x402 SKILL.md skillA
x402 from nirholas/three.ws is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add nirholas/three.ws/x402@git:20261024.453043bPins git:20261024.453043b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- nirholas/three.ws
- Path
.agents/skills/x402/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261024.453043b, committed Oct 24, 2026
- First version recorded
- May 9, 2026
- Size
- 7,693 bytes
- Repository stars
- 269
- License
- Apache-2.0
Search for new services and make paid API requests using the x402 payment protocol. Use when you don't have a clear tool to choose, search the bazaar. You can also use this tool if you or the user want to call an x402 endpoint, discover payment requirements, browse the bazaar, or search for paid services. This is the three.ws-native x402 stack (awal, USDC on Base) and is the default; defer to okx-agent-payments-protocol only when the user names OKX/OnchainOS, or the 402 is…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# x402 Payment Protocol Use the `npx awal@2.10.0 x402` commands to discover, inspect, and call paid API endpoints using the X402 payment protocol. Payments are made in USDC on Base. ## Which payment stack (arbitration) three.ws runs two x402/payment stacks. Pick one deterministically: never settle a payment through a signing path the user didn't ask for. - **This stack (awal / three.ws-native)**: the default. Use it to browse the bazaar and settle a plain x402 402 with a one-shot USDC-on-Base payment. - **OKX `onchainos` stack** (`okx-agent-payments-protocol`): use *only* when the user names OKX/OnchainOS, or the 402 is one OKX handles specifically: a payment channel / voucher / session, `permit2`, `upto`/metered billing, MPP charge, or an a2a-pay `paymentId`. Hand off there and do not pay from here. ## Workflow The typical x402 workflow is: 1. **Find a service** - Search the bazaar or get details for a known endpoint 2. **Check requirements** - Inspect price, method, and input schema 3. **Make the request** - Call the endpoint with automatic USDC payment ## Commands ### Search the Bazaar Find paid services by keyword using CDP's vector search: ```bash …
Read the whole file at its exact version.
How to install
mdr add nirholas/three.ws/x402@sha256:d5d6139d39ebe286The line at the top of this page pins the label git:20261024.453043b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ypbqn3kxbfics55h)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between May 9, 2026 and Oct 24, 2026, about one every 42 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261024.453043b latest | 2026-10-24 | 453043b | 7,693 B | A | view · diff |
| git:20261013.a9925cd | 2026-10-13 | a9925cd | 7,691 B | A | view · diff |
| git:20260712.0ed36dd | 2026-07-12 | 0ed36dd | 7,702 B | A | view · diff |
| git:20260707.d8cdbc2 | 2026-07-07 | d8cdbc2 | 5,652 B | A | view · diff |
| git:20260509.6757e0b | 2026-05-09 | 6757e0b | 5,561 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7693 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
nirholas/three.ws · 269 stars · license Apache-2.0 · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ypbqn3kxbfics55h GET https://markdownregistry.com/api/v1/resolve?ref=nirholas/three.ws/x402 GET https://markdownregistry.com/api/v1/blob/d5d6139d39ebe2863c71b4e7337cfa6e57066e2a33948f4fa31a166fdb7a1c5f
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from nirholas/three.ws
Every file in nirholas/three.ws