Your agent can pay for paywalled APIs, data, and MCP tools in USDC over x402. Here's how MetaMask Agent Wallet inspects, approves, and signs each.
- MetaMask
- Why agents pay per call instead of holding API keys
- The x402 surface, broken down
- 1. Fund USDC on the network the service asks for
- 2. Inspect the offer before paying
- 3. Set a confirmation for every payment as the default
- 4. Know what Guard Mode checks on an x402 payment
- 5. Pick one option when the server offers several
- 6. Check that the offer is one Agent Wallet can sign
- 7. Don't rerun a payment blindly
- 8. Pay for MCP tools and POST endpoints, too
- What agents buy over x402
- What Agent Wallet doesn't do for x402
When an API, data feed, or MCP tool answers your agent with 402 Payment Required, MetaMask Agent Wallet can pay it in USDC with no signup or API key involved. The agent reads the server's offer, shows you the asset, amount, network, and recipient, and signs a one-time payment authorization after you approve. The private key stays in the wallet. The signing request also goes through the wallet service's threat scanning.
Disclaimer: This guide is for educational purposes only. It is not financial advice, not a solicitation, and not for UK audiences. Crypto payments made by AI agents are risky and not suitable for all users.
This is an operational guide for paying with x402 through Agent Wallet. For what x402 is, how the 402 handshake works, and who governs the protocol, see what is x402. Developers building delegation-based x402 payments into their own apps should start with the Smart Accounts Kit x402 guides instead. If Agent Wallet isn't set up yet, start with the quickstart.
Why agents pay per call instead of holding API keys
A paid API usually means an account and a long-lived API key. For an AI agent, that key has to live somewhere the agent can read it, which makes it a target. In research published February 5, 2026, Snyk scanned 3,984 skills on the ClawHub marketplace and found 283 skills (about 7.1%) that pushed API keys, passwords, or card numbers through the model's context window or into plaintext memory files, where a prompt injection can pull them back out.
x402 removes the standing secret. The agent pays per request with a signed authorization for an exact amount to a specific recipient, valid for a short window. With Agent Wallet, that signature comes from the wallet service through mm wallet sign-typed-data, so the agent never handles a private key or an API key. Each authorization carries a random nonce, so it can't settle twice. A broader look at what x402 changes for agent commerce, including agents that sell services to other agents, is coming in a follow-up piece.
The x402 surface, broken down
x402 support ships as a Python helper script inside the metamask-agent-wallet skill, not as an mm subcommand. Your agent calls it when a request returns 402. You normally just ask in plain language ("Fetch the premium data from this URL and pay if it returns 402"), and the agent runs these steps for you.
Step
Command (run by the agent)
What it does
Spends funds
Inspect an HTTP 402
x402_pay.py inspect
Reads the server's offer: asset, amount, network, recipient, resource
Pay an HTTP 402
x402_pay.py pay --confirm
Signs the authorization, retries the request, returns the settlement hash and the response
Yes
Inspect a paid MCP tool
x402_pay.py mcp-inspect --challenge
Reads the payment challenge a paid MCP tool returned
Sign for a paid MCP tool
x402_pay.py mcp-sign --challenge --confirm
Signs the authorization and outputs the payload for the retried tool call
Yes
Choose between offers
--asset or --network
Picks one option when the server offers several
n/a
Pay a non-GET endpoint
--method POST --data ''
Replays the same request with payment attached
n/a
The full reference is in the x402 payments guide and the skill's x402 reference.
With that flow in mind, here are 9 tips for running x402 payments through Agent Wallet.
1. Fund USDC on the network the service asks for
The server decides which assets and networks it accepts. The agent can only pay an option the server offers.
Agent Wallet pays EVM offers only, on networks that mm chains list includes. Balances are per chain, so USDC on Ethereum won't cover an offer on Base. If you have funds in USDC on another chain, you can also ask the agent to move funds to the required chain. The payment itself is a gasless, offchain authorization. The service's facilitator settles it onchain, so your wallet doesn't need native tokens to cover network fees for the payment.
2. Inspect the offer before paying
inspect reads the 402 without signing or spending. It returns the asset, a human-readable amount, the network, the payTo recipient, and the resource. The skill tells the agent to show you those details and wait for your approval before it runs pay, and pay refuses to run without --confirm.
A few checks run before anything is signed. The resource URL must be https://. The script doesn't follow redirects, so a cross-host redirect can't divert a payment to a server you didn't choose. The amount must be a positive whole number of the token's smallest unit, and the recipient and asset must be valid addresses. For the exact scheme, the signed amount equals the offered amount. It isn't a ceiling the server can charge up to.
3. Set a confirmation for every payment as the default
The Agent Wallet skill can instruct the agent to confirm the asset, amount, network, recipient, and resource with you by default before each x402 payment. The confirmation happens in your conversation with the agent. It's separate from 2FA, which the wallet service triggers only when a request is flagged or falls outside your policy.
That fits an agent that buys a research report, a few data pulls, or a gift card in a session. It's a poor fit for a loop that calls a paid endpoint every few seconds, because each call waits on you. A multi-step purchase that charges at several steps asks at each one.
4. Know what Guard Mode checks on an x402 payment
In server-wallet mode, every signing request goes to the wallet service, which runs threat scanning before it signs. A flagged request pauses in AWAITING_MFA until you approve it. x402 authorizations carry a short validity window set by the server. If Guard Mode pauses the signature for 2FA and you approve after the window closes, the authorization expires unspent. Have the agent rerun pay, which fetches a fresh 402 and signs new values. Approvals arrive where your sign-in method sends them: an email link for Google or email sign-in, or the notifications menu in MetaMask Mobile for QR sign-in.
The rolling 24-hour outflow limit works differently here. The outflow policy tracks token transfers, swaps, and deposits, and as of October 27, 2026 it states that signatures, such as Permit2, aren't included in the outflow calculation. An x402 authorization is a signature, so the 24-hour limit isn't a reliable cap on x402 spend. The confirmation step relies on the agent following the skill, and the hard ceiling is the token balance in the paying wallet. One way to cap exposure is a separate wallet funded only for paid API calls. mm wallet create and mm wallet select manage multiple wallets.
5. Pick one option when the server offers several
When a 402 lists the same scheme on more than one supported network or asset, the script stops with a "multiple eligible options" error instead of choosing for you. A service that accepts USDC on both Base and Monad can trigger it. Rerun with --network (for example, eip155:8453 for Base) or --asset with the token contract. Tell the agent which network you funded, and it can pass the flag on the first try.
6. Check that the offer is one Agent Wallet can sign
The helper signs the exact scheme with EIP-3009 transferWithAuthorization on EVM networks, for x402 protocol v1 and v2. It returns a clear error and signs nothing when it sees:
Offer
Why it's rejected
Permit2 asset transfer method only
The helper signs EIP-3009 only
upto or other schemes
Only exact is supported
Solana or other non-EVM networks
EVM networks in mm chains list only
Missing EIP-712 domain name and version
The helper won't guess the signing domain
A 402 that isn't a standard x402 challenge
Pay-first-then-send-a-hash schemes aren't x402
If a service offers both Permit2 and EIP-3009 on the same asset, the EIP-3009 option is used. The troubleshooting page lists each error.
7. Don't rerun a payment blindly
The script keeps no record of past payments. The EIP-3009 nonce stops the same signed authorization from settling twice, but each new pay run creates a new payment. If pay returns "payment not accepted," check the settlement output and whether the authorization window expired before trying again. A second run for the same resource is a second charge, and the tells callers to guard against repeated calls.
8. Pay for MCP tools and POST endpoints, too
x402 isn't limited to GET requests. Pass --method and --data, and the helper replays the same request body with the payment attached, so a paid POST (an AI chat completion endpoint, for example) works like a paid download.
Paid MCP tools use x402 v2's MCP transport. An unpaid tool call returns an error result carrying the payment challenge. The agent runs mcp-inspect, shows you the offer, runs mcp-sign --confirm after you approve, and retries the tool call with the signed payload in _meta["x402/payment"]. The script signs but doesn't speak MCP, so the agent's own MCP session delivers the retry. If the retry comes back with another challenge, the payment didn't settle, and the agent reports it to you instead of signing again.
What agents buy over x402
One use is paid data: a trading agent can pull signals or research dev before it acts, then hand off to swaps or perps for execution. A few services that accept x402, with details from their own documentation as of October 27, 2026:
Service
What an agent can buy
x402 pricing
Payment networks
Onchain analytics: wallet profiles, token screeners, Smart Money flows
$0.01 per call (basic), $0.05 (premium and Smart Money)
USDC on Base, Monad (x402 v2 only)
Market data, network metrics, fundraising, news, signals, token unlocks, Messari AI
$0.00–$1.00 per request by endpoint
USDC on Base
Gift cards, mobile top-ups, and eSIMs across 180+ countries
Product price
USDC via x402, among other methods
Each service sets its own offer format, so have the agent run inspect first to confirm the offer is one Agent Wallet can sign (tip 6). Nansen's x402 endpoints, for example, take POST requests and accept x402 v2 only. An example request: "Get Nansen's Smart Money net flows for Ethereum. If it returns 402, show me the cost and pay after I confirm." For discovering more x402 services, x402scan is an explorer for the x402 ecosystem.
What Agent Wallet doesn't do for x402
- Cap x402 spend with the outflow limit. The outflow policy excludes signatures from the 24-hour calculation for now.
Cap x402 spend with the outflow limit. The outflow policy excludes signatures from the 24-hour calculation for now.
- Sign every x402 offer. Permit2-only, upto, and non-EVM offers are rejected.
Sign every x402 offer. Permit2-only, upto, and non-EVM offers are rejected.
- Deduplicate payments. There's no payment ledger yet. Rerunning pay pays again.
Deduplicate payments. There's no payment ledger yet. Rerunning pay pays again.
- Sell over x402. The helper is buyer-side only. Hosting a paid endpoint for other agents is a separate setup.
Sell over x402. The helper is buyer-side only. Hosting a paid endpoint for other agents is a separate setup.
- Run as an mm command. It's a Python 3 script in the skill. It always prints JSON, so --toon and --format don't apply.
Run as an mm command. It's a Python 3 script in the skill. It always prints JSON, so --toon and --format don't apply.
Frequently asked questions on x402 and MetaMask Agent Wallet
- Yes. With the metamask-agent-wallet skill installed and Python 3 available, the agent detects a 402, shows you the offer, and signs an EIP-3009 payment authorization through mm wallet sign-typed-data after you approve. It works for HTTP endpoints and for paid MCP tools.
Yes. With the metamask-agent-wallet skill installed and Python 3 available, the agent detects a 402, shows you the offer, and signs an EIP-3009 payment authorization through mm wallet sign-typed-data after you approve. It works for HTTP endpoints and for paid MCP tools.
- Not for the payment itself. The wallet signs an offchain authorization, and the service's facilitator submits the onchain settlement. You need enough of the requested token, usually USDC, on the network the service asks for.
Not for the payment itself. The wallet signs an offchain authorization, and the service's facilitator submits the onchain settlement. You need enough of the requested token, usually USDC, on the network the service asks for.
- As of October 27, 2026, the outflow policy states that signatures, such as Permit2, aren't included in the outflow calculation, and an x402 authorization is a signature. The wallet service still runs threat scanning on the signing request, and the skill has the agent confirm each payment with you.
As of October 27, 2026, the outflow policy states that signatures, such as Permit2, aren't included in the outflow calculation, and an x402 authorization is a signature. The wallet service still runs threat scanning on the signing request, and the skill has the agent confirm each payment with you.
- It is possible to configure Agent Wallet this way. By default the skill instructs the agent to get your confirmation for each x402 payment.
It is possible to configure Agent Wallet this way. By default the skill instructs the agent to get your confirmation for each x402 payment.
- If the authorization expired while waiting for 2FA, rerun pay to sign fresh values. If the server rejected the payment, check the settlement output before retrying, because each pay run is a new payment.
If the authorization expired while waiting for 2FA, rerun pay to sign fresh values. If the server rejected the payment, check the settlement output before retrying, because each pay run is a new payment.
- Agent Wallet is for an AI agent you run, paying from its own wallet through the mm CLI and skill. The Smart Accounts Kit is for developers building x402 payments into their own apps with ERC-7710 delegations, including recurring budgets.
Agent Wallet is for an AI agent you run, paying from its own wallet through the mm CLI and skill. The Smart Accounts Kit is for developers building x402 payments into their own apps with ERC-7710 delegations, including recurring budgets.
This Article is written by:
- MetaMaskMetaMask, formerly Consensys Software Inc, is the world's largest self-custodial financial platform, giving people a single place to hold, spend, save and grow their money across both crypto and traditional assets. The company is building the consumer platform where that happens, bringing payments, savings, investing and digital assets together in one seamless experience. Having grown from the world's most widely used self-custodial wallet, MetaMask gives users direct control over their money and assets, with reach across approximately 190 countries. MetaMask has played a foundational role in Ethereum's growth since 2016. Today, MetaMask sits at the center of the blockchain economy, building the operating system for Open Money and putting people in full control of their financial lives.Read all articles
MetaMask, formerly Consensys Software Inc, is the world's largest self-custodial financial platform, giving people a single place to hold, spend, save and grow their money across both crypto and traditional assets. The company is building the consumer platform where that happens, bringing payments, savings, investing and digital assets together in one seamless experience. Having grown from the world's most widely used self-custodial wallet, MetaMask gives users direct control over their money and assets, with reach across approximately 190 countries. MetaMask has played a foundational role in Ethereum's growth since 2016. Today, MetaMask sits at the center of the blockchain economy, building the operating system for Open Money and putting people in full control of their financial lives.
- GUIDESWhat is the Ethereum Virtual Machine?The EVM is the software every Ethereum node runs to execute smart contracts. Explore how it works, what gas is for, and why one 0x address works across EVM-compatible networks..
What is the Ethereum Virtual Machine?
The EVM is the software every Ethereum node runs to execute smart contracts. Explore how it works, what gas is for, and why one 0x address works across EVM-compatible networks..
- GUIDESUnderstanding order types: market, limit, stop loss, and take profitMarket orders cost slippage. Limit orders risk missed fills. Stop losses can trigger on temporary wicks. Each order type has a mechanical tradeoff—here's how they work.
Understanding order types: market, limit, stop loss, and take profit
Market orders cost slippage. Limit orders risk missed fills. Stop losses can trigger on temporary wicks. Each order type has a mechanical tradeoff—here's how they work.
- GUIDESPopular cryptocurrencies in 2026Explore top cryptocurrencies in 2026 by market cap, trading volume, and usage: USDT, BTC, ETH, USDC, XRP, SOL, BNB, TRX, and more.
Popular cryptocurrencies in 2026
Explore top cryptocurrencies in 2026 by market cap, trading volume, and usage: USDT, BTC, ETH, USDC, XRP, SOL, BNB, TRX, and more.
