The Claude-assisted first release of this payment gate trusted a client-supplied credential source and granted access without verifying it, so anyone naming a qualifying wallet got paid content.

+// Types+// ---------------------------------------------------------------------------++export type TokenCondition = {+  /** Token or NFT contract address. For XRPL native XRP, use "native". */+  contractAddress: string+  /**+   * Chain identifier.+   * EVM chain ID (number), "solana", or "xrpl".+   */+  chainId: number | 'solana' | 'xrpl'+  /** "token_balance" or "nft_ownership". */+  type: 'token_balance' | 'nft_ownership'+  /** Minimum balance for token_balance conditions. Defaults to 1. */+  threshold?: number+  /** Token decimals (auto-detected on most EVM chains if omitted). */+  decimals?: number+  /** Human-readable label (max 100 chars). */+  label?: string+  /** XRPL currency code (e.g. "USD", "RLUSD"). Only for XRPL trust-line tokens. */+  currency?: string+  /** XRPL NFT taxon filter. Only for XRPL nft_ownership. */

+  conditions: TokenCondition[]+  /** Whether the payer must satisfy "any" (default) or "all" conditions. */+  matchMode?: 'any' | 'all'+  /** In-memory cache TTL in seconds. Defaults to 300 (5 minutes). */+  cacheTtlSeconds?: number+  /**+   * InsumerAPI base URL. Defaults to "https://api.insumermodel.com".+   * Override for testing or self-hosted deployments.+   */+  apiBaseUrl?: string+  /** Request JWT format alongside the raw attestation. Defaults to false. */+  jwt?: boolean+}++export type InsumerAttestation = {+  ok: boolean+  data: {+    attestation: {+      id: string+      pass: boolean+      results: Array<{+        condition: number+        label?: string+        type: string+        chainId: number | string+        met: boolean+        evaluatedCondition: Record<string, unknown>+        conditionHash: string+        blockNumber?: string+        blockTimestamp?: string+        ledgerIndex?: number+        ledgerHash?: string+      }>+      passCount: number+      failCount: number+      attestedAt: string+      expiresAt: string+    }+    sig: string+    kid: string+    jwt?: string+  }+  meta: {+    version: string+    timestamp: string+    creditsRemaining: number+    creditsCharged: number+  }+}++// ---------------------------------------------------------------------------+// Cache+// ---------------------------------------------------------------------------++type CacheEntry = {+  pass: boolean+  attestationId: string

++The attestation signature is verifiable offline via [JWKS](https://insumermodel.com/.well-known/jwks.json) — downstream services can independently verify the gate decision.++## Install++```bash+npm install mppx-token-gate+```++## Usage

+    contractAddress: '0xYourNFT',+    chainId: 8453,        // Base+  }],+})++const mppx = Mppx.create({ methods: [gatedCharge] })+```++Works with any framework (Hono, Express, Elysia, Next.js) and any payment method (tempo, stripe) — it wraps `Method.Server`, so no middleware changes needed.++## API key++Get a free key (instant, no signup):++```bash+curl -X POST https://api.insumermodel.com/v1/keys/create \+  -H "Content-Type: application/json" \+  -d '{"email":"[email protected]","appName":"my-app","tier":"free"}'+```++Or set `INSUMER_API_KEY` as an environment variable.++## Options++| Option | Type | Default | Description |+|---|---|---|---|+| `apiKey` | `string` | `env.INSUMER_API_KEY` | InsumerAPI key |+| `conditions` | `TokenCondition[]` | — | Token/NFT conditions to check |+| `matchMode` | `'any' \| 'all'` | `'any'` | Whether holder must satisfy any or all conditions |+| `cacheTtlSeconds` | `number` | `300` | In-memory ownership cache TTL |+| `jwt` | `boolean` | `false` | Request ES256 JWT alongside raw attestation |+| `apiBaseUrl` | `string` | `https://api.insumermodel.com` | API base URL override |++### TokenCondition++| Field | Type | Description |+|---|---|---|+| `contractAddress` | `string` | Token/NFT contract address |+| `chainId` | `number \| 'solana' \| 'xrpl'` | Chain identifier |+| `type` | `'token_balance' \| 'nft_ownership'` | Condition type |+| `threshold` | `number` | Min balance (token_balance only, default 1) |+| `decimals` | `number` | Token decimals (auto-detected on most EVM chains) |+| `label` | `string` | Human-readable label |+| `currency` | `string` | XRPL currency code |+| `taxon` | `number` | XRPL NFT taxon filter |++## Supported chains++30 EVM chains (Ethereum, Base, Polygon, Arbitrum, Optimism, BNB, Avalanche, and 23 more) + Solana + XRPL.++[Full chain list](https://insumermodel.com/developers/api-reference/)+

+/** Wallet family for a proven payer. */+export type WalletType = 'evm' | 'solana' | 'xrpl' | 'bitcoin'++/**+ * A payer the caller has cryptographically proven for this request.+ *+ * Accepts a `did:pkh:...` string, a bare `0x` EVM address, or an explicit

+  | undefined+ export type ConditionGateOptions = {   /** InsumerAPI key. Falls back to INSUMER_API_KEY env var. */   apiKey?: string+  /**+   * Resolves the payer that the payment method has PROVEN controls this+   * request. Required for free access — without it every request takes the+   * paid path.+   *+   * It receives only mppx's method-specific validation `details` (for example+   * a recovered payer address). It is deliberately NOT given the credential or+   * the declared `source`: mppx documents `source` as "an asserted identity,+   * not independent proof of control", and granting on it is the vulnerability+   * fixed in 3.0.0 (GHSA-jg6q-3qfh-r9f8).+   *+   * Return `null` when no payer has been proven. Returning an address you have+   * not proven reintroduces that vulnerability.

@@ -343,20 +379,60 @@ async function callAttest( // conditionGate adapter // --------------------------------------------------------------------------- +/**+ * Normalizes a caller-supplied proven payer into an address + wallet family.+ *

+  if (typeof payer === 'object') {+    const { address, type } = payer+    if (!address || !type) return null+    return { address, type }+  }++  if (typeof payer !== 'string') return null++  const evm = parseDid(payer)+  if (evm) return { address: evm, type: 'evm' }+  const sol = parseSolanaDid(payer)+  if (sol) return { address: sol, type: 'solana' }+  const xrpl = parseXrplDid(payer)+  if (xrpl) return { address: xrpl, type: 'xrpl' }+  const btc = parseBitcoinDid(payer)+  if (btc) return { address: btc, type: 'bitcoin' }++  // Bare EVM address is unambiguous; anything else needs the object form.+  if (payer.startsWith('0x')) return { address: payer, type: 'evm' }+  return null+}+