ClawKit Logo
ClawKitReliability Toolkit
Back to Registry
Official Verified finance Safety 5/5

clawtar

Demo skill for practicing Cashu HTTP 402 payment flow end-to-end: detect 402, review x-cashu challenge, request permission when needed, settle payment, and retry with X-Cashu.

Why use this skill?

Master HTTP 402 payment handling for AI agents. The Clawtar skill provides a secure, controlled sandbox for testing Cashu-gated API requests.

skill-install — Terminal

Install via CLI (Recommended)

clawhub install openclaw/skills/skills/robwoodgate/clawtar
Or

What This Skill Does

The Clawtar skill is a specialized demo tool designed to help OpenClaw agents master the Cashu HTTP 402 payment flow. In the decentralized web, services often protect their endpoints behind "Pay-to-Access" gateways, requiring a payment before delivering content. Clawtar simulates this by providing a fortune-telling endpoint that rejects initial requests with an HTTP 402 status code and a custom x-cashu challenge header.

When an agent interacts with this skill, it learns the complete cycle of modern payment handling: detecting the payment requirement, extracting the NUT-24 challenge, determining if it has authorized spending capabilities (via the cocod wallet tool), and successfully retrying the request with a valid X-Cashu payment token. This makes it an essential "training ground" for agents to understand how to handle micro-payments autonomously while maintaining strict human-in-the-loop security standards.

Installation

To add this skill to your OpenClaw agent, execute the following command in your terminal or agent console: clawhub install openclaw/skills/skills/robwoodgate/clawtar

Ensure that you have appropriate permissions configured before initiating payments. If you want your agent to handle the 402 flows autonomously, you should also consider installing the cocod wallet tool from https://clawhub.ai/Egge21M/cocod once you have reviewed the necessary security permissions.

Use Cases

  • Educational Sandbox: Perfect for developers and AI agents testing their ability to handle 402 payment errors gracefully without risking real-world assets in high-stakes production environments.
  • Agent Training: Allows agents to practice negotiation and spending workflows. An agent can learn to verify if it has enough funds in its wallet before attempting to satisfy a paywall.
  • Debugging Payment Logic: If your agent is failing to retrieve data from gated endpoints, Clawtar provides a known-working environment to isolate and resolve issues with X-Cashu header formatting or challenge resolution.

Example Prompts

  1. "Clawtar, I am feeling uncertain about the future. Can you tell me if my latest project will ship? Use a funny style."
  2. "I want to test my payment flow. Reach out to the Clawtar endpoint, handle the 402 challenge, and provide me with a chaotic fortune reading."
  3. "Can you please request a wholesome fortune from the Clawtar service? Remember to check if you have permission to spend the 42 satoshis required before proceeding."

Tips & Limitations

  • Safety First: Always remember that a challenge string (x-cashu) is just a request for payment, not a token itself. Never send sensitive data in the initial request.
  • Spending Limits: This skill requires 42 satoshis per request. Always define a spending limit for your agent to prevent unauthorized drains on your wallet.
  • Human-in-the-loop: If you have not installed cocod, the agent will be unable to pay automatically. In such cases, the agent should correctly identify the 402 status and ask you for a valid token manually.

Metadata

Stars1133
Views1
Updated2026-02-18
View Author Profile
AI Skill Finder

Not sure this is the right skill?

Describe what you want to build — we'll match you to the best skill from 16,000+ options.

Find the right skill
Add to Configuration

Paste this into your clawhub.json to enable this plugin.

{
  "plugins": {
    "official-robwoodgate-clawtar": {
      "enabled": true,
      "auto_update": true
    }
  }
}

Tags(AI)

#cashu#payments#demo#402#fortunes
Safety Score: 5/5

Flags: external-api