# x402 agent risk score, safety controls and pricing

> x402: payments for AI agents. Live and paper or demo trading. Agent risk 52% (partial). Free open protocol. Sourced, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/x402/

1. [Home](https://tradingagentstack.com/)

2. [AI agent payments](https://tradingagentstack.com/category/agent-payments/)

x

# x402

[**52****Agent Risk Score**52% of the points we could check · partial, 3 of 7 inputsHow much an AI agent could lose here if it is wrong, hacked or prompt-injected. Higher is safer.](#agent-risk-score)

Last checked **2026-10-26****3** official sources linked[How we score](https://tradingagentstack.com/methodology/)[Incident tracker](https://tradingagentstack.com/incidents/)

Category[Agent payments](https://tradingagentstack.com/ai-agent-payments/)
Pricingfree open protocol
Best forAgent payments · USDC and other ERC-20 tokens on Base, SPL tokens on Solana, pay-per-request HTTP 402 payments
Verified2026-10-26

[Visit x402](https://tradingagentstack.com/go/x402/?from=/tool/x402/)

Official site (source): [https://docs.x402.org/](https://docs.x402.org/)

## Agent Risk Score (v2)

[Agent risk 52% (partial, 3 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score) If an agent using this tool is wrong, hacked or prompt-injected, how much money can it lose? Higher is safer. Each input links to the vendor's own docs; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/methodology/#agent-risk-score) · [Incidents](https://tradingagentstack.com/incidents/)

Missing: Who holds the keys, Human approval, Sending funds to new addresses, Transaction preview or simulation. Missing inputs lower the maximum instead of counting as zero.

| Input | From official docs | Points |
| --- | --- | --- |
| Who holds the keys | Missing: no official source found yet | missing / 20 |
| Spending limits enforced outside the agent | Protocol score: x402 itself has no spending budget (the exact scheme pays exactly what the server asks); Coinbase's x402 client adds client-side caps per payment and per time window (TypeScript only) [source](https://docs.cdp.coinbase.com/x402/buyer/client-configuration.md) | 5 / 20 |
| Human approval | Missing: no official source found yet | missing / 15 |
| Sending funds to new addresses | Missing: no official source found yet | missing / 15 |
| Transaction preview or simulation | Missing: no official source found yet | missing / 10 |
| Open source and audits | Open protocol and SDKs (Apache-2.0); no audit report found [source](https://github.com/x402-foundation/x402) | 6 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker for the last 12 months, and every scored input links an official source [source](https://tradingagentstack.com/incidents/) | 10 / 10 |
| Total | 52% of the points we could check | **21 / 40** |

The Safety score (v1) isn't shown in this section: it is built for tools that place orders. [Why](https://tradingagentstack.com/methodology/#agent-wallets-v1)

## Full facts

| Category | AI agent payments |
| --- | --- |
| Assets | USDC and other ERC-20 tokens on Base, SPL tokens on Solana, pay-per-request HTTP 402 payments |
| Live vs paper | live on Base and Solana mainnet; testnets on Base Sepolia and Solana Devnet |
| Order approval / safety | open protocol (Apache-2.0): the buyer signs every payment payload and a facilitator that alters it fails signature checks; the exact scheme requires the exact amount and upto signs a maximum, but the protocol has no spending budget of its own; Coinbase's x402 client adds client-side spend controls (max per payment, a cumulative cap per time window, allowed networks; TypeScript only); the CDP facilitator declines payments involving sanctioned or high-risk addresses |
| Pricing / free tier | free open protocol; Coinbase's CDP facilitator: first 1,000 onchain transactions a month free, then $0.001 each |
| Rate limits | not stated on the pages we checked |
| Official / community | official |
| Last checked | 2026-10-26 |
| Source | [docs.x402.org](https://docs.x402.org/faq) |
| Repository | [https://github.com/x402-foundation/x402](https://github.com/x402-foundation/x402) |

## Change log

- **2026-10-23** · Added. x402: open HTTP 402 payment protocol (Apache-2.0); scored on what the protocol and Coinbase's reference client enforce.

## Recent changes

- **2026-10-23** New listing New listing: x402, the open HTTP 402 payment protocol (Apache-2.0) that lets agents pay per request in stablecoins on Base and Solana. [Source](https://docs.x402.org/faq)

[All changes across tools](https://tradingagentstack.com/changes/)

## Related: Agent payments

- [Stripe Issuing for agents](https://tradingagentstack.com/tool/stripe-issuing-for-agents/)

- [Coinbase Agentic Wallet](https://tradingagentstack.com/tool/coinbase-agentic-wallet/)

- [Link agent wallet](https://tradingagentstack.com/tool/link-agent-wallet/)

- [Lightning Agent Tools](https://tradingagentstack.com/tool/lightning-agent-tools/)

- [Agent Payments Protocol (AP2)](https://tradingagentstack.com/tool/agent-payments-protocol-ap2/)

Are you the maker? [Claim this listing](mailto:hello@tradingagentstack.com?subject=Claim%20listing%3A%20x402) (adds a separate "Provided by vendor" box; it never changes our sourced facts), [Add a "Listed on TradingAgentStack" badge](https://tradingagentstack.com/badge/) or [send a correction](https://tradingagentstack.com/submit/).

## More in Build an AI agent
[Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)[Market data MCPs](https://tradingagentstack.com/category/data-mcp/)[Agent frameworks](https://tradingagentstack.com/category/agent-framework/)[Risk & paper trading](https://tradingagentstack.com/trading-bot-risk-safety-tools/)[Agent wallets](https://tradingagentstack.com/ai-agent-wallets/)[Agent payments](https://tradingagentstack.com/ai-agent-payments/)[TAS Guard: limits for AI orders](https://tradingagentstack.com/guard/)[How each broker MCP gates orders](https://tradingagentstack.com/broker-mcp-safety-controls/)[Best broker for AI agents](https://tradingagentstack.com/best-broker-for-ai-agents/)[Best paper trading and guardrails](https://tradingagentstack.com/best-paper-trading-and-guardrails-for-ai-agents/)[Setup guides](https://tradingagentstack.com/guides/)

Other paths: [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) · [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)