[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_108":109},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_56":48,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":-5,"_77":-5,"_78":48,"_79":-5,"_80":58,"_81":82,"_83":84,"_85":86,"_87":88,"_89":90},"apiUrl","https://odel.app/api","creator","inviti8","moduleId","obolus","@inviti8/obolus","displayName","Obolus","tagline","Disposable Algorand wallet for AI agents. Pay x402 resources in USDC, no human provisioning.","iconKey","https://avatars.githubusercontent.com/u/5375155?v=4","category","local","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","pricingModel","free","creatorUserId","system:external-import","createdAt",1786776788000,"updatedAt",1788329989000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.inviti8%2Fobolus","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",0,"upstreamUpdatedAt",1788267685000,"detectedTransport","detectedAuthType","probeStatus","lastProbedAt","githubRepoUrl","https://github.com/inviti8/Obolus","githubRepoFullName","inviti8/Obolus","releaseId","ext-inviti8-obolus","version","0.2.3","descriptionMarkdown","\n\n

\n $\"Obolus\"$ \n

\n\n

Obolus

\n\n\n\n

\nAn MCP server that gives an AI agent a disposable Algorand wallet, so it can\npay for x402 resources without a human provisioning\nanything.\n

\n\nThe name is the coin paid to the ferryman for passage: small denomination, one\npurpose, spent and gone.\n\n```\nagent → x402_fetch(url) → 402 → sign → pay → body\n```\n\nx402 has over a thousand listed resources and almost no buyers — a handful of\nwallets account for nearly all volume, and they are scripted loops rather than\nagents. The rail exists; nothing can reach it. Obolus is the buyer-side piece:\naccount setup, opt-in, signing and sweeping handled invisibly, so an agent just\nspends.\n\n---\n\n## Install\n\n### Claude Code — the plugin\n\n```\n/plugin marketplace add inviti8/Obolus\n/plugin install obolus@heavymeta\n```\n\nWires up the MCP server and adds `/obolus:fund-wallet`, which knows the bootstrap\norder and why it cannot be rearranged. Nothing to install first beyond\n[uv](https://docs.astral.sh/uv/) — the server is launched with `uvx obolus mcp`.\n\n### Everything else\n\n```bash\nuv tool install obolus\n```\n\n`uv tool install` rather than `uvx` **for the CLI**: uvx re-resolves on every\ninvocation, measured at 200–400 ms over an installed console script. That is\nnothing once per session, which is all the MCP server costs — it is why the\nplugin above uses `uvx` — but it is the wrong trade for a command called in a\nloop. `pipx install obolus` works too.\n\n#### Add it to Claude Code by hand\n\n```bash\nclaude mcp add obolus -e OBOLUS_NETWORK=testnet -- obolus-mcp\n```\n\n#### Add it to any other MCP client\n\n```json\n{\n \"mcpServers\": {\n \"obolus\": {\n \"command\": \"obolus-mcp\",\n \"env\": { \"OBOLUS_NETWORK\": \"testnet\" }\n }\n }\n}\n```\n\n**It starts on testnet.** Mainnet is never disabled — Obolus is meant to make real\npayments — but it is never what you get by forgetting to choose.\n\n---\n\n## Fund it\n\nA new vault holds nothing, and the order is forced by the chain:\n\n```bash\nobolus vault # says which of the three steps you are on\nobolus vault qr # scannable codes for the two things you can send\n```\n\n| # | Step | Who |\n|---|---|---|\n| 1 | Send ≥ 0.21 ALGO to the vault | you |\n| 2 | Opt the vault into USDC (`obolus vault optin`) | Obolus |\n| 3 | Send USDC | you |\n\n**Step 3 before step 2 fails.** An Algorand account cannot receive an asset it\nhas not opted into — the transfer is rejected outright, it does not sit pending.\nThat is why the QR codes encode the asset id and not just the address, and why\n`wallet_funding_info` tells you which step you are on every time rather than only\non error.\n\nThe QR codes carry **no amount**. You type that into your own wallet, where you\nsee it before confirming.\n\n---\n\n## Use it\n\nThree tools, deliberately:\n\n| Tool | What it does |\n|---|---|\n| `x402_fetch` | Fetch a URL, paying if it answers `402`. Returns the body. |\n| `wallet_status` | Balances, the active session, spending today, the caps. |\n| `wallet_funding_info` | How to put money in. For the human, not the agent. |\n\nThere is no tool for any particular merchant. Everything is reached through\n`x402_fetch`, because the moment a wallet grows first-class verbs for one seller\nit stops being a wallet.\n\n---\n\n## What bounds a loss\n\n**The session balance, enforced by the chain.** Payments come from a short-lived\nsession account funded from your vault, never from the vault itself. A session\ncannot spend what it does not hold, and that is true regardless of what any code\nhere does.\n\nEverything else is in-process and configurable in `config.toml` inside your data\ndirectory:\n\n```toml\n[caps]\nsession_balance_micro = 5000000 # $5 per session\nper_call_micro = 500000 # $0.50 per call\ndaily_micro = 2000000 # $2 a day, resets 00:00 UTC\nallowlist = [] # payTo addresses or hostnames; empty = any\n\n[session]\nidle_timeout_seconds = 600 # close and sweep back after this\n\n[files]\n# root = \"/path/you/choose\" # off unless set - see Safety\n```\n\nSome refusals are not caps and have no config key: paying an address we control,\na non-`https` resource on mainnet, an asset the wallet does not hold, and any\nchallenge that is not a well-formed x402 v2 `402`.\n\n---\n\n## Safety\n\n**Your seed is the only way back to your money.** It lives in your data\ndirectory. Pointing `OBOLUS_DATA_DIR` at a new location creates a *new* wallet; it\ndoes not move the old one. Back the directory up.\n\n**File access is off by default.** `x402_fetch` can send a file to a paid\nendpoint and write the response back, which is how you get an image signed or a\ndocument processed. Both are disabled unless you set `[files] root`, and confined\nto that directory when you do. This is deliberate: moving bytes off your machine\nis not something a spend cap can bound.\n\n**Approval is per tool, not per payment.** Most MCP clients ask once and remember.\nThat means the caps above are your real spending boundary, not the prompt — see\n[`DESIGN.md`](https://github.com/inviti8/Obolus/blob/main/DESIGN.md) §7.1, which documents what was measured rather than\nwhat was assumed.\n\n**A settled payment proves settlement and nothing else** — not that the resource\nwas correct, honest, or worth its price.\n\n---\n\n## Documentation\n\n- **[CLAUDE.md](https://github.com/inviti8/Obolus/blob/main/CLAUDE.md)** — orientation, and the x402 facts that cost real\n debugging time to learn.\n- **[DESIGN.md](https://github.com/inviti8/Obolus/blob/main/DESIGN.md)** — architecture, the security model, and the\n limitations stated plainly.\n- **[IMPLEMENTATION_PLAN.md](https://github.com/inviti8/Obolus/blob/main/IMPLEMENTATION_PLAN.md)** — build order and what\n each phase actually proved.\n\n## Status\n\n**Working on mainnet.** On 2026-08-13 and 08-14 an agent used Obolus over MCP to\nbuy three resources from a live merchant with real USDC — a notarisation at\n$0.05, a second at $0.05, and a C2PA signature over a 13 MB TIFF at $0.15. Each\npayment came from a disposable session account that was derived, funded, spent\nand swept closed; two sessions, both reconciled, nothing stranded. All three\nsettlements landed with `fee: 0`, sponsored by the facilitator, as designed.\n\nWhat that demonstrates is the rail, end to end: an agent with no human in the\nloop held a key, answered a `402`, and got the bytes. It does not say the\nresources were worth their price — settlement proves settlement and nothing more.\n\nTestnet remains the default and the place to develop. Mainnet is guarded, never\ndisabled.\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays","upstream",{"_93":94,"_95":96,"_97":98,"_99":100,"_101":-5,"_102":103},"requiredSecrets",[],"tags",[],"assets",[],"stats",{"_91":58,"_92":58},"ratingAvg","reviewCount","topics",[],"license","Apache-2.0","language","Python","registryName","io.github.inviti8/obolus","homepage","packages",[104],{"_105":106,"_107":21,"_71":72},"registryType","pypi","identifier","ENV",{"_110":111,"_112":113,"_114":115},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]