We build agent-commerce tooling at Script Master Labs — MCP servers, x402 payment endpoints, and the citation machinery behind scriptmasterlabs.com. This week we packaged four of the internal toolkits we actually run into standalone products. They're called Vaults: local software, source and tests included, one-time purchase, no subscription, no hosted service attached.
All four are live on Gumroad now with instant ZIP delivery. Here's what each one is — and, just as important, what each one is not.
TradeTruth — trading journal & reconciliation ($49)
The odd one out: this one is for traders, not agents.
TradeTruth reconciles broker CSV exports against your journal, calculates closed-trade statistics, and lets you register strategy trials — all with a local Python engine (Python 3.9+; the optional MCP integration needs Node.js). It ships with Markdown notes, Claude workflows, source code, and tests.
What it is not: it does not connect to your broker and it does not execute trades. You review the imported mappings against your own broker statement. That's deliberate — reconciliation you can't audit isn't reconciliation.
Who it's for: traders who journal seriously and want their journal and their statement to agree.
→ TradeTruth Vault on Gumroad — $49
MCP Forge — MCP server generator & audit ($39)
MCP Forge generates an MCP server project and runs a scoped endpoint auditor against it. Inside: the generator, production-oriented templates, source code, tests, registry workflow notes, security checklists, and a working x402 paywall example. Node.js 22.19+ required.
The honest limit, printed in the product itself: the auditor is scoped. It is not a complete conformance or security certification, and external protocol compatibility still needs checking before you deploy. It catches the mistakes we kept making by hand; it doesn't bless your server.
Who it's for: developers building MCP servers who want a repeatable starting point and a first audit pass instead of a blank directory.
→ MCP Forge Vault on Gumroad — $39
x402 Revenue Vault — pricing & payment ledger for paid APIs ($29)
If you're charging agents or developers per API call over HTTP 402, this is the bookkeeping layer: price calls with exact decimal arithmetic (no floating-point drift on fractions of a cent), classify payment ledger entries, and work from an included x402 paywall example. Source code, tests, and launch workflows included. Node.js 22.19+ required.
Honest limits: ledger verification is user-recorded — the toolkit does not independently verify blockchain settlement for you. It's a pricing calculator and a ledger, not an oracle.
Who it's for: API builders monetizing endpoints for the agent economy who need their per-call math and records to be exact.
→ x402 Revenue Vault on Gumroad — $29
AI Visibility Vault — site audit & citation tracker ($29)
This is the toolkit version of the citation work we run on our own site. As of October 19, 2026, Bing's AI answers had cited scriptmasterlabs.com 248 times — that didn't happen by accident, and this vault is the method packaged up: run site-readiness checks, generate llms.txt, robots.txt, and JSON-LD from your own facts, and record the AI citations you observe, with confidence intervals.
Honest limits: citation observations are entered by you. The toolkit does not automatically query AI engines, and nothing in it guarantees indexing, rankings, or citations. It's the tracking and readiness discipline, not a citation vending machine.
Who it's for: site owners and indie builders who want AI search engines to be able to find, read, and cite them — and want the receipts tracked properly.
→ AI Visibility Vault on Gumroad — $29
The Collection — all four ($99)
The SML Vault Collection bundles all four toolkits — every ZIP and its documentation — for $99. Bought individually they total $146, so the collection saves $47. One note so nobody's surprised: MCP Forge and x402 Revenue Vault share the same paywall example; you're not getting two different ones.
→ SML Vault Collection on Gumroad — $99
The fine print, up front
- One-time purchase. Digital download. No hosting, no AI subscription, no funded wallet, and no support subscription is included — these are local toolkits and command-line setup is required.
- The license lets one purchaser use and modify the supplied code and notes for personal work and their own business, including client deliverables and hosted applications. Reselling or redistributing the vaults as a competing toolkit is not permitted.
- The four toolkits ship with 43 included core tests, passing. That's a statement about the tests in the box, not a promise of universal compatibility.
Script Master Labs LLC is a Service-Disabled Veteran-Owned Small Business (UEI G24VZA4RLMK3, CAGE 21U51). We sell the tooling we run. If you build with any of it, we'd rather hear what broke than what's polite — that's how the next version gets better.
Top comments (1)
The honest limits section is the part worth reading twice: the revenue ledger records what the seller logs, so reconciliation is only as strong as the entries behind it, and the post says that up front instead of implying the toolkit checks chain settlement for you. For anyone pricing paid APIs, that distinction decides whether the ledger is an accounting record or actual evidence. Shipping them as one-time local downloads rather than a hosted service also helps auditability, since the buyer can read the entire pipeline.