Latest Threat Research:Malicious dYdX Packages Published to npm and PyPI After Maintainer Compromise.Details
Socket
Book a DemoInstallSign in
Socket

@crossmint/lobster.cash

Package Overview
Dependencies
Maintainers
9
Versions
4
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@crossmint/lobster.cash

OpenClaw plugin for Solana wallet integration with Crossmint smart wallets

latest
Source
npmnpm
Version
0.3.2
Version published
Maintainers
9
Created
Source

Crossmint Wallet Plugin

Solana wallet integration for OpenClaw agents using the lobster.cash server flow.

Overview

This plugin enables OpenClaw agents to:

  • Generate and manage local Solana signing keys (ed25519)
  • Pair with a user wallet using consent-based setup (/api/claw/setup/*)
  • Use server-issued tokens for authenticated wallet and order operations
  • Check wallet balances
  • Send tokens
  • Buy products from Amazon

The plugin no longer requires manual API key pasting.

Installation

openclaw plugins install @crossmint/lobster.cash

Configuration

Enable the plugin in ~/.openclaw/.openclaw.json5:

{
  plugins: {
    entries: {
      "lobster.cash": {
        enabled: true,
        config: {
          serverBaseUrl: "https://www.lobster.cash",
          requestTimeoutMs: 15000,
        },
      },
    },
  },
}

If you previously installed an older build that used the openclaw-wallet id, remove that entry and extension to avoid duplicate plugin warnings.

Setup Workflow

Step 1: Start setup

Ask the agent: "Set up my Crossmint wallet"

The plugin will:

  • Generate (or reuse) a local signer keypair
  • Call POST /api/claw/setup/start
  • Sign pairingNonce locally
  • Call POST /api/claw/setup/verify
  • Return a consent URL for the user to open

Open the URL in browser and approve.

Step 3: Finalize setup

Run crossmint_setup again.

The plugin will:

  • Poll GET /api/claw/setup/status
  • Read retrievalNonce when approved
  • Sign retrievalNonce
  • Call POST /api/claw/setup/retrieve
  • Store walletAddress, accessToken, refreshToken, and expiry locally

Authentication Model

  • Protected calls use Authorization: Bearer <accessToken>
  • On expiry, plugin refreshes automatically via:
    • POST /api/claw/token/refresh/init
    • POST /api/claw/token/refresh
  • Refresh is proof-of-possession gated (signed nonce)

Tools

ToolDescription
crossmint_setupStart/finalize server-based setup flow
crossmint_configureDeprecated (kept for compatibility)
crossmint_balanceCheck wallet balances
crossmint_sendSend tokens to another address
crossmint_wallet_infoGet wallet/setup session info
crossmint_tx_statusCheck transaction status
crossmint_buyBuy products from Amazon with SOL or USDC
crossmint_order_statusCheck order status (uses stored order client secret when available)

Order Flow

For purchases, plugin uses proxy endpoints:

  • POST /api/proxy/orders
  • POST /api/proxy/wallets/:wallet/transactions (serialized transaction)
  • Local signature + POST /api/proxy/wallets/:wallet/transactions/:txId/approve
  • POST /api/proxy/orders/:orderId/payment with x-order-client-secret

Local Storage

Plugin state is stored at:

  • ~/.openclaw/crossmint-wallets/wallets.json
  • or CROSSMINT_WALLETS_DIR if set

Per agent it stores:

  • local signer keypair
  • pairing/setup state
  • wallet address
  • access/refresh tokens
  • order client secrets for follow-up status calls

Migration Note

If you previously configured wallet + API key manually, run crossmint_setup again to migrate.

Keywords

openclaw

FAQs

Package last updated on 13 Feb 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts