roasbeef skills on Remote OpenClaw

lnd

Installs and runs Lightning Terminal (litd) in a Docker container, bundling lnd, Loop, Pool, tapd, and Faraday together. Defaults to a neutrino light client backend with SQLite on testnet, so no full Bitcoin node is required. Production deployments use a watch-only wallet with a separate remote signer container to keep private keys off the agent machine.

lightning-mcp-server

MCP server that connects AI assistants to Lightning Network nodes via Lightning Node Connect (LNC). Uses encrypted WebSocket tunnels through a mailbox relay, requiring only a 10-word pairing phrase from Lightning Terminal, no TLS certificates or macaroons. Read-only by default, exposing 18 tools for querying node state, channels, payments, invoices, peers, and on-chain data.

lightning-security-module

Runs an lnd node in a dedicated container or process that holds private keys and performs cryptographic signing, separate from the watch-only litd node that handles routing and channel management. The signer communicates with the watch-only node over authenticated gRPC. Even a fully compromised agent machine cannot extract keys or sign transactions without the signer.

aperture

Aperture is a reverse proxy implementing the L402 protocol, which gates HTTP access to backend services behind Lightning Network micropayments. It handles the full challenge-response flow: issuing macaroons and invoices on first request, then validating payment proofs before proxying to your backend.

lightning-agent-commerce

Sets up a full Lightning Network payment stack for autonomous agent commerce using three components: lnd (Lightning Terminal), lnget (L402 HTTP client), and aperture (L402 reverse proxy). Agents can buy L402-protected data by paying invoices automatically, or sell data behind a paywall that other agents pay per request.

lnd-macaroon-bakery

Bakes scoped lnd macaroons so each agent receives only the permissions it needs. Supports preset roles (pay-only, invoice-only, read-only, channel-admin, signer-only) and custom URI-level permission sets. Works with local nodes, Docker containers, and remote lnd instances.

lnget

lnget is a command-line HTTP client that handles L402 (Lightning HTTP 402) paywalls automatically. When a server responds with a 402 challenge, lnget pays the Lightning invoice and retries the request with the earned token. Tokens are cached per domain to avoid repeated payments on subsequent requests.