PQSafe Post-Quantum Payment Skill ( pqsafe.pay.v1)#

Post-quantum signed SpendEnvelopes for AI agent payments. ML-DSA-65 (NIST FIPS 204) signatures over Airwallex, Wise, Stripe, USDC-Base, and x402 rails.

Quick Start#

bash

npm install @pqsafe/openclaw

typescript

import { OpenClawClient } from "@openclaw/sdk";
import "@pqsafe/openclaw"; // registers pqsafe.pay.v1

const claw = new OpenClawClient();

const envelope = await claw.invoke("pqsafe.pay.v1/create_envelope", {
  agentId:   "agent_my_bot_v1",
  payerId:   "payer_usr_abc123",
  maxAmount: "100.00",
  currency:  "USD",
  rail:      "wise",
  expiresAt: "2026-12-31T23:59:59Z",
});

Set PQSAFE_TEST_MODE=true for local development — no real keys or network calls required.

Operations#

OperationDescriptioncreate_envelopeIssue a new ML-DSA-65 signed SpendEnvelope with spend cap, rail, and expiryverify_envelopeVerify signature integrity, expiry, nonce uniqueness, and key ID validityrevoke_envelopeAppend envelope ID to the real-time revocation list (append-only, timestamped)

Security Model#

• HSM-backed signing keys — ML-DSA-65 private keys are generated and stored in hardware security modules; they never leave the PQSafe key service
• Single-use nonce — each envelope carries a 256-bit random nonce; replay attacks are rejected at the verify layer
• Expiry enforced in signed payload — expiresAt is part of the signed content; an attacker cannot extend expiry without invalidating the signature
• Real-time revocation list — revoke_envelope appends to a low-latency revocation list checked on every verify_envelope call
• Append-only audit log — all create, verify, and revoke events are timestamped and written to an immutable audit log
• JCS-canonical signing — payload serialized in JSON Canonicalization Scheme form (RFC 8785) before signing, eliminating signature ambiguity from key ordering or whitespace variation

Supported Rails#

RailStatusCurrencyairwallexLIVE sandboxMulti-currency (real test transfers)wiseLIVE sandbox40+ fiat currencies (real test transfers)stripemock-readyUSD + 135 othersusdc-basemock-readyUSDCx402mock-readyUSDC + ETH

LIVE sandbox = validated end-to-end with sandbox rails. Mock-ready = SpendEnvelope creation and verification are fully functional; live rail integration is in progress.

ML-DSA-65 Parameters#

ParameterValueStandardNIST FIPS 204Security levelNIST Level 3Public key size1,952 bytesSecret key size4,032 bytesSignature size3,309 bytesHardness assumptionModule-LWE + Module-SIS

Links#

• Homepage: https://pqsafe.xyz/openclaw-skill
• npm package: https://www.npmjs.com/package/@pqsafe/openclaw
• API docs: https://docs.pqsafe.xyz/agent-pay/openclaw
• AP2-PQ Profile RFC: https://pqsafe.xyz/ap2-pq-rfc
• NIST FIPS 204: https://csrc.nist.gov/pubs/fips/204/final
• Source (Apache-2.0): https://github.com/PQSafe/pqsafe/tree/main/plugins/openclaw-pqsafe

License#

Apache-2.0 — Security disclosures: security@pqsafe.xyz