x402

52Agent Risk Score52% of the points we could check · partial, 3 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.

Last checked 2026-10-263 official sources linkedHow we scoreIncident tracker

Category: Agent payments
Pricing: free open protocol
Best for: Agent payments · USDC and other ERC-20 tokens on Base, SPL tokens on Solana, pay-per-request HTTP 402 payments
Verified: 2026-10-26

Visit x402

Official site (source): https://docs.x402.org/

Agent Risk Score (v2)

Agent risk 52% (partial, 3 of 7 inputs) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. How it's calculated · Incidents

Missing: Who holds the keys, Human approval, Sending funds to new addresses, Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

Input	From official docs	Points
Who holds the keys	Missing: no official source found yet	missing / 20
Spending limits enforced outside the agent	Protocol score: x402 itself has no spending budget (the exact scheme pays exactly what the server asks); Coinbase's x402 client adds client-side caps per payment and per time window (TypeScript only) source	5 / 20
Human approval	Missing: no official source found yet	missing / 15
Sending funds to new addresses	Missing: no official source found yet	missing / 15
Transaction preview or simulation	Missing: no official source found yet	missing / 10
Open source and audits	Open protocol and SDKs (Apache-2.0); no audit report found source	6 / 10
Incident record (last 12 months)	No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source source	10 / 10
Total	52% of the points we could check	21 / 40

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. Why

Full facts

Category	AI agent payments
Assets	USDC and other ERC-20 tokens on Base, SPL tokens on Solana, pay-per-request HTTP 402 payments
Live vs paper	live on Base and Solana mainnet; testnets on Base Sepolia and Solana Devnet
Order approval / safety	open protocol (Apache-2.0): the buyer signs every payment payload and a facilitator that alters it fails signature checks; the exact scheme requires the exact amount and upto signs a maximum, but the protocol has no spending budget of its own; Coinbase's x402 client adds client-side spend controls (max per payment, a cumulative cap per time window, allowed networks; TypeScript only); the CDP facilitator declines payments involving sanctioned or high-risk addresses
Pricing / free tier	free open protocol; Coinbase's CDP facilitator: first 1,000 onchain transactions a month free, then $0.001 each
Rate limits	not stated on the pages we checked
Official / community	official
Last checked	2026-10-26
Source	docs.x402.org
Repository	https://github.com/x402-foundation/x402

Change log

2026-10-23 · Added. x402: open HTTP 402 payment protocol (Apache-2.0); scored on what the protocol and Coinbase's reference client enforce.

Recent changes

2026-10-23 New listing New listing: x402, the open HTTP 402 payment protocol (Apache-2.0) that lets agents pay per request in stablecoins on Base and Solana. Source

All changes across tools

Related: Agent payments

Are you the maker? Claim this listing (adds a separate "Provided by vendor" box; it never changes our sourced facts), Add a "Listed on TradingAgentStack" badge or send a correction.

More in Build an AI agent

Broker MCP servers Market data MCPs Agent frameworks Risk & paper trading Agent wallets Agent payments TAS Guard: limits for AI orders How each broker MCP gates orders Best broker for AI agents Best paper trading and guardrails Setup guides

Other paths: Trade with a bot · Markets & infrastructure · Learn · Search all tools