What is x402, the pay-per-use web for AI agents?

You request data from a web service. Instead of directing you to a subscription, it quotes a price for that single request. That is the journey x402 proposes: bringing purchase closer to use, including exchanges between software.

What is x402, in one sentence?

The protocol uses HTTP 402 to communicate payment requirements. A compatible client then supplies a signed payment; the service checks the conditions before delivering the resource. Coinbase’s implementation emphasizes stablecoins. Timing and fees depend on the payment path.

One proposed use involves software agents. For a builder, the next question is authority: what budget may the agent spend, with whom and with what record? Automating payment does not replace defining those limits.

Why did the web never have a “pay” button?

Because small payments were never worth it. Sending a few cents through the card networks can cost more than the few cents themselves, so the web paid for itself with advertising and subscriptions instead. The 402 code was left in the standard as a placeholder for a future that did not arrive.

Usage-based billing requires comparing a resource’s price with its payment cost. For a very cheap request, even a small fixed cost matters. Evaluate x402 using the actual fees, network and service, not a universal timing promise.

What did Cloudflare just announce?

On July 1, 2026, Cloudflare opened the waitlist for a Monetization Gateway: a way for any site it protects to charge for its pages, datasets, APIs or agent tools without building a billing system. A buyer that will not pay gets the 402 answer and a price; one that pays gets the content, and the money lands straight in the seller’s own wallet. Cloudflare checks the payment at the edge, on its own network, before the request ever reaches the site.

Cloudflare’s announcement describes charging for a search, a data volume or an outcome. That shifts attention from subscriber numbers to paid usage. Open USD, also mentioned, subsequently launched on September 30, 2026; availability does not establish adoption by every service.

Who is actually using this?

Real volume, but read it carefully. Coinbase open-sourced x402 in May 2025. In April 2026, the Linux Foundation announced an x402 Foundation to steward it, and at its operational launch on July 14, 2026 it counted 40 members that read like a payments who’s-who: Visa, Mastercard, American Express, Stripe, Google, Shopify and Circle among them. On Base, Coinbase’s network, x402 went from near-zero in mid-2025 to more than 100 million payments by early 2026, according to Chainalysis.

Here is the honest part. Chainalysis found that much of that early spike was meme-coin speculation, not agents buying useful things, and the typical x402 wallet looks less like a business than a crypto trader: newer than an average user, holding far more tokens, moving far more money. The rail works. The everyday, boring commerce it was pitched for is mostly still ahead of it.

How open is an “open” standard?

A July 2026 study cited below analyzes 119 million transactions on Base and Solana, including 77 million through Coinbase’s facilitator. That historical sample does not describe all current activity. It raises a useful question: an open protocol can be used through a small number of intermediaries. Their availability and rules then become dependencies to examine.

What are the risks nobody puts on the slide?

• Privacy. Each payment carries small free-text fields, a link, a description, a reason, that pass through the facilitator. The pipe was built for settlement, not for privacy, and researchers warn those fields can leak personal data.
• Security. A 2026 academic paper catalogued five distinct attacks on x402, in how it authorizes payments and guards against replays. New money plumbing tends to get probed hard, and this did.
• Speculation. The name attracted a wave of x402-branded tokens that pumped and dumped. That froth is not the protocol, but it rode the same hype, and it is easy to confuse the two.

Why it matters

Strip away the tokens and x402 is a genuine attempt to give the web something it never had: a built-in way to charge for a single thing, once, the moment it is used. If software becomes the main buyer online, then, in Cloudflare’s words, “the request becomes the transaction,” and that is a real shift in how the internet could pay for itself, worth watching without buying the hype.

The same asset can support different uses, including paying for an API call with x402. Spliz does not offer an x402 integration; payments between members are disabled. Any future repayment experience will be announced separately.

The one-line version

The promise is specific: buy a resource at request time. Assessing its reach requires distinguishing measured payments, repeat usage and technical dependencies.

The decisive test is a request someone has a reason to pay for, then pay for again.

Sources

Additional source checked on October 10, 2026

• Cloudflare, the Monetization Gateway announcement, pricing examples and quotes (July 1, 2026).
• Cloudflare, launching the x402 Foundation with Coinbase and how the flow works (September 2025).
• Coinbase, the original x402 introduction and specification (May 2025).
• Linux Foundation, the operational launch of the x402 Foundation with 40 members (July 14, 2026).
• The Block, a neutral explainer of the protocol and its settlement flow.
• Chainalysis, the adoption figures and the meme-coin speculation caveat.
• arXiv, “When HTTP 402 Meets the Blockchain,” the measurement of facilitator concentration.
• arXiv, “Five Attacks on x402,” the protocol’s security weaknesses.
• Halborn, security risks, including a compromised or censoring facilitator and the lack of an RFC.