All skills
coinbase avatar

/agentic-wallet

@70cb79c official

Crypto wallet operations via the awal CLI — sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402 payment protocol to discover paid services, pay for API calls, monetize an API, or query onchain data. Use whenever the user mentions signing in, login, authentication, wallet status, balance, address, sending money, paying someone, transferring tokens, ENS names, swapping/trading/converting tokens, funding/topping up/onramp, USDC, ETH, POL, SOL, the x402 bazaar, paid APIs, monetizing an endpoint, or querying onchain data on Base.

Use this Skill: https://skilld.dev/gh/coinbase/agentic-wallet-skills/agentic-wallet

This session only. Nothing lands on disk.

referencesx402-pay.md

≈704 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Making Paid x402 Requests

Use the npx awal@2.12.1 x402 pay command to call paid API endpoints with automatic USDC payment on Base.

If the wallet is not authenticated, see references/auth.md.

Command Syntax

npx awal@2.12.1 x402 pay <url> [-X <method>] [-d <json>] [-q <params>] [-h <json>] [--max-amount <n>] [--json]

Options

Option Description
-X, --method <method> HTTP method (default: GET)
-d, --data <json> Request body as JSON string
-q, --query <params> Query parameters as JSON string
-h, --headers <json> Custom HTTP headers as JSON string
--max-amount <amount> Max payment in USDC atomic units (1000000 = $1.00)
--correlation-id <id> Group related operations
--json Output as JSON

USDC Amounts

X402 uses USDC atomic units (6 decimals):

Atomic Units USD
1000000 $1.00
100000 $0.10
50000 $0.05
10000 $0.01

IMPORTANT: Always single-quote amounts that use $ to prevent bash variable expansion (e.g. '$1.00' not $1.00).

Input Validation

Before constructing the command, validate all user-provided values to prevent shell injection:

  • url: Must be a valid URL starting with https:// or http://. Reject if it contains spaces, semicolons, pipes, backticks, or shell metacharacters.
  • data (-d): Must be valid JSON. Always wrap in single quotes to prevent shell expansion.
  • max-amount: Must be a positive integer (^\d+$).

Do not pass unvalidated user input into the command.

Examples

# Make a GET request (auto-pays)
npx awal@2.12.1 x402 pay https://example.com/api/weather

# Make a POST request with body
npx awal@2.12.1 x402 pay https://example.com/api/sentiment -X POST -d '{"text": "I love this product"}'

# Limit max payment to $0.10
npx awal@2.12.1 x402 pay https://example.com/api/data --max-amount 100000

Prerequisites

  • Must be authenticated (npx awal@2.12.1 status to check; see references/auth.md)
  • Wallet must have sufficient USDC balance (npx awal@2.12.1 balance to check; see references/fund.md to top up)
  • If you don't know the endpoint URL, see references/x402-search.md to find services first

Error Handling

  • "Not authenticated" - See references/auth.md
  • "No X402 payment requirements found" - URL may not be an x402 endpoint; see references/x402-search.md to find valid endpoints
  • "Insufficient balance" - See references/fund.md

Source: SKILL.md on GitHub

1 alert1mo3 checks · Risk SAFE
  • Gen Agent Trust Hub1mo

    This skill provides comprehensive crypto wallet functionality and x402 payment integration using Coinbase's 'awal' CLI and associated libraries. It handles authentication, balance tracking, token transfers, and trading while emphasizing strict input validation to prevent command injection. It also guides developers in building and monetizing their own APIs with x402 payments.

  • Socket1mo

    1 alert: gptSecurity

  • Snyk1mo

    Risk: HIGH · 3 issues

Signed by skilld at 70cb79c. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 days ago.

Steadyupdated 2 months ago
What it can do
Runs commands
user-invocable
true
disable-model-invocation
false
All 5 allowed tools
Bash(npx awal@2.12.1 *)Bash(npm *)Bash(node *)Bash(curl *)Bash(mkdir *)
  • CLI
  • crypto
  • wallet
  • usdc
  • eth
  • solana
  • polygon
  • x402
  • onchain
  • base

README badge

README badge for coinbase/agentic-wallet-skills

Operates a crypto wallet via the `awal` CLI to sign in, check balances, send USDC/ETH/POL/SOL across Base/Polygon/Solana, swap tokens, fund the wallet, and discover or pay for services on the x402 bazaar. Use when the user needs wallet authentication, balance checks, token transfers, trading, onramp, or access to paid APIs that accept x402 payments.

Generated from the current SKILL.md.

What blockchains does this skill support?
Base, Polygon, and Solana. Balance checks and sends work across all three; token swaps are limited to Base and Polygon.
Do I need to authenticate before using the wallet?
Yes, except for x402 bazaar search and details. Run `npx awal@2.10.0 status` first; if not authenticated, read `references/auth.md` to sign in with an OTP code.
What tokens can I send or trade?
The skill explicitly supports USDC, ETH, POL, and SOL. Token swaps are available on Base and Polygon via the trade command.
What is the x402 protocol and how does it work?
x402 is a payment protocol for discovering and calling paid APIs. You can search the x402 bazaar for services, pay USDC automatically to call them, or monetize your own API endpoint so other agents can pay to use it.
Can I query blockchain data directly?
Yes, the skill includes a `query-onchain` reference for querying events, transactions, and blocks on Base using the CDP SQL API.

Generated from the current SKILL.md. These answers refresh after source changes.