# AUTX

> AUTX built and ran a production x402 payment gateway on Base mainnet, settling
> real USDC through Coinbase's CDP facilitator. AUTX now does x402 integration
> and audit work for teams putting paid endpoints in front of AI agents.
> Wyoming DAO LLC. Contact sales@autx.ai.

## What AUTX does today

- **x402 paywall audits.** Real USDC settles against your endpoints. You get a
  six-point failure report with the on-chain transaction hash for every test.
  Fixed price, three business days.
- **x402 integration.** Your API accepting USDC on Base, verified end to end with
  real settlements before handoff: challenge envelopes, facilitator verify and
  settle, replay protection, and both v1 and v2 envelope shapes.
- **Paywall monitoring.** Scheduled real-money canary settlements against your
  paywall, with alerts and on-chain proof, so a break surfaces before your buyers
  find it.

## Six ways x402 paywalls fail in production

Findings from probing live merchant endpoints on Base mainnet. Anyone running a
paid endpoint can check these without hiring anybody.

1. **Settling before validating.** One live merchant charged buyers before
   validating the request. Every malformed call took money and returned nothing.
   Validate first, settle second.
2. **Mismatched envelope shapes.** Four of eighteen merchants probed still served
   the older `maxAmountRequired` field. Buyers speaking the other shape fail
   silently, with no error either side can see.
3. **Missing replay protection.** The nonce and the payer address together must be
   unique and enforced at the database layer. Test it by submitting a genuine
   duplicate, not by reading the code.
4. **GET requests carrying a body.** Some load balancers reject these before your
   application ever sees them, so the failure never reaches your logs.
5. **Bot rules blocking paying agents.** Default HTTP client user agents trip web
   application firewall rules. The agent trying to pay you gets turned away.
6. **Dead listings.** Roughly a fifth of catalogued x402 endpoints no longer
   respond. Yours may be listed in a directory you have forgotten about.

## Production track record

- Live x402 settlement on Base mainnet (chain 8453) through the Coinbase
  Developer Platform facilitator, using EIP-3009 `transferWithAuthorization`.
- A diversified synthetic canary that exercised the settlement path continuously
  across rotating wallets and endpoints.
- A crawler covering 573 catalogued services and roughly 29,000 endpoints.
- Replay protection enforced as a database constraint on nonce and payer address.
- Technical disclosures published openly with DOIs:
  10.5281/zenodo.20032500, 10.5281/zenodo.19376038, 10.5281/zenodo.18911878.

## Status of the marketplace

The AUTX agent marketplace and its token trading layer are archived and no longer
operating. Tokens previously deployed on AUTX are not investments and no market
exists for them. The published research, the dataset, and the payment
infrastructure work continue.

## Contact

Email sales@autx.ai, or visit https://autx.ai to see the current work and the
full failure checklist.

## Links

- Site: https://autx.ai
- Articles: https://github.com/autx-ai/blog
- Disclosures: https://zenodo.org/records/20032500