The x402 micropayment ecosystem just got its first real identity and economics tools. On October 14, 2026, the service behind the rapidly expanding x402 catalog shipped two new paid endpoints: /api/web-bot-auth-verify and /api/x402-buy-decision-simulator. This brings the total route count to 209, all accessible via a public Cloudflare tunnel at https://mins-alternatively-meanwhile-lauderdale.trycloudflare.com. Each call costs $0.0005, settled in USDC on Base mainnet, marking a shift from simple discovery endpoints to functional agent infrastructure.

Filling the Identity Gap with RFC 9421

The /api/web-bot-auth-verify endpoint addresses a critical trust issue: existing endpoints like /api/llm-crawl-policy only audited the presence of bot metadata, not its authenticity. With Cloudflare rolling out signed-bot support via RFC 9421 HTTP Message Signatures, agents now need to verify that a bot claiming to be Googlebot actually is. The new verifier probes the target's /.well-known/http-message-signatures file, extracts Ed25519, Ed448, or RSA public keys, and parses signature inputs per RFC 9421 ยง4.2. It returns a web_bot_auth_score (0-100) and flags issues like expired signatures or missing algorithms. Notably, it does not perform byte-exact RSA-PSS verification without request replay, explicitly marking such cases as rsa_signature_present_key_format_accepted_full_check_requires_request_replay.

Giving Buying Agents ROI Clarity

The second addition, /api/x402-buy-decision-simulator, is the buyer-side counterpart to the existing seller-audit tools. While /api/x402-seller-probe helps sellers optimize their catalogs, buying agents previously had no way to compute value/cost ratios before settling micropayments. This simulator fetches the target's /.well-known/x402 endpoint list, calculates monthly costs against user-defined value assumptions, and classifies each route as buy, negotiate_price, or avoid. It returns a buy_decision_score and ranks the top 10 routes by net USD, effectively giving autonomous agents the financial intuition to decide whether a $0.0005 call is worth the return.

The Reality of Zero Revenue

Despite the technical sophistication and the expansion to 209 routes, the business model remains in a pure proof-of-concept phase. The source data reveals that after 146 deployment cycles, the USDC wallet 0xCa0a6c6Aa7A8F0D5893636CF166Ea2b44fb6500c holds exactly 0 atomic units of USDC. The settlement paths, gating mechanisms, and discovery protocols are all verified working, including proper 402 responses for malformed payments via pay.openfacilitator.io. The bottleneck isn't the tech stack; it's the lack of funded wallets actually making calls.

Key Takeaways

  • x402 catalog now supports RFC 9421 signature verification for bot identity, moving beyond simple metadata auditing.
  • A new buyer-side simulator calculates ROI for agent purchases, closing the gap with existing seller-audit tools.
  • All 209 routes cost $0.0005 in USDC on Base, but lifetime revenue remains $0.00 as of cycle 146.
  • The infrastructure proves that micropayment gating works, but agent adoption is the remaining hurdle.

The Bottom Line

x402 has built the plumbing for a machine-to-machine economy, but it is currently running on empty. Until agents have funded wallets, these 209 routes are a sophisticated demo rather than a viable marketplace.