How should SP3ND — Shop products and Collector Crypt cards with USDC be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

SP3ND — Shop products and Collector Crypt cards with USDC

Purchase shipped products and tokenized Collector Crypt cards through SP3ND with USDC on Solana. Use for product links, live pricing, idempotent orders, payment, and fulfillment tracking. Collector Crypt purchases use wallet delivery with manual acquisition and transfer by SP3ND.

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

1.9k

Updated

Oct 9, 2026

Version

1.11.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.9K downloads reported by the source. Last updated 10/9/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 9, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 9, 2026
Adoption signal: 1.9K downloadsadoption · observed Oct 9, 2026
Latest release: 1.11.0release · observed Sep 16, 2026
Handshake status: UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s17amvqqmqj810kc2mtehk5gs183y85t:sp3nd

Install using `clawhub skill install s17amvqqmqj810kc2mtehk5gs183y85t:sp3nd` in an isolated environment before connecting it to live workloads.
No published capability contract is available yet, so validate auth and request/response behavior manually.
Review the upstream CLAWHUB listing at https://clawhub.ai/kent-x1/sp3nd before using production credentials.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-kent-x1-sp3nd/snapshot"

Documentation

CLAWHUB

147,020 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

---
name: sp3nd
description: Purchase shipped products and tokenized Collector Crypt cards through SP3ND with USDC on Solana. Use for product links, live pricing, idempotent orders, payment, and fulfillment tracking. Collector Crypt purchases use wallet delivery with manual acquisition and transfer by SP3ND.
metadata:
version: 1.11.0
openclaw:
requires:
env:
- SP3ND_API_KEY
- SP3ND_API_SECRET
primaryEnv: SP3ND_API_KEY
config:
requiredEnv:
- SP3ND_API_KEY
- SP3ND_API_SECRET
optionalEnv:
- SOLANA_RPC_URL
- AGENT_WALLET_PATH
stateDirs:
- .wallet.json
---

# SP3ND Agent Purchasing

SP3ND accepts stablecoins for shipped products and tokenized Collector Crypt cards. This skill describes the production Agent API contract, including asynchronous pricing and manual fulfillment.

Choose the payment flow by product type before checkout:

| Purchase | Payment flow | Fulfillment |
|---|---|---|
| Collector Crypt card | `partnerPayment`: prepare, sign the exact transaction, submit | SP3ND manually purchases the exact card and transfers it to the paying wallet |
| Shipped products through the existing agentic x402 integration | `payAgentOrder` | Physical shipping |
| Shipped products through the normal Partner API integration | `createPartnerTransaction` | Physical shipping |

For Collector Crypt, read [Collector Crypt checkout](references/collector-crypt.md) before creating the cart or signing a payment. Both `payAgentOrder` and `createPartnerTransaction` reject real card orders with `COLLECTOR_CRYPT_PAYMENT_METHOD_UNSUPPORTED`; do not fall back to either endpoint. Normal approved API credentials work without a separate Collector Crypt opt-in.

## Base URL and authentication

```text
https://us-central1-sp3nddotshop-prod.cloudfunctions.net
```

Authenticated requests use:

```http
X-API-Key: <api_key>
X-API-Secret: <api_secret>
```

Keep both credentials and the agent wallet private. Never log or commit secrets or wallet key material.

## Non-negotiable safety rules

1. **SP3ND is authoritative for product data and money.** Submit product URLs and quantities. Never treat caller-supplied title, price, shipping, tax, fee, total, currency, recipient, or memo as authoritative.
2. **An order is not always immediately payable.** Inspect `payment_ready` and `pricing_status` after creation and every refresh.
3. **Only pay when `payment_ready === true`.** Canonical current orders also report `pricing_status: "ready_for_payment"`. The deprecated `quoted` value may appear on legacy orders, but it is compatibility metadata and never replaces the `payment_ready` gate.
4. **Never pay an expired quote.** Check `quote_expires_at` immediately before payment and refresh the order if it has expired or is about to expire.
5. **Use stable idempotency keys.** Reuse the same order key after a timeout or uncertain response. Never generate a new key for a retry of the same intended purchase

README.md

# SP3ND Agent Skill

The SP3ND Agent Skill lets an agent buy shipped products and tokenized Collector Crypt cards with USDC on Solana. SP3ND fetches prices, accepts payment, and handles fulfillment. For Collector Crypt, SP3ND staff manually purchase the exact card and transfer the NFT to the paying wallet.

## Install

```bash
npx skills add kent-x1/sp3nd-agent-skill
```

The skill follows the [Agent Skills](https://agentskills.io) format. For a manual installation, copy `SKILL.md` together with `references/` and `scripts/` into the skill directory so its linked checkout instructions and examples are available. This release is version **1.11.0**; users with older installed copies should update them to discover Collector Crypt checkout.

## Collector Crypt

Give the agent a canonical `https://collectorcrypt.com/assets/solana/<asset-address>` link, or ask it to search eligible live listings. Approved API credentials work without a separate Collector Crypt opt-in.

```text
one card URL -> live quote -> wallet-delivery order
-> partnerPayment prepare -> buyer signs exact bytes -> submit
-> confirmed USDC payment to SP3ND
-> manual purchase -> manual NFT transfer -> Delivered
```

One card per order, quantity `1`, with no shipping address. Quotes last five minutes. The payer and NFT recipient must be the same wallet; paying from an agent wallet means the NFT is delivered to that agent wallet. The listing is not reserved on Collector Crypt, so an unavailable card may require review and a refund.

Read [Collector Crypt checkout](references/collector-crypt.md) for request examples, transaction verification, exact-byte retries, and manual delivery tracking. Card payments use only `partnerPayment`; the x402 helper and `createPartnerTransaction` do not support cards. `Paid` confirms receipt of USDC, not NFT delivery.

## Shipped-product lifecycle

```text
product URL + quantity
-> server-priced cart
-> idempotent order
-> Ready for Payment
-> or Awaiting Review until SP3ND supplies a quote
-> Ready for Payment
-> shipping selection when required
-> server-issued x402 requirements
-> payment
-> fulfillment tracking
```

Mixed or unverified carts remain one order. An agent must not pay while `payment_ready` is false, while a quote is expired, or while a required shipping option is unselected. Canonical current orders use `pricing_status: "ready_for_payment"`; deprecated `quoted` may appear on legacy orders, but never makes an order payable by itself.
An `Awaiting Review` order must reach **Ready for Payment** before it becomes `Paid`; it must never skip that gate.

SP3ND is authoritative for listing data and all monetary fields. Agents submit product URLs and quantities; caller-supplied prices, totals, currency, payment recipients, and memos must never control a purchase.

For end-user purchases, send `user_wallet` so order history and points are attributed to the correct wallet.

## Shipped-product x402 example

This e

_meta.json

{
  "ownerId": "kn75pfwb85nrhe79v5fcq4gv8981gfmx",
  "slug": "sp3nd",
  "version": "1.11.0",
  "publishedAt": 1789580959575
}

references/collector-crypt.md

# Collector Crypt checkout

Use this flow when the user supplies a Collector Crypt card link or asks to find and buy a tokenized card. SP3ND fetches the live listing, accepts the customer's USDC payment, and then manually purchases and transfers the NFT. The agent handles checkout and status tracking; SP3ND staff handle acquisition, transfer, review, and refunds.

## Contents

- [Requirements](#requirements)
- [Optional card discovery](#optional-card-discovery)
- [Quote the exact card](#quote-the-exact-card)
- [Create the wallet-delivery order](#create-the-wallet-delivery-order)
- [Prepare, sign, and submit payment](#prepare-sign-and-submit-payment)
- [Payment retries and expiry](#payment-retries-and-expiry)
- [Track manual wallet delivery](#track-manual-wallet-delivery)

## Requirements

Base URL: `https://us-central1-sp3nddotshop-prod.cloudfunctions.net`.

Send `X-API-Key` and `X-API-Secret` on every request below, and `Content-Type: application/json` on POST requests. Normal approved Partner/agent credentials work without a separate Collector Crypt opt-in. Keep credentials server-side. `getAgentStatus.agent.collector_crypt_enabled` is a discovery capability, not a flag the caller must enable.

- Accept only canonical card links shaped as `https://collectorcrypt.com/assets/solana/<asset-address>`. The server validates the Solana address and current listing.
- The eligible asset must be a native-Solana Collector Crypt V2 buy-now listing priced in USDC. Supported standards are `Pnft`, `Cnft`, `StandardNft`, and `CoreNft`; not every Collector Crypt page or card is purchasable.
- One card per cart and order, quantity `1`; no mixed carts or shipping address.
- `user_wallet`, `asset_recipient_wallet`, and payment `payer_address` must all be the same valid, on-curve Solana wallet. If an agent pays from its own funded wallet, that wallet receives the NFT. If delivery is intended for another person's wallet, that wallet must authorize the payment. Do not promise gifting or silently substitute the agent's wallet.
- Only `partnerPayment` prepare/submit supports payment for real cards. Neither `payAgentOrder` nor `createPartnerTransaction` is a fallback; both return `COLLECTOR_CRYPT_PAYMENT_METHOD_UNSUPPORTED`.

## Optional card discovery

Skip search when the user already supplied the exact card URL.

```http
GET /searchCollectorCryptCards?q=charizard%20psa%2010&limit=20
```

Read `items` and the opaque `next_cursor` from the response. To fetch another page, URL-encode the cursor unchanged in the `cursor` query parameter. Each card includes `product_url`, `nft_address`, `price`, `currency`, and listing metadata. Search does not reserve a listing. Insured value, catalog counts, and search prices are informational; the cart request refetches the exact card and establishes pricing.

## Quote the exact card

```http
POST /createPartnerCart

{
  "items": [{
    "product_url": "https://collectorcrypt.com/assets/solana/<asset-address>",
    "quantity": 1
  }],

skill-card.md

## Description:

Purchase shipped products and tokenized Collector Crypt cards through SP3ND with USDC on Solana using server-priced carts, payment-ready order gates, and fulfillment tracking.

This skill is ready for commercial/non-commercial use.

## Publisher:

[kent-x1](https://clawhub.ai/user/kent-x1)

### License/Terms of Use:

MIT-0

## Use Case:

External agents and developers use this skill to create SP3ND carts and orders for Amazon, eBay, and Collector Crypt purchases, pay approved USDC quotes, and track shipped-product or wallet-delivered fulfillment. It is intended for real checkout flows where server-authoritative pricing, idempotency, wallet attribution, and payment status must be respected.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: The skill can initiate real USDC payments for shipped products and Collector Crypt cards.

Mitigation: Use a dedicated least-funded wallet, set explicit spending limits or human approval rules, and pay only after SP3ND returns a current payment-ready quote.

Risk: API credentials, wallet key material, shipping details, and contact details are sensitive.

Mitigation: Keep SP3ND credentials and wallet files private, avoid logging or committing secrets, and provide shipping or contact data only for the intended checkout.

Risk: Retrying after a timeout or ambiguous settlement can create payment uncertainty.

Mitigation: Preserve idempotency keys and signed transaction bytes, read the order before retrying, and retry only the identical authorized payment when the API allows it.

Risk: Collector Crypt payment confirms SP3ND treasury receipt but does not itself prove NFT delivery.

Mitigation: Continue polling until the order is delivered with asset transfer evidence, and do not buy replacement cards or transfer assets outside the documented fulfillment flow.

Risk: Collector Crypt listings can sell or change before manual acquisition is completed.

Mitigation: Refresh expired or changed quotes, reconfirm changed totals against the user's authorization, and let SP3ND handle review or refunds.

## Reference(s):

- [Published ClawHub Skill](https://clawhub.ai/kent-x1/skills/sp3nd)
- [Collector Crypt checkout](references/collector-crypt.md)
- [SP3ND API documentation](https://sp3nd.shop/partner-api/docs)
- [SP3ND Agent Card](https://sp3nd.shop/.well-known/agent-card.json)
- [Published SP3ND skill](https://sp3nd.shop/skill.md)

## Skill Output:

**Output Type(s):** [guidance, markdown, code, shell commands, configuration]

**Output Format:** [Markdown guidance with HTTP examples, JSON request and response examples, JavaScript code, shell commands, and configuration notes]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [Requires SP3ND API credentials and may use a Solana wallet state file for payment examples.]

## Skill Version(s):

1.11.0 (source: evidence.release.version, artifact SKILL.md metadata.version, clawhub.json version, agent-card.json ver

Github ReposUpdated 7h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.