Skip to content

Pay x402 gateways when the HTTP node meets one - #237

Merged
ralyodio merged 1 commit into
masterfrom
x402-crawler
Sep 5, 2026
Merged

Pay x402 gateways when the HTTP node meets one#237
ralyodio merged 1 commit into
masterfrom
x402-crawler

Conversation

@ralyodio

@ralyodio ralyodio commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

Wires @profullstack/x402-client into the HTTP call node's fetch. Env-gated on X402_PRIVATE_KEY (set on Railway), $5 cap, plain fetch when unset. vitest 132/132, node tests 258/258.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NSGS7Sy3QmEgTNZDg4eq7g

…ient)

The HTTP call node fetches through a paidFetch: with X402_PRIVATE_KEY set
on the orchestrator, a 402 carrying an x402 offer is signed with the
shared crawler wallet, the pass is filed by origin and presented on every
later call to that site. Without the key it is the global fetch,
unchanged. Capped at five dollars a payment. The client is listed in
minimumReleaseAgeExclude because it was published today and pnpm 11
refuses packages younger than a day.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NSGS7Sy3QmEgTNZDg4eq7g
@socket-security

Copy link
Copy Markdown
Contributor

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​profullstack/​x402-client@​0.2.07710010090100

View full report

@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

9 finding(s)

HIGH/CRITICAL: 5 | MEDIUM: 2 | LOW: 2

Severity Rule Location
HIGH secret-database-url apps/web/.env.example:9
HIGH secret-database-url docs/Environment-Setup.md:46
HIGH secret-database-url docs/Environment-Setup.md:132
HIGH secret-slack-webhook docs/WEBHOOK_CONFIGURATION.md:145
HIGH secret-generic-credential src/nodes/README.md:271
MEDIUM sql-template-interpolation apps/web/src/routes/api/secrets/[id]/+server.js:80
MEDIUM sql-template-interpolation apps/web/src/routes/api/workflows/[id]/+server.js:141
LOW sql-template-interpolation docs/Turso-Migration.md:70
LOW secret-generic-credential src/nodes/webhook.test.js:287

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 51bf364 into master Sep 5, 2026
4 checks passed
@ralyodio
ralyodio deleted the x402-crawler branch September 5, 2026 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant