
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@t2000/mpp-sui
Advanced tools
Sui USDC payment method for the Machine Payments Protocol (MPP). Accept and make payments on any API — the first MPP implementation on Sui.
The Machine Payments Protocol is an open standard by Stripe and Tempo Labs for agent-to-service payments. When a server returns HTTP 402 Payment Required, the client pays automatically and retries — no API keys, no subscriptions, no human approval.
@t2000/mpp-sui adds Sui USDC as a payment method. It works with any MPP-compatible client or server via the mppx SDK.
npm install @t2000/mpp-sui mppx
Add payments to any API in 5 lines:
import { sui } from '@t2000/mpp-sui/server';
import { Mppx } from 'mppx';
const SUI_USDC = '0xdba34672e30cb065b1f93e3ab55318768fd6fef66c15942c9f7cb846e2f900e7::usdc::USDC';
const mppx = Mppx.create({
methods: [sui({ currency: SUI_USDC, recipient: '0xYOUR_ADDRESS' })],
});
export const GET = mppx.charge({ amount: '0.01' })(
() => Response.json({ data: 'paid content' })
);
No webhooks. No Stripe dashboard. No KYC. USDC arrives directly in your wallet.
import { sui } from '@t2000/mpp-sui/client';
import { Mppx } from 'mppx/client';
import { SuiJsonRpcClient, getJsonRpcFullnodeUrl } from '@mysten/sui/jsonRpc';
import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
const client = new SuiJsonRpcClient({
url: getJsonRpcFullnodeUrl('mainnet'),
network: 'mainnet',
});
const signer = Ed25519Keypair.deriveKeypair('your mnemonic');
const mppx = Mppx.create({
methods: [sui({ client, signer })],
});
const response = await mppx.fetch('https://api.example.com/resource');
// If the API returns 402, mppx pays automatically via Sui USDC.
If you're using the t2000 SDK, payments are even simpler:
import { T2000 } from '@t2000/sdk';
const agent = await T2000.create({ pin: 'my-secret' });
const result = await agent.pay({
url: 'https://api.example.com/generate',
body: { prompt: 'a sunset' },
maxPrice: 0.05,
});
// Handles 402 → pay → retry automatically.
// Safeguards enforced (max per tx, daily limits).
t2000 pay https://api.example.com/data --max-price 0.10
t2000 pay https://api.example.com/analyze \
--method POST \
--data '{"text":"hello"}' \
--max-price 0.05
Agent API Server
│ │
│── GET /resource ────────>│
│<── 402 Payment Required ─│
│ {amount, currency, │
│ recipient} │
│ │
│── USDC transfer on Sui ──│ (~400ms finality)
│ │
│── GET /resource ────────>│
│ + payment credential │── verify TX on-chain via RPC
│ (Sui tx digest) │
│<── 200 OK + data ────────│
No facilitator. No intermediary. The server verifies the Sui transaction directly via RPC.
sui(options)Creates a Sui USDC payment method for the server.
import { sui } from '@t2000/mpp-sui/server';
const method = sui({
currency: SUI_USDC, // Sui coin type for USDC
recipient: '0xYOUR_ADDR', // Where payments are sent
rpcUrl: '...', // Optional: custom RPC endpoint
network: 'mainnet', // Optional: 'mainnet' | 'testnet' | 'devnet'
});
Verification checks:
sui(options)Creates a Sui USDC payment method for the client.
import { sui } from '@t2000/mpp-sui/client';
const method = sui({
client: suiJsonRpcClient, // SuiJsonRpcClient instance
signer: ed25519Keypair, // Ed25519Keypair for signing
});
The client:
SUI_USDC_TYPEThe Sui coin type for Circle-issued USDC on mainnet.
import { SUI_USDC_TYPE } from '@t2000/mpp-sui';
// '0xdba34672e30cb065b1f93e3ab55318768fd6fef66c15942c9f7cb846e2f900e7::usdc::USDC'
fetchCoins(client, owner, coinType)Fetches all coins of a given type, handling Sui's pagination (max 50 per page).
parseAmountToRaw(amount, decimals)Converts a string amount to BigInt raw units without floating-point math.
parseAmountToRaw('0.01', 6); // 10000n
parseAmountToRaw('1.50', 6); // 1500000n
MPP is chain-agnostic. We chose Sui because agent payments need:
| Sui | |
|---|---|
| Finality | ~400ms |
| Gas | <$0.001 per payment |
| USDC | Circle-issued, native |
| Verification | Direct RPC — no facilitator |
pnpm --filter @t2000/mpp-sui test # 16 tests
pnpm --filter @t2000/mpp-sui typecheck
MIT — see LICENSE
FAQs
Sui USDC payment method for the Machine Payments Protocol (MPP)
We found that @t2000/mpp-sui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.