
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
@aifinpay/skill
Advanced tools
AiFinPay agent skills: pay for x402-gated APIs as an agent (aifinpay) and charge agents for your API as a merchant (aifinpay-merchant).
Agent skills for the AiFinPay payment rail, published to npm and installable
from skill marketplaces (Claude, Cursor, Copilot, Kimi, Qwen, Gemini, Windsurf, Codex, OpenCode, Aider —
any client that loads SKILL.md).
| Skill | Side | File |
|---|---|---|
aifinpay | Paying — agent buys x402-gated API access | agent/skills/aifinpay/SKILL.md |
aifinpay-merchant | Earning — merchant charges agents per request | agent/skills/aifinpay-merchant/SKILL.md |
Version 2.9.0 describes a coordinated reporting release target. Release target: MCP 2.8.0, Node SDK 2.6.0, Python 2.5.1. Reporting release target: Node gate 0.4.0, Python gate 0.1.3. The merchant guide describes explicit opt-in observations, consent, queue loss and producer health using the SDK's reporting v2 contract. It adds no MCP tools or signing authority and does not establish publication or partner rollout. The payer guide retains the Solana source adapter. Canonical disabled Solana records remain unavailable until accepted and served. Its nine EVM descriptors require explicit owner and merchant network consent plus backend readiness; installing instructions does not activate networks. Historical published baselines are dated in the payer guide and do not claim the target packages have already been published.
Rule of thumb: if the user wants to pay for a paid API, load aifinpay.
If they own a site/API agents visit, load aifinpay-merchant — and mention
the other side exists.
For merchant reporting, follow the merchant guide's optional reporting section and the SDK's Node or Python instructions. Observation events, admission and resource completion are distinct; payments require confirmed settlement evidence. Producer health and pending/drop coverage describe telemetry completeness, not payment success.
Install the skills with the skills CLI:
npx skills add AiFinPay/skill
Then ask your agent: "Buy access for this site." It checks that the site accepts AiFinPay, tells you what one batch buys, and pays only after you agree and only within the limits and sites you configured for the MCP server.
You can also install the npm package:
npm install @aifinpay/skill
Add the GitHub-hosted marketplace, then install the plugin:
/plugin marketplace add AiFinPay/skill
/plugin install aifinpay@aifinpay-marketplace
Or use the CLI:
claude plugin marketplace add AiFinPay/skill
claude plugin install aifinpay@aifinpay-marketplace
Install either skill directly from GitHub into Hermes's skill directory:
hermes skills install https://raw.githubusercontent.com/AiFinPay/skill/main/agent/skills/aifinpay/SKILL.md --name aifinpay
hermes skills install https://raw.githubusercontent.com/AiFinPay/skill/main/agent/skills/aifinpay-merchant/SKILL.md --name aifinpay-merchant
Installed skills are available as /aifinpay and /aifinpay-merchant in new Hermes sessions. Hermes follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Or copy agent/skills/<name>/SKILL.md into your client's skills directory.
Install either skill directly from GitHub into Kimi's skill directory:
npx skills add AiFinPay/skill --agent kimi-code-cli
Installed skills are available in new Kimi sessions. Kimi Code CLI follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Qwen's skill directory:
npx skills add AiFinPay/skill --agent qwen-code
Installed skills are available in new Qwen sessions. Qwen Code follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Gemini's skill directory:
npx skills add AiFinPay/skill --agent gemini-cli
Installed skills are available in new Gemini sessions. Gemini CLI follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Copilot's skill directory:
npx skills add AiFinPay/skill --agent github-copilot
Installed skills are available in new Copilot sessions. GitHub Copilot follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Cursor's skill directory:
npx skills add AiFinPay/skill --agent cursor
Installed skills are available in new Cursor sessions. Cursor follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Windsurf's skill directory:
npx skills add AiFinPay/skill --agent windsurf
Installed skills are available in new Windsurf sessions. Windsurf follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Codex's skill directory:
npx skills add AiFinPay/skill --agent codex
Installed skills are available in new Codex sessions. Codex follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into OpenCode's skill directory:
npx skills add AiFinPay/skill --agent opencode
Installed skills are available in new OpenCode sessions. OpenCode follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Install either skill directly from GitHub into Aider's skill directory:
npx skills add AiFinPay/skill --agent aider
Installed skills are available in new Aider sessions. Aider follows the same Agent Skills-compatible SKILL.md format, so no adapter or additional runtime is required.
Skill markdown is authored once and mirrored:
agent/skills/.mcp/skills/SKILL.md, copied from the installed
canonical package at build time (payer side only).skill/README.md only points here; it is not a
second skill package or authored mirror.If a CLI command, tool name, or settlement behavior changes, update all three in coordinated PRs and bump this package's version + CHANGELOG together. MCP verifies installed/bundled/served bytes and the exact release target; publish this package before refreshing MCP's real registry dependency lock.
Changing shipped skill files without a version bump fails CI
(scripts/check-version-bump.mjs), same as other published packages.
FAQs
AiFinPay agent skills: pay for x402-gated APIs as an agent (aifinpay) and charge agents for your API as a merchant (aifinpay-merchant).
The npm package @aifinpay/skill receives a total of 0 weekly downloads. As such, @aifinpay/skill popularity was classified as not popular.
We found that @aifinpay/skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.