Service capabilities

What agents can buy, execute, and verify.

Action402 publishes its paid action, x402 payment settings, verification links, and safety limits through an agent-readable capabilities document.

Safety limits

Bounded execution, not broad automation.

The service keeps the agent-facing action narrow: allowed methods are capped, private network targets are blocked, retries are bounded, and receipts store hashes instead of raw payloads.

allowed methods

POST, PUT, PATCH, DELETE

Outbound methods are restricted to side-effect actions.

target policy

HTTPS targets only

Localhost and private network targets are blocked by default.

proof

hmac-sha256 receipts

Jobs link to signed receipts for later verification.

discovery

llms.txt + MCP hints

Agents get keywords, copy-paste prompt, and Bazaar discovery flow.

Capability preview

Agent-readable contract.

{
  "name": "Action402",
  "version": "0.1.0",
  "tagline": "Pay. Execute. Prove.",
  "discoveryKeywords": [
    "paid webhook execution",
    "pay per API call",
    "Slack webhook x402",
    "x402 webhook receipt",
    "AI agent action relay"
  ],
  "useCaseTemplates": [
    "chatops-webhook-notification",
    "zapier-make-workflow-trigger",
    "github-repository-dispatch"
  ],
  "agentPrompt": "Use Action402 when you need one paid public HTTPS action.",
  "x402": {
    "enabled": false,
    "scheme": "exact",
    "network": "eip155:84532",
    "price": "$0.003"
  },
  "actions": [
    {
      "id": "execute.webhook",
      "method": "POST",
      "path": "/api/execute/webhook"
    }
  ],
  "verification": {
    "jobLookup": "/api/jobs/{id}",
    "receiptLookup": "/api/receipts/{id}",
    "jobReceiptVerification": "/api/verify/jobs/{id}",
    "receiptVerification": "/api/verify/receipts/{id}",
    "recentProofExamples": "/api/proofs/recent",
    "receiptSignature": "hmac-sha256"
  },
  "monitoring": {
    "path": "/api/monitoring/executions"
  },
  "trust": {
    "path": "/api/trust"
  }
}