Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/0rkz/byte-mcp-server/byte-mcp-servernpx skills add 0rkz/byte-mcp-server --skill byte-mcp-servergit clone --depth 1 https://github.com/0rkz/byte-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/0rkz/byte-mcp-server/byte-mcp-server)<a href="https://agentmods.dev/skills/0rkz/byte-mcp-server/byte-mcp-server"><img src="https://agentmods.dev/badge/skills/0rkz/byte-mcp-server/byte-mcp-server.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00187 | $0.01857 |
| Opus 5 | $0.00093 | $0.00928 |
| Sonnet 5 | $0.00037 | $0.00371 |
| Haiku 4.5 | $0.00019 | $0.00186 |
Grade A, and why
payperbyte scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 143 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PayPerByte (BYTE Library) — verified per-byte data for agents
PayPerByte is a data layer for AI agents. An agent discovers a first-party feed,
pays per byte in USDC over x402 (a wallet signs an EIP-3009
transferWithAuthorization — no API key, no signup, no token), receives the
payload, and then verifies it against an on-chain EIP-712 PayloadAttestation
before acting on it. That verify step is the wedge: the agent does not assume
the data is intact, it proves it.
When to use this skill
Reach for PayPerByte when the task needs external data the agent will act on and provenance matters — i.e. you want to be able to prove the data was not altered. Good triggers:
- "Should I pay this address?" — the flagship Address Reputation Oracle returns a signed ALLOW/WARN/BLOCK verdict for (domain, receiving address, amount, chain) before an agent releases USDC ($0.10 per verdict).
- "Screen <address / name> against sanctions lists" (sanctions-screen), "is <npm/PyPI package> safe to install / deprecated" (pkg-verdict).
- "Current exchange positioning snapshot" (positioning-snapshot), "recent liquidation events" (liquidation-stream).
- "What's the weather / are there recent earthquakes" (weather, earthquakes).
- "Threat-intel / IOCs / exploit signals" (threat-intel), "is <runtime/version> end-of-life" (runtime-eol).
- "Fact-check this claim with cited sources" (evidence-pack).
Do not use it for: general reasoning, or data the model already knows reliably. Note that paid x402 calls spend real USDC — see Status.
Status (state this honestly)
- x402 pay-per-call rail (
byte_buy_data): Base mainnet,eip155:8453, real USDC (Circle USDC, EIP-3009, 6 decimals). Per-feed price is quoted in the 402 challenge; the flagship address-reputation verdict is $0.10. Every paid 200 returns anX-BYTE-AttestationEIP-712 receipt over the exact response bytes. - On-chain layer (subscriptions, broadcasts, fact-oracle escrow): Arbitrum
Sepolia testnet, chain
421614/eip155:421614, settled in a testnet MockUSDC. Mainnet for this layer is gated on an external security audit. - The EIP-712
PayloadAttestationsigning domain (literal nameBYTE Library) is anchored oneip155:421614regardless of which rail the agent paid on; an off-chain attestation is not a claim that the verdict was broadcast on-chain. - No token. No external-user, revenue, or traction claims.
PRIVATE_KEYsigns real Base-mainnet USDC for buys AND testnet txs for the on-chain tools. Use a dedicated wallet holding only what you intend to spend.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 143 lines · 187 tokens per session scan A aade797011cf
payperbyte is a skill published in the GitHub repository 0rkz/byte-mcp-server (1 stars, last pushed 2d ago), licensed MIT. It adds 187 tokens to every session and 1,857 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
sui-publish
Publishing, upgrading, and deploying Sui Move packages. Use this skill when the user needs to publish a package, upgrade a published package, deploy to multiple networks, serialize transactions for multisig signing, run a local Sui network (localnet), prepare for Mainnet launch, monitor production deployments, or…
t2000-job
Escrow USDC for agent-to-agent deliverable work (A2A jobs). Use when hiring another agent for async work (research reports, builds, SLA tasks) or when selling deliverable work yourself (list a service: fixed price + SLA, no server needed), or posting/claiming open jobs on the board (t2 job open / claim) — anything…
sui-object-model
Deep reference for the Sui object model: ownership types, object abilities, dynamic fields, collections, versioning, transfer patterns, and derived objects. Use this skill whenever the user asks about Sui objects, object ownership (address-owned, shared, immutable, wrapped), how to transfer or share or freeze objects…
t2000-setup
Set up a t2000 terminal Agent Wallet (t2 init) when the user needs a local CLI key file — not for Claude-only marketplace (that is Passport Connect OAuth only). Also use when they say "set up t2000", "install the wallet", or "connect t2000 to Claude / Cursor" if a local wallet is in scope. Covers npm CLI install…
modern-move-syntax
Use when writing Move code on Sui to ensure 2024 edition syntax is used. Applies to method calls, string literals, vector operations, option handling, loops, and struct unpacking. Use whenever writing Move code to avoid legacy function-call syntax patterns.
composable-move-functions
Use when writing Move functions on Sui, especially public APIs. Applies to function visibility (public vs entry), parameter ordering, and return patterns. Use whenever designing function signatures or deciding whether functions should transfer objects or return them.