Paying with x402

Paying with x402 (USDC)

x402 is an open HTTP payment standard (the 402 Payment Required status, finally used). Settlement infrastructure exists from Coinbase (CDP facilitator — what this service uses) and Stripe.

The flow

1. Client calls a paid endpoint.
2. Server replies 402 with a machine-readable quote: price, asset (USDC), network (eip155:8453 = Base mainnet), and the pay-to address.
3. Client signs a USDC transferWithAuthorization from its own wallet (no gas needed — the facilitator sponsors it) and retries with the payment header.
4. Facilitator verifies + settles on-chain; the server serves the result. End-to-end this is seconds.

The payer needs only USDC on Base — no ETH, no account, no API key.

JavaScript (x402 v2 SDKs)

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client();
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.AGENT_KEY) });
const payFetch = wrapFetchWithPayment(fetch, client);

const res = await payFetch("https://agent402.tools/api/extract", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ url: "https://example.com/article" }),
});
console.log(await res.json());

Command line: Stripe's purl

Stripe's open-source purl ("curl for paid endpoints") works against Agent402 out of the box — our CI proves it on demand with a real settled payment:

purl wallet add --name me --type evm -k 0xYOUR_KEY -p yourpass --set-active=true
purl --dry-run "https://agent402.tools/api/convert/kilometers-to-miles?value=42"  # see the quote
purl "https://agent402.tools/api/convert/kilometers-to-miles?value=42"            # pay + get result

Spend controls

Client-side caps belong on the buyer:

• purl: PURL_MAX_AMOUNT (atomic units; 1000 = $0.001 USDC).
• agent402-mcp: AGENT402_MAX_PER_CALL (refuse any single call above this USD price) and AGENT402_BUDGET (hard session cap) — both enforced before a payment is signed, so a confused model cannot drain the wallet.

Verifying you weren't cheated

Every settled call is an on-chain USDC transfer to the public revenue wallet — auditable by anyone at Basescan. The service also publishes served-call counters at /api/stats; the chain, not the counter, is the source of truth.