
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@operon/plugin-publisher-sdk
Advanced tools
ElizaOS plugin for Operon - monetize agent responses with quality-weighted sponsored placements
ElizaOS plugin for Operon — the open ad network for AI agents. Add quality-weighted sponsored placements to your agent's responses with zero prompt engineering.
The plugin runs a Provider that fires on every message. It sends the user's query to Operon's placement API, which runs a quality-weighted auction across registered advertisers. Context fields (category, asset, intent) are configurable via settings with empty defaults — the Operon server handles matching and returns blocked when nothing fits.
If a relevant, trustworthy service matches:
If nothing matches, the agent responds normally. No degradation, no empty ad slots.
Under the hood, this plugin is a thin ElizaOS adapter on top of @operon/sdk. The SDK owns network, retries, the circuit breaker, the per-client UUID, and source attribution; this package just maps ElizaOS settings and message lifecycle into SDK calls.
npx @elizaos/cli plugins add @operon/plugin-publisher-sdk
Or manually:
npm install @operon/plugin-publisher-sdk
Set the following environment variables (or character settings):
| Setting | Required | Description |
|---|---|---|
OPERON_API_URL | yes | Operon network endpoint, e.g. https://api.operon.so. Legacy alias OPERON_URL still works. |
OPERON_API_KEY | no | Publisher API key from Operon. Omit to run in sandbox mode — the SDK mints a stable client UUID locally and the server treats traffic as sandbox. |
OPERON_PUBLISHER_NAME | no | Publisher identifier (defaults to character name). |
OPERON_CATEGORY | no | Category, e.g. defi. Legacy alias OPERON_DEFAULT_CATEGORY. |
OPERON_INTENT | no | Intent, e.g. swap. Legacy alias OPERON_DEFAULT_INTENT. |
OPERON_ASSET | no | Asset, e.g. ETH. |
OPERON_SOURCE | no | Marketplace/skill attribution tag (first-touch wins; see @operon/sdk docs). |
OPERON_ALLOW_HTTP | no | Set to "true" to allow plain HTTP (development only). |
OPERON_DEBUG | no | Set to "true" to log connection details. |
import operonPublisherPlugin from "@operon/plugin-publisher-sdk";
export const character: Character = {
name: "MyResearchAgent",
plugins: [operonPublisherPlugin],
settings: {
secrets: {
OPERON_API_URL: process.env.OPERON_API_URL,
OPERON_API_KEY: process.env.OPERON_API_KEY, // optional
},
},
// ...
};
{
"name": "MyResearchAgent",
"plugins": ["@operon/plugin-publisher-sdk"],
"settings": {
"secrets": {
"OPERON_API_URL": "https://api.operon.so",
"OPERON_API_KEY": "your-publisher-key"
}
}
}
If OPERON_API_KEY is omitted, the plugin runs in sandbox mode:
~/.operon/client.json on first call (override with OPERON_CLIENT_ID for read-only filesystems).To register as a real publisher, install the SDK CLI and follow the prompts: npx @operon/sdk register.
When a sponsored placement fills:
[Sponsored] Relevant service available: Jupiter Aggregator
- Best-rate DEX aggregation across Solana
- Trust score: 82/100
When nothing matches, the response is clean — no mention of Operon or sponsorship.
The plugin sends the following to the Operon API on every message:
placement_contextX-Operon-Client header — stable UUID from ~/.operon/client.json (or env override)X-Operon-Source header — only when OPERON_SOURCE is setNo wallet addresses, private keys, or credentials are extracted or sent separately, but any content in the user's message text will be included in the API request. Publishers should consider this when deciding whether to integrate the plugin.
See operon-otaku for a complete example of an ElizaOS agent with the Operon plugin integrated.
FAQs
ElizaOS plugin for Operon - monetize agent responses with quality-weighted sponsored placements
We found that @operon/plugin-publisher-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.