How do I sell access to a private GitHub repo?

1. Move the repo into a GitHub organization. A free organization is enough. This is the only way to give read-only access.
2. Create a GitHub token for your server. Use an account that administers the repo: GitHub says removing a collaborator needs “an administrator of the repository”.
3. Create the product in AgentaOS. Name, price in EUR or USD, type One-time. Under After payment, set a Success URL to a page that says “Check your GitHub notifications” (products docs).
4. Ask for the GitHub username before checkout. Put a small form on your buy page. Your server then creates the checkout with the username in metadata, and AgentaOS returns that metadata in the payment webhook (checkouts docs). Custom checkout fields (checkoutFields) also exist, but the docs do not say the webhook returns their answers.

const checkout = await agentaos.checkouts.create({
  linkId: 'your-product-id',
  buyerEmail: email,
  metadata: { githubUsername: username },
});

5. Invite the buyer when the webhook arrives. Verify the X-AgentaOS-Signature header and act on checkout.session.completed only (webhooks docs). Then call PUT /repos/{owner}/{repo}/collaborators/{username} with {"permission": "pull"}. If the buyer chose bank transfer, you first get checkout.session.bank_transfer_pending: wait for the completed event. Key each invite on session_id, because the same event can arrive twice (events docs).
6. Tell the buyer to accept the invite. GitHub says the invitee “must accept or decline” it, by email or on their notifications page. Also note GitHub’s limit: “50 invitations to a repository per 24 hour period”. Updates then reach buyers with a normal git pull.
7. Remove access on a refund or a lost dispute. Call DELETE /repos/{owner}/{repo}/collaborators/{username}. AgentaOS sends no webhook for a refund or a lost dispute: you ask for the refund on the sale page, and when it is approved the sale’s mor_status becomes refunded (or charged_back after a lost dispute). A new dispute does send dispute.created (refunds docs).