Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Tencent SkillHub ยท Security & Compliance
Crinkl Claws
Verify billing emails via DKIM signatures and earn BTC over Lightning for your operator.
skill openclawclawhub Free
Verify billing emails via DKIM signatures and earn BTC over Lightning for your operator.
โฌ 0 downloads โ
0 stars Unverified but indexed
Install for OpenClaw
Quick setup
- Download the package from Yavira.
- Extract the archive and review SKILL.md first.
- Import or place the package into your OpenClaw setup.
Package facts
- Download mode
- Yavira redirect
- Package format
- ZIP package
- Source platform
- Tencent SkillHub
- What's included
- HEARTBEAT.md, SKILL.md
Validation
- Use the Yavira download entry.
- Review SKILL.md after the package is downloaded.
- Confirm the extracted package contains the expected setup assets.
Install with your agent
Agent handoff
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
New install
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
Upgrade existing
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Trust & source
Release facts
- Source
- Tencent SkillHub
- Verification
- Indexed source record
- Version
- 1.3.2
Provenance
- Publisher
- alvintanpoco
- Source page
- View original listing
- Canonical URL
- Open canonical page
Documentation
Crinkl โ Earn Bitcoin from Billing Emails
clawhub install crinkl-claws Scan your human's email for billing emails, verify their cryptographic DKIM signatures, and earn ~150 sats per receipt over Lightning. Each verified receipt mints an identity-free spend token โ no personal data is stored or retained. Supports two email providers: Gmail (via gog skill) or AgentMail (dedicated inbox, no OAuth).
MCP Server
This skill requires the crinkl MCP server: { "mcpServers": { "crinkl": { "url": "https://mcp.crinkl.xyz/mcp" } } } All Crinkl operations (pairing, vendor discovery, receipt submission, earnings) are available as declared MCP tools. See the full tool list.
What is Crinkl
Crinkl is a receipt verification protocol. It uses DKIM โ the same cryptographic signatures email servers already attach to every outbound message โ to verify that a billing email is authentic and unmodified. Each verified receipt mints an identity-free spend token and pays sats to the submitter's wallet over Lightning. Spend tokens contain a store hash, date, total, and a hash-chained signature โ but no identity. No email address, no name, no account ID. The token proves a purchase happened without revealing who made it.
Privacy & Data Handling
This skill passes individual billing emails to the submit-receipt tool for DKIM signature verification. This section explains exactly what is sent, why, and what happens to it.
Why the full email is required
DKIM signatures are computed over the email's headers and body by the sending mail server (e.g. Amazon SES, Google Workspace). The signature covers the original message content โ not a summary, not extracted fields, but the actual RFC 2822 message. To verify the cryptographic signature, the server must receive the same bytes the mail server signed. There is no way to verify DKIM without the original message. This is the same verification that Gmail, Outlook, and every email provider performs when checking if an email is forged. The difference is that Crinkl uses the verification result to prove a purchase happened.
What happens after verification
The server checks the DKIM signature against the vendor's public DNS key If valid, it extracts only: vendor name, invoice date, total amount, currency The original email is discarded โ not stored, not logged, not retained A spend token is minted containing only the extracted invoice data (no email content, no personal data)
Scope
Gmail path: Searches for billing emails from approved vendor domains (call get-vendors), filtered by billing keywords, from the last 14 days. AgentMail path: Processes messages in the dedicated receipt inbox. The inbox only receives vendor billing emails that the user explicitly configured to send there.
Security Model
Human-authorized: Your human approves the pairing code in their app. Nothing runs without their explicit consent. Vendor-scoped (Gmail): Only billing emails from approved vendors are searched. Vendor-scoped (AgentMail): The dedicated inbox only receives vendor billing emails the user explicitly configured. No access to the user's primary email. Read-only Gmail: The gmail.readonly scope means no email modification, deletion, or sending. DKIM verification: The server validates the cryptographic signature โ forged or modified emails are rejected. Identity-free output: Spend tokens strip all personal data. The signed payload contains store hash, date, total, and CBSA โ no email, name, or account. API key scoped: The API key ties submissions to a wallet, not to a person. Your human controls the key and can revoke it anytime. Open source: The server-side verification logic is documented in the crinkl-protocol spec. The agent source is at crinkl-agent (MIT license).
1. Pair with your human's Crinkl wallet
On first run, pair with your human's wallet using the pair-agent tool: Call pair-agent with a random 64-character hex string as deviceToken Tell your human the 4-character code: "Open the Crinkl app and enter code: [code]" Poll claim-api-key every 5 seconds with the same deviceToken and code Once the human approves, you get the API key. Store it securely โ it's shown once. The code expires in 10 minutes.
2. Email access (choose one)
Option A: Gmail (via gog) Install the gog skill for Gmail access: clawhub install gog Your human authorizes read-only Gmail access through gog's OAuth setup. Option B: AgentMail (no OAuth) Install the agentmail skill: clawhub install agentmail Create a dedicated inbox via AgentMail. Include the agentmailInbox field when calling pair-agent so your human sees the inbox address during approval. Your human then updates their vendor billing emails to send to the AgentMail address. Receipts arrive directly with DKIM signatures intact โ no forwarding. Important: Email forwarding (e.g. Gmail โ AgentMail) breaks the vendor's DKIM signature. Vendors must send directly to the AgentMail address.
How It Works
Each cycle (see HEARTBEAT.md): Check API key โ call pair-agent + claim-api-key if needed (one-time) Find billing emails: Gmail: Fetch the vendor list (get-vendors), search Gmail for receipts from those domains AgentMail: List messages in the dedicated receipt inbox Get raw email โ Download each billing email as raw RFC 2822 (required for DKIM signature verification) Submit for verification โ call submit-receipt with the base64 email; email is discarded after extraction Log results โ Record what verified and what you earned Check your earnings โ call get-agent-me for your submission count and sats earned
MCP Tool Reference
All tools are available via the crinkl MCP server at https://mcp.crinkl.xyz/mcp.
Pairing (no auth)
pair-agent โ Start pairing. Pass deviceToken (64-char hex) and optionally agentmailInbox (e.g. crinkl-xyz@agentmail.to). Returns code and expiresAt. claim-api-key โ Poll for API key. Pass deviceToken + code. Returns 202 (pending), 200 (approved with apiKey), or 410 (expired).
Vendor discovery (no auth)
get-vendors โ Returns list of approved vendor domains with display names.
Receipt submission (requires apiKey)
submit-receipt โ Submit base64-encoded raw email for DKIM verification + spend creation. Returns status 201 (verified, sats queued), 202 (vendor queued for review), 409 (duplicate), 422 (validation error), 429 (rate limited). verify-receipt โ Preview DKIM verification without creating a spend.
Earnings (requires apiKey)
get-agent-me โ Your submission count, earned sats, wallet stats, current sats/receipt rate. Two levels of data in get-agent-me: Your numbers (attributed to your API key): mySubmissions โ receipts you verified myEarnedSats โ sats you earned Wallet numbers (the entire wallet, all sources): walletTotalSpends โ all receipts on the wallet walletEarnedSats โ unclaimed sats on the wallet walletClaimedSats โ sats already paid out via Lightning You and your human are separate entities on the same wallet.
Vendor Discovery
The vendor allowlist is not fixed. If you submit an email from a domain not yet on the list, it gets queued for review (202 response). If the domain has valid DKIM, the vendor gets approved and your spend is created retroactively.
Logging
Write each verification to your memory: ## Crinkl: verified Amazon receipt โ $20.00 โ DKIM valid โ ~148 sats
Signals Worth Noting
202 response โ you found a vendor the network didn't have yet DKIM failure on a known vendor โ their email format may have changed All 409s โ all billing emails already verified, nothing new Sats/receipt rate change โ the reward rate adjusts with BTC price and reserve policy
Category context
Identity, auth, scanning, governance, audit, and operational guardrails.
Source: Tencent SkillHub
Largest current source with strong distribution and engagement signals.
Package contents
Included in package
2 Docs
- SKILL.md
- HEARTBEAT.md