Individual skill
agents-pay
Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments, and applying operator-defined spend limits. Covers payment setup, policy, session budgets, and troubleshooting. Triggers on: "my agent hit a 402 while calling an API", "a tool call returned 402 Payment Required", "my agent needs to pay for x402-protected content", "let the agent pay for content, capped at $5 per session", "set a spend limit for the agent", "ProcessPayment failed", or "why did my agent refuse to pay". Not for BUILDING payment capability for end users, including wallets and framework middleware; use agents-build and references/payments.md. For non-paid APIs via Gateway use agents-connect. For inbound auth use agents-harden. For project scaffolding use agents-get-started.
plugins/aws-agents/skills/agents-pay/SKILL.md
Source commit 1761e96813ebcbd43ed81d19e837219033f0afe5
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,438
- Repository last updated
- Nov 7, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- writing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
.gitignoreasset · 6 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytesSKILL.mdcore · 26,244 bytespackages/openclaw/.gitignoreasset · 43 bytespackages/openclaw/PUBLISHING.mddoc · 3,143 bytespackages/openclaw/README.mddoc · 5,476 bytespackages/openclaw/openclaw.plugin.jsonasset · 2,677 bytespackages/openclaw/package-lock.jsonasset · 13,771 bytespackages/openclaw/package.jsonruns · 1,186 bytespackages/openclaw/runtime/agentcore_bridge.pyruns · 4,491 bytespackages/openclaw/scripts/stage-skill.mjsruns · 891 bytespackages/openclaw/src/bridge.tsruns · 4,443 bytespackages/openclaw/src/config.tsruns · 5,598 bytespackages/openclaw/src/index.tsruns · 4,871 bytespackages/openclaw/src/payments.tsruns · 4,730 bytespackages/openclaw/src/x402.tsruns · 14,401 bytespackages/openclaw/test/fixtures/v2-security-contract.jsonasset · 1,637 bytespackages/openclaw/test/security.test.mjsruns · 16,348 bytespackages/openclaw/test/test_agentcore_bridge.pyruns · 6,376 bytespackages/openclaw/test/test_setup_openclaw.pyruns · 3,601 bytespackages/openclaw/tsconfig.jsonasset · 307 bytesreferences/openclaw-setup.mddoc · 7,901 bytesreferences/operator-guide.mddoc · 15,145 bytesreferences/security-model.mddoc · 17,895 bytesreferences/setup.mddoc · 13,045 bytesreferences/troubleshooting.mddoc · 12,188 bytesrequirements.txtdoc · 388 bytesscripts/agents_pay_admin.pyruns · 45,693 bytesscripts/test_portability.pyruns · 7,977 bytesscripts/test_resource_resolution.pyruns · 3,748 bytesscripts/test_x402_policy.pyruns · 58,621 bytesscripts/x402_fetch.pyruns · 34,348 bytesscripts/x402_fetch_cli.pyruns · 3,134 bytesscripts/x402_policy.pyruns · 26,428 bytes
Read excerpt
# pay
Let an agent pay for x402-protected content without letting the agent — or
anything it reads — decide who gets paid, how much, or how often.
## The one idea that matters
**A payment decision is made in code, from a policy file, before any signing.**
Nothing the model says, and nothing inside fetched content, can authorize a
payment or raise a limit.
An instruction to a model is not an access control: it is a request that a
confused or prompt-injected model may decline. Controls must be enforced in code
at the point where payment is authorised.