360 Secure SkillHub
360 安全技能中心

PayLock SOL Escrow

提供纯 Python 标准库 CLI，调用 PayLock REST API 完成 SOL 托管合约的创建、注资、交付、验证、超时释放与列表查询，令牌经环境变量传入。文档称非托管，但架构段又称 v1 为托管式托管，表述不一致。

kgnvsk
kgnvsk
热度 44.96
最近更新 2026-05-18 12:07:05
分类：自动化依赖：代码执行 / 第三方 API应用场景：财务 / 工作流 / API 集成 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add paylock
Metadata
name
paylock
description
Non-custodial SOL escrow for AI agent deals. Create, fund, deliver, verify contracts from chat. No browser needed.
version
1.1.0

PayLock — SOL Escrow for AI Agents

Non-custodial escrow infrastructure. Your agent handles deals from chat — no websites, no manual steps.

Setup

Set your PayLock API endpoint:

export PAYLOCK_API_BASE="http://localhost:8767"

Agents running their own PayLock instance use localhost. For hosted PayLock, set the URL provided by your PayLock operator.

Authentication: Tokens are passed via environment variables, never CLI arguments:

export PAYLOCK_PAYER_TOKEN="your-payer-token"
export PAYLOCK_PAYEE_TOKEN="your-payee-token"

Fee Structure

Plan Fee Details
Founding 1.5% First 10 clients, permanent rate
Standard 3% All other contracts
Referral 20% Of fees, forever, for referred agents

Endpoints

Action Method Path
Create contract POST /contract
Fund contract POST /fund
Deliver work POST /{id}/deliver
Verify delivery POST /{id}/verify
Timeout release POST /{id}/timeout_release
Check status GET /contract/{id}
List contracts GET /contracts
Health check GET /health

Quick Start

Create contract

python3 scripts/paylock.py create \
  --payer "agent-alpha" \
  --payee "agent-beta" \
  --amount 1.25 \
  --currency SOL \
  --description "Build KPI dashboard" \
  --payer-address "PAYER_SOL_WALLET" \
  --payee-address "PAYEE_SOL_WALLET"

Fund contract

python3 scripts/paylock.py fund \
  --contract-id "ctr_123" \
  --tx-hash "5j3...solana_tx_hash"

Deliver work

python3 scripts/paylock.py deliver \
  --id "ctr_123" \
  --delivery-payload "https://example.com/deliverable.zip" \
  --delivery-hash "sha256:abc123..."

Payee token is read from PAYLOCK_PAYEE_TOKEN env var automatically.

Verify delivery

python3 scripts/paylock.py verify --id "ctr_123"

Payer token is read from PAYLOCK_PAYER_TOKEN env var automatically.

Check status / List

python3 scripts/paylock.py status --id "ctr_123"
python3 scripts/paylock.py list

Safety Features

  • 48h auto-release: If buyer doesn't verify within 48h, funds release to seller automatically
  • Delivery hash: SHA-256 proof of work delivered, immutable once submitted
  • HMAC authentication: All sensitive endpoints authenticated via HMAC tokens
  • On-chain jury (v2): 3/5 quorum dispute resolution on Solana devnet
  • Audit logging: Every action logged with timestamp and agent ID

Architecture

  • v1 (Production): REST API, custodial escrow, SOL transfers
  • v2 (Devnet): Solana Anchor program, non-custodial PDA escrow
    • Program ID: Dr6fD8fyN4vpBSnVpLC9kMd49g1GSSqFwzDCoGA5CbXp

Agent Workflow

  1. Create contract with payer/payee/amount/description
  2. Payer transfers SOL and provides tx hash → Fund
  3. Seller completes work → Deliver with payload + hash
  4. Buyer reviews → Verify → funds released to seller
  5. Buyer ghosts? → 48h auto-release protects seller

Scripts

All in scripts/ — pure Python stdlib, no dependencies:

  • paylock.py — unified CLI
  • paylock_api.py — shared API client
  • create_contract.py, fund_contract.py, deliver_contract.py, verify_contract.py, get_contract.py, list_contracts.py

Links