Skip to content

Charge AI training crawlers for access (x402 gateway) - #33

Merged
ralyodio merged 1 commit into
masterfrom
x402-gateway
Sep 5, 2026
Merged

Charge AI training crawlers for access (x402 gateway)#33
ralyodio merged 1 commit into
masterfrom
x402-gateway

Conversation

@ralyodio

@ralyodio ralyodio commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

Wires @profullstack/x402-gateway in front of the middleware: training crawlers get 402 with an x402 offer or the sales page at /crawl; a paid pass opens the site for a day. robots.txt is generated from the same crawler lists. COINPAY_X402_KEY and CRAWL_PAY_TO are already set on the Railway service.

🤖 Generated with Claude Code

https://claude.ai/code/session_01YafYxayh7Gqe5MWNNQMev2

Training crawlers (GPTBot, ClaudeBot, CCBot, meta-externalagent, Bytespider,
Applebot-Extended) get 402 Payment Required with an x402 offer, or the sales
page at /crawl, and a paid pass opens the site for a day. People, search
engines and retrieval crawlers pass through untouched. robots.txt is now
generated from the same lists.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YafYxayh7Gqe5MWNNQMev2
@github-actions

github-actions Bot commented Sep 5, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

14 finding(s)

HIGH/CRITICAL: 5 | MEDIUM: 8 | LOW: 1

Severity Rule Location
HIGH secret-private-key apps/cli/src/setup.ts:129
HIGH secret-private-key apps/web/src/app/settings/sections/cex.tsx:137
HIGH secret-private-key packages/core/src/plugin-catalog.ts:27
HIGH secret-private-key packages/source-crypto-arb/src/feeds/coinbase-pem.ts:15
HIGH secret-private-key packages/source-crypto-arb/src/feeds/coinbase-pem.ts:32
MEDIUM js-predictable-cipher-iv apps/cli/src/crypto-key.ts:49
MEDIUM js-predictable-cipher-iv apps/daemon/src/user-config.ts:120
MEDIUM js-unescaped-html-sink apps/web/src/app/layout.tsx:117
MEDIUM js-unescaped-html-sink apps/web/src/app/page.tsx:425
MEDIUM js-dynamic-code-execution packages/core/src/runtime-cache.ts:247
MEDIUM js-dynamic-code-execution packages/core/src/runtime-cache.ts:267
MEDIUM js-predictable-cipher-iv scripts/seed-user-settings.cjs:80
MEDIUM js-predictable-cipher-iv scripts/seed-user-settings.mjs:91
LOW js-predictable-cipher-iv apps/web/src/lib/browser-crypto.test.ts:40

Snippets are redacted; ThreatCrush never prints matched credential material.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​profullstack/​x402-gateway@​0.1.07610010088100

View full report

@ralyodio
ralyodio merged commit 5ec0cf6 into master Sep 5, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant