Stabledrop escrow payments

Reviewed 1d ago.

• tools: 6 tools scanned
• metadata: scanned

No findings.

Tools (6)

• read_published_page

  Read one of the published pages, for answering questions about how any of this works. Use it rather than guessing. What the fees are, how a dispute is decided and who decides it, what a buyer is agreeing to — all of it is written down, and none of it is safe to invent. how-it-works How an escrow payment works, start to finish faq Common questions about escrow, fees, disputes and timing arbitration-policy How a dispute is decided, by whom, and on what evidence terms-of-service The terms a buyer and seller are agreeing to privacy-policy What is collected and why plugins The WordPress and Shopify integrations home What the product is and who it is for

• prepare_escrow_payment

  Work out where a payment must go, before anybody signs or sends anything. `seller` and `nominal_buyer` may each be a wallet address OR AN EMAIL ADDRESS — an email is converted to the wallet that person owns, so you never need to know a wallet to use this. The parties are checked against the sanctions lists before an address is given. If any of them is listed the answer is `error: sanctioned_party` with no address, and the payment cannot be made through this service. Returns the escrow address these terms produce, and TWO ways to fund it. Both end at the same address holding the same money; they differ only in who sends the transaction. **Transfer it yourself.** Send the tokens to the address from any wallet — a browser wallet, a hardware wallet, an exchange withdrawal. Nothing to sign for us, and no `payer` needed, because the escrow never asks who paid: it reads its own balance. Then call `settle_escrow_payment` with no signature and we create the escrow around what is there. **O

• settle_escrow_payment

  Create the escrow around the money and return a signed receipt. `seller` and `nominal_buyer` may be wallet addresses OR EMAIL ADDRESSES, exactly as in `prepare_escrow_payment`; an email converts to the same wallet it did there. Works both ways, and which one runs is decided by whether you pass a signature: **Already transferred it yourself** — omit `authorization` and `signature`. We check the address holds the amount and build the escrow around what is there. If the transfer has not arrived it says so, and nothing is spent finding out. **Want us to relay it** — pass the payer's `authorization` and `signature`. We broadcast it and pay the gas, so the payer needs none. This process holds no key and signs nothing; it is handed a signature and carries it. Pass the terms exactly as they were prepared. They ARE the escrow's address, so a single altered figure moves it — and with a signature, stops matching what the payer signed. `seller` and `nominal_buyer` may be wallet addresses or

• payment_qr

  A scannable code for a payment request, so nobody retypes an address. Pass the `payment_uri` from `prepare_escrow_payment`. Returns a QR a phone wallet can scan, with the token, network, destination and amount already in it. Or pass its `share_with_payer.pay_link`, for a code that opens the payment on the site instead — what to hand someone who is being asked to pay, as the site's own requests do. ⚠️ A SEPARATE TOOL RATHER THAN PART OF `prepare`, because the two have different audiences. `prepare` answers a machine and has to stay parseable; an image in its result would make the structured fields something a client has to dig for. A person who needs the code asks for it. ⚠️ AND IT ENCODES THE URI, NOT THE BARE ADDRESS. A QR holding only an address leaves the amount and the token to be entered by hand, which is the part worth removing — an escrow funded with the wrong figure is not the escrow these terms derive to, and the money sits at an address nothing can deplo

• check_escrow_payment

  What has happened to a settled payment, from the `status_url` on its receipt.

• verify_escrow_receipt

  Check a receipt's signature against the key its issuer publishes. ⚠️ THE KEY IS FETCHED FROM THE RECEIPT'S OWN `iss`, NOT FROM WHOEVER HANDED IT OVER. Otherwise anything that can serve a receipt can also serve the key that vouches for it, and the signature stops meaning anything. Use this on receipts from anywhere, including ones this server did not produce.