402 Payment Required micropayment protocol. The
gate is live on production: you can see a real challenge right now, without credentials.
USDC-on-Base is not an arbitrary pick. TRM Labs reports that 99.6% of settled x402 value
is USDC, so a single asset on a single chain covers effectively the whole protocol’s
volume — which is why Droplinked supports exactly that and does not ask an agent to hold
anything else.
See it working
payTo is returned live in the challenge — read it from the response rather than
hard-coding it.
Signing correctly
extra.name and extra.version are the EIP-712 domain the transfer authorisation must
be signed over. Sign against the domain the challenge gives you (name: "USD Coin",
version: "2"). Two failure modes that look like bugs and are not:
- A signature produced over a different domain will not verify.
- A plain USDC transfer that skips the authorisation is not a payment proof. x402 needs the signed authorisation, not the transfer.
X-PAYMENT header.
What an agent can do today
Discover and read inventory — free, no credentials
Droplinked runs a public MCP server. Read tools are open; no key, no account.
Manifest:
https://mcp.droplinked.com/.well-known/mcp.json. Send
Accept: application/json, text/event-stream on JSON-RPC calls. Write tools require
X-MCP-API-Key when the server is key-gated.
Pay an x402-gated resource
The premium feed endpoint above is a working reference implementation of the full handshake. See x402 Premium ACP Feed — including what its payload does and does not contain today.Order-level x402 routes
These are mounted and authenticated. They are the checkout-side rails, and they are the part of the stack most likely to change, so confirm current behaviour with us before you build against them:Platform metering
Limits you should know before you design around this
- Rate limits still apply to
402responses. The premium feed carriesx-ratelimit-limit: 60like any other endpoint — paying per call does not exempt you from the request budget. See Rate limits. - Base mainnet only. No testnet path is published, so there is no free way to exercise the full handshake end to end. Budget real (if tiny) USDC for integration testing.