moltspay 1.4.0 → 1.5.0

package/.env.example

@@ -60,3 +60,17 @@ CDP_API_KEY_SECRET=
 # https://facilitator.questflow.ai/
 # QUESTFLOW_ENDPOINT=https://facilitator.questflow.ai
 # QUESTFLOW_API_KEY=
+
+# ===========================================
+# Solana Relay Fee Payer
+# ===========================================
+# Private key for paying Solana transaction fees (base58 encoded)
+# Required for server-side settlement on Solana chains
+# SOLANA_FEE_PAYER_KEY=
+
+# ===========================================
+# BNB Chain Relay Fee Payer
+# ===========================================
+# Private key for paying BNB Chain transaction fees
+# Required for server-side settlement on BNB chains (bsc, opbnb)
+# BNB_SERVER_PRIVATE_KEY=

package/README.md

@@ -19,14 +19,15 @@ MoltsPay enables agent-to-agent commerce using the [x402 protocol](https://www.x
 
 ## Features
 
-- 🔌 **Skill Integration** - Add `moltspay.services.json` to any existing skill
-- 🎫 **x402 Protocol** - HTTP-native payments (402 Payment Required)
-- 💨 **Gasless** - Both client and server pay no gas (facilitators handle it)
-- ✅ **Payment Verification** - Automatic on-chain verification
-- 🔒 **Secure Wallet** - Spending limits, whitelist, and audit logging
-- ⛓️ **Multi-chain** - Base, Polygon, Solana, BNB, Tempo (mainnet & testnet)
-- 🤖 **Agent-to-Agent** - Complete A2A payment flow support
-- 🌐 **Multi-VM** - EVM chains + Solana (SVM) with unified API
+- **Skill Integration** - Add `moltspay.services.json` to any existing skill
+- **x402 Protocol** - HTTP-native payments (402 Payment Required)
+- **Gasless** - Both client and server pay no gas (facilitators handle it)
+- **Payment Verification** - Automatic on-chain verification
+- **Secure Wallet** - Spending limits, whitelist, and audit logging
+- **Multi-chain** - Base, Polygon, Solana, BNB, Tempo (mainnet & testnet)
+- **Agent-to-Agent** - Complete A2A payment flow support
+- **Multi-VM** - EVM chains + Solana (SVM) with unified API
+- **MCP Server** - Expose wallet + payments to Claude Desktop, Cursor, and other MCP hosts
 
 ## Installation
 
@@ -133,6 +134,50 @@ npx moltspay pay https://server.com service-id \
   --chain tempo_moderato --prompt "test"
 ```
 
+## MCP Server (For AI Assistants)
+
+MoltsPay ships an [MCP (Model Context Protocol)](https://modelcontextprotocol.io) stdio server that lets MCP-compatible hosts (Cursor, Windsurf, Claude Code, Zed, etc.) browse services, check wallet status, and pay for x402 services on your behalf.
+
+It is a thin wrapper around `MoltsPayClient` — wallet custody, spending limits, and all payment protocols (x402, MPP, Solana, BNB) are reused from the SDK.
+
+### Setup
+
+**1. Create a wallet and set spending limits** (the MCP server refuses to start without a wallet):
+
+```bash
+npx moltspay init
+npx moltspay config --max-per-tx 2 --max-per-day 10
+npx moltspay fund 5    # or: npx moltspay faucet for testnet
+```
+
+**2. Point your MCP host at the `moltspay-mcp` binary over stdio:**
+
+```bash
+npx -y moltspay-mcp              # normal mode
+npx -y moltspay-mcp --dry-run    # preview payments without signing
+```
+
+Each host has its own config file for registering stdio MCP servers — check your host's docs for the exact location. For a safer first run, use `--dry-run` so `moltspay_pay` returns a preview instead of spending real funds.
+
+### Tools
+
+| Tool | What it does | Destructive? |
+|---|---|---|
+| `moltspay_status` | Wallet address, balances across all supported chains, spending limits | No |
+| `moltspay_services` | Fetch services manifest from a provider URL; optional `query`/`maxPrice` filter | No |
+| `moltspay_pay` | Execute an x402/MPP/SOL/BNB payment and return the service result | **Yes** |
+| `moltspay_config` | Read or update `maxPerTx` / `maxPerDay` limits | Updates config file |
+
+### Safety Layers
+
+`moltspay_pay` is the only tool that moves money. Three guards stack on top of the MCP host's own tool-approval prompt:
+
+1. **SDK spending limits** — `maxPerTx` / `maxPerDay` enforced before signing.
+2. **Dry-run mode** — launch with `--dry-run` and payments return a preview instead of signing.
+3. **Confirmation gate** — set `MOLTSPAY_MCP_REQUIRE_CONFIRM=1` to require a second tool call (`confirmed: true`) for any payment exceeding `maxPerTx / 10`.
+
+Private keys and mnemonics are never exposed over MCP — wallet creation stays on the CLI (`npx moltspay init`) by design. See [`docs/MCP-USAGE.md`](docs/MCP-USAGE.md) for full tool arguments and troubleshooting.
+
 ## Payment Protocols
 
 MoltsPay supports multiple payment protocols, each optimized for different chains:
@@ -148,24 +193,24 @@ MoltsPay supports multiple payment protocols, each optimized for different chain
 
 ```
 Client                         Server                      CDP Facilitator
-  │                              │                              │
-  │ POST /execute                │                              │
-  │ ─────────────────────────>   │                              │
-  │                              │                              │
-  │ 402 + payment requirements   │                              │
-  │ <─────────────────────────   │                              │
-  │                              │                              │
-  │ [Sign EIP-3009 - NO GAS]     │                              │
-  │                              │                              │
-  │ POST + X-Payment header      │                              │
-  │ ─────────────────────────>   │ Verify signature             │
-  │                              │ ─────────────────────────>   │
-  │                              │                              │
-  │                              │ Execute transfer (pays gas)  │
-  │                              │ <─────────────────────────   │
-  │                              │                              │
-  │ 200 OK + result              │                              │
-  │ <─────────────────────────   │                              │
+  |                              |                              |
+  | POST /execute                |                              |
+  | -------------------------------------------------->   |                              |
+  |                              |                              |
+  | 402 + payment requirements   |                              |
+  | <--------------------------------------------------   |                              |
+  |                              |                              |
+  | [Sign EIP-3009 - NO GAS]     |                              |
+  |                              |                              |
+  | POST + X-Payment header      |                              |
+  | -------------------------------------------------->   | Verify signature             |
+  |                              | -------------------------------------------------->   |
+  |                              |                              |
+  |                              | Execute transfer (pays gas)  |
+  |                              | <--------------------------------------------------   |
+  |                              |                              |
+  | 200 OK + result              |                              |
+  | <--------------------------------------------------   |                              |
 ```
 
 **Key insight:** Client signs a payment authorization, server submits it. Neither party pays gas - the CDP facilitator handles settlement.
@@ -176,23 +221,23 @@ MPP (Machine Payments Protocol) is simpler - client executes the transfer direct
 
 ```
 Client                         Server
-  │                              │
-  │ POST /service                │
-  │ ─────────────────────────>   │
-  │                              │
-  │ 402 + WWW-Authenticate       │
-  │ <─────────────────────────   │
-  │                              │
-  │ [Execute TIP-20 transfer]    │
-  │ [No gas needed on Tempo]     │
-  │                              │
-  │ POST + Authorization: Payment│
-  │ ─────────────────────────>   │
-  │                              │
-  │ [Server verifies on-chain]   │
-  │                              │
-  │ 200 OK + Payment-Receipt     │
-  │ <─────────────────────────   │
+  |                              |
+  | POST /service                |
+  | -------------------------------------------------->   |
+  |                              |
+  | 402 + WWW-Authenticate       |
+  | <--------------------------------------------------   |
+  |                              |
+  | [Execute TIP-20 transfer]    |
+  | [No gas needed on Tempo]     |
+  |                              |
+  | POST + Authorization: Payment|
+  | -------------------------------------------------->   |
+  |                              |
+  | [Server verifies on-chain]   |
+  |                              |
+  | 200 OK + Payment-Receipt     |
+  | <--------------------------------------------------   |
 ```
 
 **Key insight:** On Tempo, the client executes the transfer directly (gas-free), then retries with the transaction hash. No CDP facilitator needed.
@@ -201,24 +246,24 @@ Client                         Server
 
 ```
 Client                         Server (Fee Payer)          Solana Network
-  │                              │                              │
-  │ POST /execute                │                              │
-  │ ─────────────────────────>   │                              │
-  │                              │                              │
-  │ 402 + payment requirements   │                              │
-  │ (includes solana_wallet)     │                              │
-  │ <─────────────────────────   │                              │
-  │                              │                              │
-  │ [Sign SPL Transfer]          │                              │
-  │ [NO GAS - just signing]      │                              │
-  │                              │                              │
-  │ POST + X-Payment (signature) │                              │
-  │ ─────────────────────────>   │ Execute transfer             │
-  │                              │ (server pays ~$0.001 SOL)    │
-  │                              │ ─────────────────────────>   │
-  │                              │                              │
-  │ 200 OK + result              │                              │
-  │ <─────────────────────────   │                              │
+  |                              |                              |
+  | POST /execute                |                              |
+  | -------------------------------------------------->   |                              |
+  |                              |                              |
+  | 402 + payment requirements   |                              |
+  | (includes solana_wallet)     |                              |
+  | <--------------------------------------------------   |                              |
+  |                              |                              |
+  | [Sign SPL Transfer]          |                              |
+  | [NO GAS - just signing]      |                              |
+  |                              |                              |
+  | POST + X-Payment (signature) |                              |
+  | -------------------------------------------------->   | Execute transfer             |
+  |                              | (server pays ~$0.001 SOL)    |
+  |                              | -------------------------------------------------->   |
+  |                              |                              |
+  | 200 OK + result              |                              |
+  | <--------------------------------------------------   |                              |
 ```
 
 **Key insight:** Client only signs the SPL transfer (gasless). Server acts as fee payer and executes the transaction on-chain.
@@ -227,24 +272,24 @@ Client                         Server (Fee Payer)          Solana Network
 
 ```
 Client                         Server                      BNB Network
-  │                              │                              │
-  │ POST /execute                │                              │
-  │ ─────────────────────────>   │                              │
-  │                              │                              │
-  │ 402 + payment requirements   │                              │
-  │ (includes bnbSpender)        │                              │
-  │ <─────────────────────────   │                              │
-  │                              │                              │
-  │ [Sign EIP-712 intent]        │                              │
-  │ [NO GAS - just signing]      │                              │
-  │                              │                              │
-  │ POST + X-Payment (signature) │                              │
-  │ ─────────────────────────>   │ Execute transferFrom         │
-  │                              │ (server pays ~$0.0001 gas)   │
-  │                              │ ─────────────────────────>   │
-  │                              │                              │
-  │ 200 OK + result              │                              │
-  │ <─────────────────────────   │                              │
+  |                              |                              |
+  | POST /execute                |                              |
+  | -------------------------------------------------->   |                              |
+  |                              |                              |
+  | 402 + payment requirements   |                              |
+  | (includes bnbSpender)        |                              |
+  | <--------------------------------------------------   |                              |
+  |                              |                              |
+  | [Sign EIP-712 intent]        |                              |
+  | [NO GAS - just signing]      |                              |
+  |                              |                              |
+  | POST + X-Payment (signature) |                              |
+  | -------------------------------------------------->   | Execute transferFrom         |
+  |                              | (server pays ~$0.0001 gas)   |
+  |                              | -------------------------------------------------->   |
+  |                              |                              |
+  | 200 OK + result              |                              |
+  | <--------------------------------------------------   |                              |
 ```
 
 **Key insight:** Client only signs an intent (gasless). Server executes the actual transfer and pays the minimal gas (~$0.0001). This is the "pay-for-success" model - payment only happens if service succeeds.
@@ -255,9 +300,9 @@ MoltsPay reads your skill's existing structure:
 
 ```
 my-skill/
-├── package.json           # MoltsPay reads "main" field
-├── index.js               # Your existing exports
-└── moltspay.services.json # Only file you add!
++------ package.json           # MoltsPay reads "main" field
++------ index.js               # Your existing exports
++------ moltspay.services.json # Only file you add!
 ```
 
 **Your functions stay untouched.** Just add the JSON config.
@@ -350,8 +395,8 @@ Server does NOT need a private key - the x402 facilitator handles settlement.
 
 The server automatically detects which chain to verify payments on based on the client's payment header:
 
-- Client pays with `--chain base` → Server verifies on Base mainnet
-- Client pays with `--chain base_sepolia` → Server verifies on Base Sepolia
+- Client pays with `--chain base` -> Server verifies on Base mainnet
+- Client pays with `--chain base_sepolia` -> Server verifies on Base Sepolia
 
 **No `USE_MAINNET` env var needed!** Just configure your accepted chains in the manifest.
 
@@ -425,16 +470,63 @@ npx moltspay validate <path>         # Validate manifest
 ```typescript
 import { MoltsPayClient } from 'moltspay/client';
 
-const client = new MoltsPayClient({ chain: 'base' });
+// Initialize client (uses wallet from ~/.moltspay/wallet.json)
+const client = new MoltsPayClient();
 
-// Pay for a service
-const result = await client.execute('https://server.com', 'text-to-video', {
-  prompt: 'a cat dancing'
-});
+// Standard service call (params wrapped in { params: {...} })
+const result = await client.pay(
+  'https://server.com',
+  'text-to-video',
+  { prompt: 'a cat dancing' },
+  { chain: 'base' }
+);
 
 console.log(result.video_url);
 ```
 
+#### Custom Input Formats (rawData)
+
+Some services have custom input formats instead of the standard `{ params: { prompt } }`.
+Use `rawData: true` to send your data at the top level:
+
+```typescript
+// Service expects: { text: "...", target_lang: "..." }
+// NOT: { params: { text: "...", target_lang: "..." } }
+
+const result = await client.pay(
+  'https://server.com',
+  'translate',
+  { text: 'Hello world', target_lang: 'es' },
+  { 
+    chain: 'base_sepolia',
+    rawData: true  // Send data at top level
+  }
+);
+
+// Server receives: { service: "translate", text: "Hello world", target_lang: "es", chain: "base_sepolia" }
+```
+
+#### PayOptions Reference
+
+```typescript
+interface PayOptions {
+  token?: 'USDC' | 'USDT';     // Token to pay with (default: USDC)
+  autoSelect?: boolean;         // Auto-select token based on balance
+  chain?: string;               // Chain: base, polygon, solana, bnb, tempo_moderato, + testnets
+  rawData?: boolean;            // Send data at top level (for custom input formats)
+}
+```
+
+#### CLI Equivalent
+
+```bash
+# Standard format (uses { params: { prompt } })
+npx moltspay pay https://server.com text-to-video --prompt "a cat dancing"
+
+# Custom format (uses rawData, sends at top level)
+npx moltspay pay https://server.com translate --data '{"text": "Hello", "target_lang": "es"}'
+```
+
 ### Server
 
 ```typescript
@@ -493,9 +585,9 @@ A **facilitator** is the entity that executes the on-chain payment and pays the
 
 | Aspect | CDP (External) | Self-hosted |
 |--------|----------------|-------------|
-| Single point of failure | ❌ Coinbase down = everyone stuck | ✅ Each provider independent |
-| Censorship risk | ❌ Coinbase can block accounts | ✅ Cannot be censored |
-| Dependency | ❌ Relies on third-party | ✅ Fully autonomous |
+| Single point of failure | Coinbase down = everyone stuck | Each provider independent |
+| Censorship risk | Coinbase can block accounts | Cannot be censored |
+| Dependency | Relies on third-party | Fully autonomous |
 
 This self-hosted approach is a key innovation: **any service provider can become their own facilitator** without relying on third-party infrastructure. Unlike CDP where all users depend on Coinbase, self-hosted facilitators create a truly decentralized network with no single point of failure.
 
@@ -628,7 +720,7 @@ npx moltspay pay https://moltspay.com/a/zen7 text-to-video --chain solana_devnet
 
 Join our Discord for help, feedback, and updates:
 
-👉 **[MoltsPay Discord](https://discord.gg/QwCJgVBxVK)** 
+--> **[MoltsPay Discord](https://discord.gg/QwCJgVBxVK)** 
 
 Or visit the [#moltspay-support](https://discord.com/channels/1472602423267819734/1480968496346304522) channel directly.
 

package/dist/cli/index.js

@@ -682,11 +682,26 @@ var MoltsPayClient = class {
       throw new Error("Client not initialized. Run: npx moltspay init");
     }
     console.log(`[MoltsPay] Requesting service: ${service}`);
-    const requestBody = { service, params };
+    let executeUrl = `${serverUrl}/execute`;
+    try {
+      const services = await this.getServices(serverUrl);
+      const svc = services.services?.find((s) => s.id === service);
+      if (svc?.endpoint) {
+        executeUrl = `${serverUrl}${svc.endpoint}`;
+        console.log(`[MoltsPay] Using service endpoint: ${svc.endpoint}`);
+      }
+    } catch {
+    }
+    let requestBody;
+    if (options.rawData) {
+      requestBody = { service, ...params };
+    } else {
+      requestBody = { service, params };
+    }
     if (options.chain) {
       requestBody.chain = options.chain;
     }
-    const initialRes = await fetch(`${serverUrl}/execute`, {
+    const initialRes = await fetch(executeUrl, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(requestBody)
@@ -702,7 +717,7 @@ var MoltsPayClient = class {
     const paymentRequiredHeader = initialRes.headers.get(PAYMENT_REQUIRED_HEADER);
     if (wwwAuthHeader && wwwAuthHeader.toLowerCase().includes("payment")) {
       console.log("[MoltsPay] Detected MPP protocol, using Tempo flow...");
-      return await this.handleMPPPayment(serverUrl, service, params, wwwAuthHeader);
+      return await this.handleMPPPayment(executeUrl, service, params, wwwAuthHeader, options);
     }
     if (!paymentRequiredHeader) {
       throw new Error("Missing payment header (x-payment-required or www-authenticate)");
@@ -763,7 +778,7 @@ Please specify: --chain <chain_name>`
       if (!req2) {
         throw new Error(`Failed to find payment requirement for ${selectedChain}`);
       }
-      return await this.handleSolanaPayment(serverUrl, service, params, req2, solanaChain);
+      return await this.handleSolanaPayment(executeUrl, service, params, req2, solanaChain, options);
     }
     const chainName = selectedChain;
     const chain = getChain(chainName);
@@ -810,14 +825,14 @@ Please specify: --chain <chain_name>`
       if (!bnbSpender) {
         throw new Error("Server did not provide bnbSpender address. Server may not support BNB payments.");
       }
-      return await this.handleBNBPayment(serverUrl, service, params, {
+      return await this.handleBNBPayment(executeUrl, service, params, {
         to: payTo2,
         amount,
         token,
         chainName,
         chain,
         spender: bnbSpender
-      });
+      }, options);
     }
     const payTo = req.payTo || req.resource;
     if (!payTo) {
@@ -848,11 +863,11 @@ Please specify: --chain <chain_name>`
     };
     const paymentHeader = Buffer.from(JSON.stringify(payload)).toString("base64");
     console.log(`[MoltsPay] Sending request with payment...`);
-    const paidRequestBody = { service, params };
+    const paidRequestBody = options.rawData ? { service, ...params } : { service, params };
     if (options.chain) {
       paidRequestBody.chain = options.chain;
     }
-    const paidRes = await fetch(`${serverUrl}/execute`, {
+    const paidRes = await fetch(executeUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -866,13 +881,13 @@ Please specify: --chain <chain_name>`
     }
     this.recordSpending(amount);
     console.log(`[MoltsPay] Success! Payment: ${result.payment?.status || "claimed"}`);
-    return result.result;
+    return result.result || result;
   }
   /**
    * Handle MPP (Machine Payments Protocol) payment flow
    * Called when pay() detects WWW-Authenticate header in 402 response
    */
-  async handleMPPPayment(serverUrl, service, params, wwwAuthHeader) {
+  async handleMPPPayment(executeUrl, service, params, wwwAuthHeader, options = {}) {
     const { privateKeyToAccount: privateKeyToAccount2 } = await import("viem/accounts");
     const { createWalletClient, createPublicClient, http } = await import("viem");
     const { tempoModerato } = await import("viem/chains");
@@ -933,13 +948,14 @@ Please specify: --chain <chain_name>`
       source: `did:pkh:eip155:${chainId}:${account.address}`
     };
     const credentialB64 = Buffer.from(JSON.stringify(credential)).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-    const paidRes = await fetch(`${serverUrl}/execute`, {
+    const retryBody = options.rawData ? { service, ...params, chain: "tempo_moderato" } : { service, params, chain: "tempo_moderato" };
+    const paidRes = await fetch(executeUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
         "Authorization": `Payment ${credentialB64}`
       },
-      body: JSON.stringify({ service, params, chain: "tempo_moderato" })
+      body: JSON.stringify(retryBody)
     });
     const result = await paidRes.json();
     if (!paidRes.ok) {
@@ -959,7 +975,7 @@ Please specify: --chain <chain_name>`
    * 4. Server executes service
    * 5. Server calls transferFrom if successful (pay-for-success)
    */
-  async handleBNBPayment(serverUrl, service, params, paymentDetails) {
+  async handleBNBPayment(executeUrl, service, params, paymentDetails, options = {}) {
     const { to, amount, token, chainName, chain, spender } = paymentDetails;
     const tokenConfig = chain.tokens[token];
     const provider = new import_ethers.ethers.JsonRpcProvider(chain.rpc);
@@ -1055,13 +1071,14 @@ Run: npx moltspay approve --chain ${chainName} --spender ${spender}`
     };
     const paymentHeader = Buffer.from(JSON.stringify(payload)).toString("base64");
     console.log(`[MoltsPay] Sending BNB payment request...`);
-    const paidRes = await fetch(`${serverUrl}/execute`, {
+    const bnbRequestBody = options.rawData ? { service, ...params, chain: chainName } : { service, params, chain: chainName };
+    const paidRes = await fetch(executeUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
         "X-Payment": paymentHeader
       },
-      body: JSON.stringify({ service, params, chain: chainName })
+      body: JSON.stringify(bnbRequestBody)
     });
     const result = await paidRes.json();
     if (!paidRes.ok) {
@@ -1078,7 +1095,7 @@ Run: npx moltspay approve --chain ${chainName} --spender ${spender}`
    * 1. Client creates and signs a transfer transaction
    * 2. Server submits the transaction after service completes
    */
-  async handleSolanaPayment(serverUrl, service, params, requirements, chain) {
+  async handleSolanaPayment(executeUrl, service, params, requirements, chain, options = {}) {
     const solanaWallet = loadSolanaWallet(this.configDir);
     if (!solanaWallet) {
       throw new Error("No Solana wallet found. Run: npx moltspay init --chain solana_devnet");
@@ -1131,13 +1148,14 @@ Run: npx moltspay approve --chain ${chainName} --spender ${spender}`
       }
     };
     const paymentHeader = Buffer.from(JSON.stringify(payload)).toString("base64");
-    const paidRes = await fetch(`${serverUrl}/execute`, {
+    const solanaRequestBody = options.rawData ? { service, ...params, chain } : { service, params, chain };
+    const paidRes = await fetch(executeUrl, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
         "X-Payment": paymentHeader
       },
-      body: JSON.stringify({ service, params, chain })
+      body: JSON.stringify(solanaRequestBody)
     });
     const result = await paidRes.json();
     if (!paidRes.ok) {
@@ -1282,15 +1300,17 @@ Run: npx moltspay approve --chain ${chainName} --spender ${spender}`
   loadWallet() {
     const walletPath = (0, import_path2.join)(this.configDir, "wallet.json");
     if ((0, import_fs2.existsSync)(walletPath)) {
-      try {
-        const stats = (0, import_fs2.statSync)(walletPath);
-        const mode = stats.mode & 511;
-        if (mode !== 384) {
-          console.warn(`[MoltsPay] WARNING: wallet.json has insecure permissions (${mode.toString(8)})`);
-          console.warn(`[MoltsPay] Fixing permissions to 0600...`);
-          (0, import_fs2.chmodSync)(walletPath, 384);
+      if (process.platform !== "win32") {
+        try {
+          const stats = (0, import_fs2.statSync)(walletPath);
+          const mode = stats.mode & 511;
+          if (mode !== 384) {
+            console.warn(`[MoltsPay] WARNING: wallet.json has insecure permissions (${mode.toString(8)})`);
+            console.warn(`[MoltsPay] Fixing permissions to 0600...`);
+            (0, import_fs2.chmodSync)(walletPath, 384);
+          }
+        } catch {
         }
-      } catch (err) {
       }
       const content = (0, import_fs2.readFileSync)(walletPath, "utf-8");
       return JSON.parse(content);
@@ -3273,8 +3293,10 @@ var MoltsPayServer = class {
   isProxyAllowed(clientIP) {
     const allowedIPs = process.env.PROXY_ALLOWED_IPS?.split(",").map((ip) => ip.trim()) || [];
     if (allowedIPs.length === 0) {
-      console.log(`[MoltsPay] /proxy denied: no PROXY_ALLOWED_IPS configured`);
-      return false;
+      return true;
+    }
+    if (allowedIPs.includes("*")) {
+      return true;
     }
     const normalizedIP = clientIP === "::1" ? "127.0.0.1" : clientIP.replace("::ffff:", "");
     const allowed = allowedIPs.includes(normalizedIP) || allowedIPs.includes(clientIP);
@@ -4870,14 +4892,23 @@ program.command("stop").description("Stop the running MoltsPay server").action(a
     process.exit(1);
   }
 });
-program.command("pay <server> <service> [params]").description("Pay for a service and get the result").option("--prompt <text>", "Prompt for the service").option("--image <path>", "Image URL or local file path").option("--token <token>", "Token to pay with (USDC or USDT)", "USDC").option("--chain <chain>", "Chain to pay on (base, polygon, base_sepolia, tempo_moderato, solana, or solana_devnet).").option("--config-dir <dir>", "Config directory with wallet.json", DEFAULT_CONFIG_DIR2).option("--json", "Output raw JSON only").action(async (server, service, paramsJson, options) => {
+program.command("pay <server> <service> [params]").description("Pay for a service and get the result").option("--prompt <text>", "Prompt for the service").option("--image <path>", "Image URL or local file path").option("--data <json>", "Raw JSON data to send (for custom input formats)").option("--token <token>", "Token to pay with (USDC or USDT)", "USDC").option("--chain <chain>", "Chain to pay on (base, polygon, base_sepolia, tempo_moderato, solana, or solana_devnet).").option("--config-dir <dir>", "Config directory with wallet.json", DEFAULT_CONFIG_DIR2).option("--json", "Output raw JSON only").action(async (server, service, paramsJson, options) => {
   const client = new MoltsPayClient({ configDir: options.configDir });
   if (!client.isInitialized) {
     console.error("\u274C Wallet not initialized. Run: npx moltspay init");
     process.exit(1);
   }
   let params = {};
-  if (paramsJson) {
+  let useRawData = false;
+  if (options.data) {
+    try {
+      params = JSON.parse(options.data);
+      useRawData = true;
+    } catch {
+      console.error("\u274C Invalid JSON in --data flag");
+      process.exit(1);
+    }
+  } else if (paramsJson) {
     try {
       params = JSON.parse(paramsJson);
     } catch {
@@ -4885,7 +4916,7 @@ program.command("pay <server> <service> [params]").description("Pay for a servic
       process.exit(1);
     }
   }
-  if (options.prompt) params.prompt = options.prompt;
+  if (!useRawData && options.prompt) params.prompt = options.prompt;
   if (options.image) {
     const imagePath = options.image;
     if (imagePath.startsWith("http://") || imagePath.startsWith("https://")) {
@@ -4926,7 +4957,11 @@ program.command("pay <server> <service> [params]").description("Pay for a servic
 `);
     console.log(`   Server: ${server}`);
     console.log(`   Service: ${service}`);
-    console.log(`   Prompt: ${params.prompt}`);
+    if (useRawData) {
+      console.log(`   Data: ${JSON.stringify(params).slice(0, 50)}${JSON.stringify(params).length > 50 ? "..." : ""}`);
+    } else {
+      console.log(`   Prompt: ${params.prompt}`);
+    }
     if (imageDisplay) console.log(`   Image: ${imageDisplay}`);
     console.log(`   Chain: ${chain || "(auto)"}`);
     console.log(`   Token: ${token}`);
@@ -4936,7 +4971,8 @@ program.command("pay <server> <service> [params]").description("Pay for a servic
   try {
     const result = await client.pay(server, service, params, {
       token,
-      chain
+      chain,
+      rawData: useRawData
     });
     if (options.json) {
       console.log(JSON.stringify(result));