_getTrending`,
+`pyth_getPrice`, `pyth_getPriceHistory`, `pyth_listPriceFeeds`,
+`das_getAsset`, `das_getAssetsByOwner`, `das_getAssetsByCreator`,
+`das_getAssetsByCollection`, `das_searchAssets`.
+
+NFT and Metaplex workflows:
+
+`3land_buyNFT`, `3land_cancelListing`, `3land_createCollection`,
+`3land_listForSale`, `3land_mintAndList`,
+`metaplex-nft_deployCollection`, `metaplex-nft_mintNFT`,
+`metaplex-nft_updateMetadata`, `metaplex-nft_configureRoyalties`,
+`metaplex-nft_setAndVerifyCollection`, `metaplex-nft_verifyCollection`,
+`metaplex-nft_verifyCreator`, `metaplex-nft_delegateAuthority`,
+`metaplex-nft_revokeAuthority`.
+
+DeFi, markets, liquidity, bridges, staking:
+
+Jupiter protocol toolkit:
+
+`jupiter_getOrder`, `jupiter_executeOrder`, `jupiter_getHoldings`,
+`jupiter_shield`, `jupiter_searchTokens`, `jupiter_getQuote`,
+`jupiter_swap`, `jupiter_swapInstructions`, `jupiter_programLabels`,
+`jupiter_getPrice`, `jupiter_getTokenList`, `jupiter_getTokenInfo`,
+`jupiter_createLimitOrder`, `jupiter_executeTrigger`,
+`jupiter_cancelLimitOrder`, `jupiter_cancelLimitOrders`,
+`jupiter_getLimitOrders`, `jupiter_createDCA`, `jupiter_executeDCA`,
+`jupiter_cancelDCA`, `jupiter_getDCAOrders`, `jupiter_smartSwap`.
+
+`adrena_addCollateral`, `adrena_closePosition`, `adrena_getPositions`,
+`adrena_openPosition`, `adrena_removeCollateral`,
+`bridging_bridgeDeBridge`, `bridging_bridgeDeBridgeStatus`,
+`bridging_bridgeWormhole`, `bridging_bridgeWormholeStatus`,
+`drift_borrow`, `drift_closePerpPosition`, `drift_deposit`,
+`drift_getPositions`, `drift_lend`, `drift_openPerpPosition`,
+`drift_withdraw`, `jito_getBundleStatus`, `jito_getTipEstimate`,
+`jito_sendBundle`, `lulo_deposit`, `lulo_getBestRates`,
+`lulo_getPositions`, `lulo_withdraw`, `manifest_cancelOrder`,
+`manifest_createMarket`, `manifest_getOrderbook`,
+`manifest_placeLimitOrder`, `meteora_addDLMMLiquidity`,
+`meteora_createAlphaVault`, `meteora_createDLMMPool`,
+`meteora_createDynamicPool`, `meteora_removeDLMMLiquidity`,
+`openbook_cancelOrder`, `openbook_createMarket`, `openbook_placeOrder`,
+`orca_closePosition`, `orca_collectFees`, `orca_getWhirlpool`,
+`orca_openPosition`, `orca_swap`, `pump_launchToken`, `pump_trade`,
+`raydium-pools_addLiquidity`, `raydium-pools_createAMMv4`,
+`raydium-pools_createCLMM`, `raydium-pools_createCPMM`,
+`raydium-pools_removeLiquidity`, `staking_getStakeAccounts`,
+`staking_stakeSOL`, `staking_unstakeSOL`, `staking_stakeJupSOL`,
+`staking_unstakeJupSOL`, `staking_stakeSolayer`,
+`staking_unstakeSolayer`.
+
+Protocol routing shortcuts:
+
+| User intent | Most specific tools |
+| --- | --- |
+| SOL or SPL balance | `sol_get_balance`, `spl-token_getBalance`, `spl-token_getTokenAccounts` |
+| SOL or SPL transfer | `spl-token_transferSol`, `spl-token_transfer` |
+| Token launch/mint/burn | `spl-token_deployToken`, `spl-token_mintTo`, `spl-token_burn` |
+| Jupiter quote/swap | `jupiter_getQuote`, `jupiter_smartSwap`, `jupiter_swap`, `jupiter_swapInstructions` |
+| Jupiter limit/DCA | `jupiter_createLimitOrder`, `jupiter_getLimitOrders`, `jupiter_createDCA`, `jupiter_getDCAOrders` |
+| Perps/lending | `drift_*`, `adrena_*`, `lulo_*` |
+| Liquidity pools | `raydium-pools_*`, `orca_*`, `meteora_*` |
+| Orderbooks | `openbook_*`, `manifest_*` |
+| Price data | `pyth_*`, `coingecko_*` |
+| NFTs | `metaplex-nft_*`, `3land_*` |
+| Domains | `sap_sns_*`, `sns_*`, `alldomains_*` |
+| Bridges/staking/actions | `bridging_*`, `staking_*`, `jito_*`, `blinks_*` |
+
+Social, Blinks, bounties, gaming:
+
+`blinks_buildActionUrl`, `blinks_confirmAction`, `blinks_executeAction`,
+`blinks_getAction`, `blinks_resolveBlinkUrl`, `blinks_validateActionsJson`,
+`gibwork_createBounty`, `gibwork_listBounties`, `gibwork_submitWork`,
+`send-arcade_listGames`, `send-arcade_playGame`.

package/skills/sap-memory-vault/SKILL.md

@@ -0,0 +1,29 @@
+# SAP Memory Vault
+
+Use this skill for encrypted SAP memory vaults, vault sessions, memory
+inscriptions, compact inscriptions, and vault/session reads.
+
+## Tools
+
+- `sap_init_vault`
+- `sap_fetch_vault`
+- `sap_open_vault_session`
+- `sap_fetch_session`
+- `sap_inscribe_memory`
+- `sap_compact_inscribe_memory`
+- `sap_fetch_epoch_page`
+
+## Flow
+
+1. Use `sap_fetch_vault` to check whether the agent already has a vault.
+2. Use `sap_init_vault` only when a vault is missing and the user wants durable
+   memory.
+3. Use `sap_open_vault_session` before session inscriptions.
+4. Use `sap_inscribe_memory` for normal entries and
+   `sap_compact_inscribe_memory` for compact payloads.
+5. Use `sap_fetch_epoch_page` for finalized pages.
+
+## Safety
+
+Do not store private keys, seed phrases, wallet bytes, API keys, or raw secrets
+in SAP memory.

package/skills/sap-nft-metaplex/SKILL.md

@@ -0,0 +1,38 @@
+# SAP NFT And Metaplex
+
+Use this skill for NFT assets, collections, Metaplex minting, metadata,
+royalties, creator verification, authority delegation, and 3.Land marketplace
+flows.
+
+## Tools
+
+- `das_getAsset`
+- `das_getAssetsByOwner`
+- `das_getAssetsByCreator`
+- `das_getAssetsByCollection`
+- `das_searchAssets`
+- `3land_createCollection`
+- `3land_mintAndList`
+- `3land_listForSale`
+- `3land_cancelListing`
+- `3land_buyNFT`
+- `metaplex-nft_deployCollection`
+- `metaplex-nft_mintNFT`
+- `metaplex-nft_updateMetadata`
+- `metaplex-nft_configureRoyalties`
+- `metaplex-nft_setAndVerifyCollection`
+- `metaplex-nft_verifyCollection`
+- `metaplex-nft_verifyCreator`
+- `metaplex-nft_delegateAuthority`
+- `metaplex-nft_revokeAuthority`
+
+## Flow
+
+1. Use DAS read tools before write tools.
+2. Validate collection, creator, metadata URI, royalties, and authority.
+3. Preview transaction-producing outputs before signing.
+
+## Safety
+
+Minting, listing, buying, authority changes, and metadata updates are high-risk.
+Never assume a collection or creator is trusted without verification.

package/skills/sap-operations/SKILL.md

@@ -0,0 +1,97 @@
+# SAP Operations
+
+Use this skill for SAP Protocol registry, agent lifecycle, memory, reputation,
+x402 payments, escrow, settlement, disputes, staking, and tool publishing.
+
+This skill corresponds to upstream SAP SDK v0.21.0 domains such as
+`sap-overview`, `sap-client`, `sap-advanced`, `sap-memory`,
+`sap-merchant`, and `sap-enterprise`.
+
+## Operating Pattern
+
+1. Inspect `sap_profile_current`.
+2. Use read tools before write tools.
+3. For write operations, explain the on-chain action and expected cost.
+4. For transactions or direct signing, preview first with `sap_preview_transaction`.
+5. Never read keypair files.
+
+## Agent Registry
+
+Use:
+
+- `sap_register_agent`
+- `sap_update_agent`
+- `sap_deactivate_agent`
+- `sap_reactivate_agent`
+- `sap_close_agent`
+- `sap_get_agent`
+- `sap_get_agent_profile`
+- `sap_discover_agents`
+- `sap_list_agents`
+- `sap_list_all_agents`
+
+Use `sap_list_all_agents` for global current ecosystem requests. Use
+`sap_discover_agents` and `sap_list_agents` only when the user provides a
+protocol or capability filter.
+
+## Memory
+
+Use:
+
+- `sap_init_vault`
+- `sap_fetch_vault`
+- `sap_open_vault_session`
+- `sap_fetch_session`
+- `sap_inscribe_memory`
+- `sap_compact_inscribe_memory`
+- `sap_session_start`
+- `sap_session_read_latest`
+- `sap_session_status`
+
+## Reputation And Attestations
+
+Use:
+
+- `sap_fetch_feedback`
+- `sap_give_feedback`
+- `sap_update_feedback`
+- `sap_revoke_feedback`
+- `sap_fetch_attestation`
+- `sap_create_attestation`
+- `sap_revoke_attestation`
+- `sap_update_reputation_metrics`
+- `sap_fairscale_score`
+- `sap_fairscale_trust_gate`
+
+## Payments, Escrow, Settlement
+
+Use:
+
+- `sap_x402_prepare_payment`
+- `sap_x402_get_balance`
+- `sap_create_subscription`
+- `sap_fund_subscription`
+- `sap_cancel_subscription`
+- `sap_create_escrow`
+- `sap_deposit_escrow`
+- `sap_settle_escrow`
+- `sap_settle_escrow_batch`
+- `sap_withdraw_escrow`
+- `sap_close_escrow`
+- `sap_create_escrow_v2`
+- `sap_deposit_escrow_v2`
+- `sap_settle_escrow_v2`
+- `sap_finalize_settlement_v2`
+- `sap_file_dispute_v2`
+- `sap_withdraw_escrow_v2`
+- `sap_close_escrow_v2`
+
+## Staking
+
+Use:
+
+- `sap_init_stake`
+- `sap_deposit_stake`
+- `sap_request_unstake`
+- `sap_complete_unstake`
+- `sap_fetch_stake`

package/skills/sap-payments-x402/SKILL.md

@@ -0,0 +1,47 @@
+# SAP Payments X402
+
+Use this skill for SAP x402 payment context, balances, subscriptions, paid API
+workflows, and hosted SAP MCP x402/pay.sh monetization.
+
+## Tools
+
+- `sap_x402_prepare_payment`
+- `sap_x402_get_balance`
+- `sap_create_subscription`
+- `sap_fund_subscription`
+- `sap_cancel_subscription`
+- `sap_fetch_subscription`
+
+## Flow
+
+1. Inspect agent profile and pricing with `sap_get_agent_profile`.
+2. Use `sap_x402_prepare_payment` before building a paid request.
+3. Use `sap_x402_get_balance` before assuming a depositor can pay.
+4. Use subscription tools only after explaining amount, cadence, and
+   cancellation path.
+
+## Hosted MCP Monetization
+
+Remote `/mcp` deployments can require x402 v2 payment for paid `tools/call`
+requests. Local `stdio` usage remains free.
+
+- Free: `tools/list`, `prompts/list`, `resources/list`, `sap_profile_current`,
+  `sap_get_network_overview`.
+- Read premium: `sap_list_all_agents`, indexed discovery, network stats,
+  protocol/capability indexes.
+- Builder: batch SNS/domain checks, analytics, transaction builders.
+- Value action: fixed fee plus configured basis-points fee when public USD
+  notional fields are present.
+
+When a remote call returns HTTP `402`, read the x402 `PAYMENT-REQUIRED`
+instructions, create a payment, retry with `PAYMENT-SIGNATURE`, and capture
+`PAYMENT-RESPONSE` after settlement. If a `payShCheckoutUrl` is present, surface
+it for browser/manual checkout flows.
+
+Reference: `docs/MONETIZATION.md`.
+
+## Safety
+
+Payment and subscription operations move funds or create future obligations.
+Respect `maxTxValueSol`, `dailyLimitSol`, and `requireApprovalAboveSol`.
+Do not log private key material, keypair bytes, or raw payment signatures.

package/skills/sap-reputation-attestation/SKILL.md

@@ -0,0 +1,30 @@
+# SAP Reputation And Attestation
+
+Use this skill for feedback, reputation metrics, attestations, and FairScale
+trust scoring.
+
+## Tools
+
+- `sap_fetch_feedback`
+- `sap_give_feedback`
+- `sap_update_feedback`
+- `sap_revoke_feedback`
+- `sap_fetch_attestation`
+- `sap_create_attestation`
+- `sap_revoke_attestation`
+- `sap_update_reputation_metrics`
+- `sap_fairscale_score`
+- `sap_fairscale_trust_gate`
+
+## Flow
+
+1. Fetch agent context with `sap_get_agent_profile`.
+2. Fetch existing feedback or attestation before writing.
+3. Use `sap_fairscale_score` for scoring and `sap_fairscale_trust_gate` for
+   policy-style allow/block decisions.
+4. Explain score, tag, attester, metadata hash, and expiry before writes.
+
+## Safety
+
+Feedback and attestations are trust-affecting actions. Do not create reputation
+data without explicit user intent and evidence.

package/skills/sap-sns/SKILL.md

@@ -0,0 +1,51 @@
+# SAP SNS
+
+Use this skill when an agent needs Solana Name Service domains, records,
+wallet resolution, ownership checks, or linking a domain to a SAP agent.
+
+This skill is adapted from upstream `sns-skill` plus SAP MCP's
+`sap_sns_*` wrappers.
+
+## Safe Flow
+
+1. Check the loaded profile with `sap_profile_current`.
+2. Check domain availability with `sap_sns_check_domain`.
+3. Validate records with `sap_sns_validate_records`.
+4. Build unsigned transactions when possible:
+   - `sap_sns_build_register_domain_transaction`
+   - `sap_sns_build_manage_record_transaction`
+   - `sap_sns_build_set_primary_domain_transaction`
+5. Preview transaction with `sap_preview_transaction`.
+6. Sign only through `sap_sign_transaction` or the direct tool
+   `sap_sns_register_agent_domain` when policy allows it.
+
+## Tools
+
+- `sap_sns_check_domain`
+- `sap_sns_batch_check_domains`
+- `sap_sns_resolve_domain`
+- `sap_sns_validate_records`
+- `sap_sns_get_domain_records`
+- `sap_sns_get_record`
+- `sap_sns_resolve_wallet`
+- `sap_sns_check_ownership`
+- `sap_sns_get_domain_pda`
+- `sap_sns_get_record_pda`
+- `sap_sns_build_register_domain_transaction`
+- `sap_sns_build_manage_record_transaction`
+- `sap_sns_build_set_primary_domain_transaction`
+- `sap_sns_register_agent_domain`
+- `sns_registerDomain`
+- `sns_resolveDomain`
+- `sns_reverseLookup`
+- `alldomains_getOwnedDomains`
+- `alldomains_registerDomain`
+- `alldomains_resolveDomain`
+
+## Guardrails
+
+- Never assume mainnet/devnet; read the profile RPC first.
+- Never read the local wallet file.
+- Prefer build/preview/sign flows over direct register flows when the user
+  needs to review transaction details.
+