Back to Home
INPAYXWEB3 icon

INPAYX

by INPAYXWEB3

Overview

Develops and manages autonomous, evolving AI agents on the Solana blockchain for Web3 interactions, including trading, governance, and data analysis, treating code as a living, self-mutating organism.

Installation

Run Command
uvicorn ai.api.server:app --host 0.0.0.0 --port 8000 --log-level info

Environment Variables

  • SECRET_KEY
  • MODEL_DIR
  • JWT_SECRET
  • RATE_LIMIT_RPS
  • RATE_LIMIT_BURST
  • REDIS_HOST
  • REDIS_PORT
  • REDIS_PASSWORD
  • REDIS_DB
  • REDIS_POOL_SIZE
  • REDIS_MIN_IDLE_CONNS
  • REDIS_MAX_CONN_AGE
  • REDIS_IDLE_TIMEOUT
  • REDIS_SENTINEL_ENABLED
  • REDIS_SENTINEL_MASTER
  • REDIS_SENTINEL_ADDRESSES
  • MEMCACHED_SERVERS
  • MEMCACHED_TIMEOUT_SECONDS
  • MEMCACHED_DEFAULT_EXPIRY_SECONDS
  • DB_HOST
  • DB_PORT
  • DB_USER
  • DB_PASSWORD
  • DB_NAME
  • DB_SSLMODE
  • BACKUP_DIR
  • ENABLE_S3_UPLOAD
  • S3_BUCKET
  • S3_REGION
  • S3_ACCESS_KEY
  • S3_SECRET_KEY
  • S3_ENDPOINT
  • WS_PORT
  • EMAIL_RECIPIENT
  • SLACK_WEBHOOK_URL
  • WALLET_PROVIDER
  • AI_MODEL_ENDPOINT
  • SOLANA_CLUSTER_URL
  • SOLANA_PRIVATE_KEY
  • PUMPFUN_PROGRAM_ID
  • RPC_HTTP
  • RPC_WS

Security Notes

Critically low due to multiple hardcoded JWT secret keys across Python and Go backends, severe authorization bypasses (e.g., hardcoded user ID in Go JWT middleware), arbitrary code execution vulnerability via `torch.load` (allowing malicious model uploads), and excessively broad CORS/WebSocket origin policies (`AllowAllOrigins = true`). Private key handling in client-side JavaScript examples also poses a significant risk if deployed as-is. These issues make the system highly vulnerable to unauthorized access, data breaches, and remote code execution.

Similar Servers

Stats

Interest Score36
Security Score2
Cost ClassMedium
Avg Tokens100000
Stars7
Forks0
Last Update2026-01-16

Tags

SolanaAI AgentsWeb3DecentralizedAutonomousMachine LearningGovernanceMarketplace