thebuyside-x402-agent
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| X402_TEST_URL | No | Override target for pnpm pay-newsep and pnpm pay-solana | |
| X402_ALLOWLIST | No | Comma-separated allowed hostnames (replaces default set from seed.json) | |
| X402_BAZAAR_URL | No | CDP Bazaar endpoint override | api.cdp.coinbase.com/platform/v2/x402/discovery/search |
| X402_FEDERATION | No | 'off' disables all external indexes; discover returns local-only results | on |
| X402_SOLANA_RPC | No | Solana RPC for fetching a recent blockhash at sign time | api.mainnet-beta.solana.com |
| X402_AGENTIC_URL | No | agentic.market endpoint override | api.agentic.market/v1/services/search |
| X402_DAILY_LIMIT | No | Max USDC spent per rolling 24h window | 1.00 |
| X402_RECEIPTS_PATH | No | Where the receipts log is written | .local/receipts.jsonl |
| X402_X402WATCH_URL | No | x402watch daily snapshot URL (the {date} placeholder is filled at request time) | GitHub raw snapshot URL |
| X402_CONFIRM_STRICT | No | Set to '1' to refuse payment when the client lacks elicitation or tasks/create support | |
| X402_DISABLE_BAZAAR | No | Set to '1' to skip CDP Bazaar | |
| X402_PER_CALL_LIMIT | No | Max USDC per single call | 0.05 |
| X402_DISABLE_AGENTIC | No | Set to '1' to skip agentic.market | |
| X402_REQUIRE_CONFIRM | No | 'always', 'never', or a USDC threshold (e.g. '0.01'). Asks the user to approve via MCP elicitation before signing | always |
| X402_ALLOW_UNVERIFIED | No | Set to '1' to allow any host — dev only | |
| X402_PAYER_SOLANA_KEY | No | Solana secret key — base58 (Phantom export) or JSON-array (solana-keygen) format | |
| X402_DISABLE_X402WATCH | No | Set to '1' to skip x402watch | |
| X402_PAYER_PRIVATE_KEY | No | Base / EVM private key (0x-prefixed, 64 hex chars) | |
| X402_FEDERATION_TIMEOUT_MS | No | Per-source timeout in ms | 1500 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| pay.discoverA | Search the registry of paid APIs by free-text query. Queries the local curated registry plus external indexes (CDP Bazaar, agentic.market, x402watch) when federation is enabled. Each match carries a |
| pay.fetchA | Make an HTTP request to a URL that may require payment. If the server returns 402, the gateway speaks either x402 (Coinbase's spec, Base and Solana) or MPP (paymentauth.org draft-solana-charge, Solana only) and signs the required USDC payment from its configured wallet — subject to spend caps and the host allowlist — then returns the response body. The LLM client never sees the wallet or the 402. |
| pay.wallet_statusA | Return the gateway wallet address, today's spend total in USDC, and the configured per-call and per-day spend limits. Use this to surface payment context to the user. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 3 tools
Each tool targets a distinct function: discovery of paid APIs, execution of paid requests, and wallet status inspection. There is no functional overlap.
All tools use a consistent 'pay.<action>' pattern with underscores for multi-word verbs (pay.wallet_status). Perfectly predictable and uniform.
With 3 tools, the set is at the lower bound of well-scoped. It covers core operations but feels slightly thin for a payment gateway agent.
Missing tools for managing the registry (add/update/delete APIs) and wallet configuration (set spend limits, allowlists). These are notable gaps for a full lifecycle.