
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
solinkify-sdk
Advanced tools
Solinkify is a decentralized payment infrastructure on the Solana network designed to bridge digital assets with Merchants (E-commerce) and Autonomous AI Agents (M2M).
This project combines Anchor Smart Contracts, a Rust (Axum) backend for off-chain scalability, and a plug-and-play JavaScript SDK.
Use NPM or Yarn to integrate Solinkify into your project:
npm install solinkify-sdk
Merchants can accept Solana payments without worrying about the complexities of building Web3 transactions.
Suitable for basic HTML or simple backend systems.
import { SolinkifyMerchant } from 'solinkify-sdk';
const merchant = new SolinkifyMerchant();
async function handlePayment() {
// 1. Get a ready-to-use transaction from Solinkify
const tx = await merchant.createPaymentTransaction(
"YOUR_STORE_WALLET",
"BUYER_WALLET",
0.1, // Amount in SOL
"ORDER-12345" // Order ID
);
// 2. Request buyer's wallet approval (Phantom, etc.)
const provider = window.phantom?.solana;
const { signature } = await provider.signAndSendTransaction(tx);
console.log("Payment Successful! TxID:", signature);
}
Direct integration into the checkout button in your modern frontend.
import { useWallet } from '@solana/wallet-adapter-react';
import { Connection } from '@solana/web3.js';
import { SolinkifyMerchant } from 'solinkify-sdk';
export default function CheckoutButton() {
const { publicKey, sendTransaction } = useWallet();
// Set to Devnet for the testing/development phase
const connection = new Connection("[https://api.devnet.solana.com](https://api.devnet.solana.com)");
const handleCheckout = async () => {
if (!publicKey) return alert("Please connect your wallet first!");
try {
const merchantApi = new SolinkifyMerchant();
// 1. Generate transaction from the Solinkify SDK
const tx = await merchantApi.createPaymentTransaction(
"YOUR_STORE_WALLET",
publicKey.toBase58(),
0.1,
"INV-REACT-001"
);
// 2. Execute transaction via the DApp's built-in Wallet Adapter
const signature = await sendTransaction(tx, connection);
alert(`Payment Successful! TxID: ${signature}`);
} catch (error) {
console.error("Payment failed:", error);
}
};
return (
<button
onClick={handleCheckout}
style={{ background: '#9945FF', color: 'white', padding: '10px 20px', borderRadius: '8px', cursor: 'pointer' }}
>
Pay 0.1 SOL (Devnet) via Phantom
</button>
);
}
Solinkify's x402 Protocol enables AI to purchase data or APIs autonomously without human intervention. The SDK handles HTTP 402 Payment Required negotiation, blockchain payments, and cryptographic verification behind the scenes.
import { SolinkifyAgent } from 'solinkify-sdk';
// Initialize with AI Private Key (Base58)
const agent = new SolinkifyAgent("YOUR_AI_PRIVATE_KEY_BASE58");
async function buyDigitalAsset() {
try {
// Automated: Get Invoice -> Pay On-Chain -> Cryptographic Sign -> Download URL
const downloadUrl = await agent.purchaseAndDownload("DIGITAL_ASSET_ID");
console.log("✅ Asset successfully purchased. Download link:", downloadUrl);
} catch (error) {
console.error("❌ Failed to purchase asset:", error.message);
}
}
AaKvuhidmnrpXdHi762sJ1xZ5TrjragS9Y6ikwFVp1trBase URL: https://api.solinkify.com/
| Endpoint | Method | Description |
|---|---|---|
/gateway/create-payment | POST | Creates an unsigned M2M transaction with fee-splitting instructions for the Merchant. |
/x402/book/:id | GET | Requests an invoice or downloads the asset (Requires 3 Security Headers). |
/actions/buy/:id | GET/POST | Native endpoint for the Solana Blinks standard. |
/books | GET | Fetches the list of digital assets that are live in the database. |
If you are not using the SolinkifyAgent module and are making API calls manually, you must include these 3 headers in the second GET request (after the on-chain payment is complete) to claim the file:
x-payment-signature: The TxID (Signature) of your SOL transfer proof on the Solana network.x-buyer-pubkey: The Public Key of the wallet used for the payment.x-auth-signature: A cryptographic signature (Ed25519) of a message containing the string ${book_id}:${signature} using the buyer's private key.Distributed under the ISC License.
Solinkify - Empowering the Machine-to-Machine Economy on Solana. Website | API Dashboard
FAQs
Official SDK for Solinkify M2M & Merchant Gateway
We found that solinkify-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.