The gold standard for x402 resources. 446 curated entries — every one checked by hand before it was listed. No filler. No dead links.
The big catalogs list everything ever submitted — that's their job, and it's why most of what's in them is dead. We measured it: 67–79% of the free-listing catalogs no longer answer.
gold-402 is the other thing. Smaller on purpose. A person checked every entry, we publish what we checked and what we didn't, and in July 2026 we started buying services and reporting what came back — which as far as we can tell nobody else in this ecosystem does.
The product. 446 entries across 13 shelves, in directory/.
| Shelf | What's on it |
|---|---|
| APIs & Services | Paid endpoints an agent can call. Every one probed for a live 402 before listing. |
| MCP Servers | Model Context Protocol servers — utility, crypto, security, identity, escrow, discovery. |
| SDKs & Libraries | Client and server libraries across languages. |
| Facilitators | Payment verification and settlement services. |
| Frameworks | Agent frameworks with x402 support. |
| Tools | CLIs, CI, monitoring, spend controls, testing, discovery. |
| Security | Audit, risk scoring, pre-execution gates, compliance. |
| Ecosystem | Protocol, infrastructure, wallets, orchestration, marketplaces. |
| Aggregators & Proxies | One integration, many upstreams — services that unify or resell access to other providers' APIs and data. |
| The Global Agent Economy | China, India, Korea — infrastructure no English-language directory indexes. |
| Learning | Quickstarts, tutorials, reference docs, news. |
| Community | Channels, newsletters, jobs, events. |
| Market Data | On-chain analytics, dashboards, adoption. |
One tier: listed = verified. No bronze, silver, gold.
If an entry is on the list, a maintainer confirmed the endpoint was live and answered an x402 request correctly at review, and we re-check periodically. That is the whole claim.
It is not an audit of the provider, a guarantee of uptime, or a promise any given call will succeed.
Some entries carry more. Where we have paid for a service and confirmed what came back, we say so and keep the receipt — what we sent, what it cost, the transaction hash, what arrived. That's a stronger claim and we only make it about services we actually bought. Most of the list hasn't been through that yet, and we'd rather say so than imply otherwise.
Numbers we measured ourselves, each with its date, sample size and method. Where measurements disagree, both are shown — they were taken on different days by different methods, and blending them into one tidy figure would be the kind of thing this directory exists to argue against.
| Measured | Population | Live | Dead | Method |
|---|---|---|---|---|
| 2026-07 | 22,545 CDP Bazaar services | 5,792 | 74% | full probe crawl, valid 402 required |
| 2026-07-10 | 25,614 catalog services | 5,344 | 79% | catalog snapshot, verify-state carried forward |
| 2026-07-29 | 24,583 catalog services | — | ~67% | earlier full crawl, cited in the liveness study |
Three runs, three numbers, one direction: the large free-listing catalogs are majority dead, and have been all month. Anyone quoting a single decimal-point figure for this is quoting a moment, not a fact.
Across four independent registries — 204,500 registered agents and services — the dead share tracks one variable: what it costs to get listed.
| Registry | Entry cost | Dead |
|---|---|---|
| CDP Bazaar | free | ~67–79% |
| ERC-8004 on-chain identity | gas only | 85–97% |
| Glama MCP registry | curation + scoring | 47% unhealthy (their own published figure) |
Free entry selects for abandonment. Full method, limits, and an open invitation to refute it: The Liveness Law →
In July 2026 we ran the first paid delivery check across our own shelf — actually buying services and recording what came back.
- 16 of 126 listed services were purchasable by a machine at a discoverable address
- 8 delivered exactly what they advertised
- 0 took payment and returned nothing
- $0.054 spent, every transaction reconciled on-chain
The friction in this economy sits before the payment, not after it. Most services are fine; most front doors are not. A larger sample is in progress before we make a claim of it.
x402 is a US-governed rail. It is not the only answer to machine payment, and outside the West it is not the answer being used — China runs delegated agent authorization on existing rails, India runs regulated human-signed mandates that agents execute inside a cap. Both were operating at scale before the x402 Foundation was a month old.
We index that world too, including surfaces no English-language directory carries: The Global Agent Economy →
All figures above are ours and reproducible. Where we could not reach something, we say so rather than leaving the gap invisible.
August 2026 — one pick per shelf. Each shelf opens with its pick and the write-up. Selection is the maintainers' judgment: well-built, actively used, worth a second look. A shelf with no pick that clears the bar runs empty — the empty slot is also a verdict.
| Shelf | August pick |
|---|---|
| APIs & Services | The Bot Wire |
| MCP Servers | Razorpay MCP Server |
| SDKs & Libraries | ra2a |
| Facilitators | Primev FastRPC |
| Frameworks | machi |
| Tools | portal-tunnel |
| Security | Hermes Plant Action Safety |
| Ecosystem | Glama |
| The Global Agent Economy | ONDC |
| Learning | Tangle Network: x402 Production Runway |
| Community | WorkProtocol |
| Market Data | Valoria |
| Aggregators & Proxies | — |
The weekly wire now lives at 24klabs.ai/news — dated editions with permanent links, every claim cited. Latest edition →
This week (Aug 10—16)
- 402PIXEL — AI-agent-only territory game on a shared 402-tile board.
POST /api/claim {"tile":0-401,"days":1-30,"name":"MyAgent","color":"#4DD2FF"}— 0.01-1.00 USDC/day by tile tier on Base, days stack, top payers rank on a live Hall of Fame. (Manifest) (llms.txt) - bridgenode-llm — Drop-in OpenAI Python client with automatic x402 payment support on Solana USDC: gasless, no API keys, pay per request.
- @bridgenode/llm — Drop-in OpenAI TypeScript client with automatic x402 payment support on Solana USDC: gasless, no API keys, pay per request.
- bridgenode — CLI for x402-paid LLM inference on Solana: chat completions + model listing with automatic USDC payment.
pip install bridgenode-cli. - Gondola — Pay-per-request LLM inference over x402 (OpenAI-compatible chat, images, and Anthropic messages); routes each request to the cheapest Venice AI supplier, no account required. Overpayment banks as reusable wallet credit. OpenAPI
- BlinkCodes — Storefront selling real-world digital goods to agents: gift card codes (Steam, Razer Gold, PSN, Apple), game top-ups, and travel eSIMs.
POST /api/v1/buy {"email":"you@example.com","product_type":"giftcard","product_id":187,"item_id":1195}answers 402 priced per catalog item; replay withX-PAYMENTdelivers the code. From $0.10 USDC on Base via CDP facilitator. (llms.txt) (OpenAPI)
Last week (Aug 3—9)
- ScoutScore — Trust scoring for x402 services. Monitors 1,700+ services with continuous health checks and fidelity probes.
- x402 Trust — Autonomous trust and reliability scoring for every publicly listed x402 endpoint, derived from continuous live probing and on-chain USDC settlement. Live report via POST /v1/x402-trust, free preview via GET /v1/x402-trust-preview.
- Viridis MCP Security Preflight — Deterministic static preflight for caller-supplied MCP manifests that checks endpoint and authentication declarations, closed tool schemas, approval-policy conflicts, and prompt-injection indicators, returning an input-redacted signed receipt after x402 USDC settlement on Base.
- Minneapolis Rental Compliance — Rental-license status, tier, licensed unit count and expiration for any Minneapolis street address, plus violation and code-enforcement case history and condemned/boarded status. Live City of Minneapolis open data. For tenant screening and landlord or property-manager due diligence. $0.01 USDC on Base. (OpenAPI) (llms.txt)
- ECB FX Reference — Converts amounts across ECB-supported currencies from the European Central Bank's daily euro reference observations, returning source rates, publication date, cross-rate math, and attribution for $0.0015 USDC per call on Base. (OpenAPI) (GitHub)
- BridgeNode — OpenAI-compatible LLM inference bridge: chat completions with SSE streaming, pay per call via x402 with Solana USDC. From $0.002 per call. (OpenAPI) (llms.txt) (GitHub)
- BridgeNode MCP — x402-gated AI inference MCP server: chat completions + model listing, automatic USDC payments on Solana. Remote streamable-http at bridgenode.cc/mcp or stdio via
npx @bridgenode/mcp. (GitHub) - IBANforge — Pre-payout IBAN screening: validation + issuing-bank identification against 6 national bank registers (CH/LI, DE, AT, BE, FI), Swiss clearing incl. QR-IID resolution, bank-level sanctions, SEPA + VoP reachability. 121k+ BICs, 89 IBAN countries. $0.002-$0.02 USDC on Base (CDP facilitator). MCP:
npx -y ibanforge-mcp. (OpenAPI, x402 discovery) - US City Open-Data Compliance Network — Multi-jurisdiction property compliance for AI agents: free catalog at /us/cities, free fixed-address samples at /us/{code}/property-check/sample, paid joins at /us/{code}/property-check ($0.01 USDC on Base). Fourteen live open-data markets (Minneapolis, Seattle, NYC, Chicago, Denver, San Francisco, Los Angeles, Boston, Philadelphia, Orlando, New Orleans, Montgomery County MD, Gainesville, Kansas City) covering rental registration/license and code-violation feeds. (OpenAPI) (llms.txt) (GitHub)
- x402 Manifest Check — Zero-dependency Python CLI and live x402-paid API for static manifest checks covering network, recipient, asset, and amount bindings; neither validates runtime enforcement or settlement.
- OyaPicks — Cross-venue prediction market data for AI agents: 10 endpoints covering keyword market search, single-market lookup, probability movers, 24h volume spikes, cross-venue arbitrage gaps between Polymarket and Alpha Arcade, markets closing within 48 hours, newly listed markets, resolutions with winning outcomes, and price history. $0.01–$0.25 USDC on Base via the CDP facilitator and Algorand via GoPlausible. Example:
GET /api/x402/single-market?q=fed. (Manifest) (OpenAPI) (llms.txt) - Data Quality Gate — Deterministic dataset-quality verdict (RELIABLE/USABLE_WITH_CLEANING/UNRELIABLE) with per-check facts on completeness, nulls, types, impossible values, duplicates, and outliers, plus optional cross-source price-divergence detection for financial/trading data, for $0.01 USDC per call on Base or Solana.
- Rue Render API — Renders a URL or raw HTML to PDF, PNG, or JPEG via headless Chromium, SSRF-guarded. $0.003 USDC on Base via x402.
- Mossgate Trust API — Onchain risk checks for Base ERC-20 tokens and wallets: token verdict returns ok/caution/danger with liquidity, pair age, 24h volume, and contract flags; wallet profile returns onchain reputation for a counterparty. $0.01-$0.25 USDC on Base. (llms.txt)
- Decision Anchor — External anchoring layer for accountability before x402 payment execution. Records what was authorized, when, and at what scope. Content-blind. Non-judgmental.
New to x402? Three steps to your first payment.
1. Pick a facilitator
| Use case | Facilitator |
|---|---|
| Most chains, full SDK support | Coinbase CDP |
| Edge deployment, global latency | Cloudflare x402 |
| Enterprise billing + disputes | Stripe Machine Payments |
2. Install the SDK
# TypeScript
npm install @coinbase/x402-express
# Python
pip install x402
# Rust
cargo add x4023. Add payment middleware
import { paymentMiddleware } from '@coinbase/x402-express';
app.use(paymentMiddleware(wallet, {
'/api/data': { price: '$0.01', network: 'base-mainnet' }
}));That's it. The middleware returns 402 with payment details, verifies the client's payment header, and lets the request through.
Full quickstart → · Testnet setup →
1. Client → GET /api/data (initial request)
2. Server ← 402 Payment Required (payment details in header)
X-Payment-Required: {amount, address, network}
3. Client → EIP-3009 gasless USDC transfer (client signs + submits)
4. Client → GET /api/data + X-Payment: {signed tx} (retry with payment)
5. Facilitator → verify + settle on-chain (~2 seconds)
6. Server ← 200 OK + X-Payment-Response (resource returned)
No gas for the sender. No subscription. No API key. Payment IS authentication.
This README is the front door. The full curated directory — every shelf, every entry — is in directory/.
Other lists worth knowing: the community awesome-x402 accepts everything and is the right place for exhaustive coverage. Glama indexes MCP servers at enormous scale and publishes its own health data, which is rarer than it should be. Different jobs. Use all three.
gold-402 is curated, not exhaustive. Every entry earns its place.
See CONTRIBUTING.md for the curation standard, badge system, acceptance criteria, and submission process.
Quick rules:
- Entry must use the x402 protocol (HTTP 402 + X-Payment), not just USDC or general crypto payments.
- Live URL or public GitHub repo. Link must work.
- Last activity within 12 months (for libraries and resources without a live endpoint).
- One entry per pull request. Format:
[Name](url) — Description starting uppercase, ending with period. - Descriptions are factual. No marketing language.
Curated by 24K Labs
If this saved you time, star the repo.
24klabs.ai •
x402.org •
Protocol Spec •
Coinbase Docs •
Discord •
Live Dashboard