MCP server explained: what changes when a tool costs money
An MCP server is simple to explain and harder to build once a tool has to be paid for. Four curl calls against a live merchant server, the header that hides your tools, and what x402 adds.
XAgent - An open network for agentic commerce.
Research and perspectives on agentic commerce and open networks, with product and engineering updates from XAgent.
An MCP server is simple to explain and harder to build once a tool has to be paid for. Four curl calls against a live merchant server, the header that hides your tools, and what x402 adds.
x402 added a non-terminal settlement error on August 17. It exists because a broadcast transaction whose receipt you cannot read is not a failure — and retrying it can charge twice.
The upto scheme lets a seller advertise a ceiling, take one signature for it, then settle the real amount. It landed on Solana on August 12 — and it collides with the new one-dollar client cap.
Circle's August 12 roadmap puts x402 and stablecoins at the payment layer and calls trust primitives less mature. Its test for an open agent market is one a closed platform cannot pass.
Three changes merged into x402 between August 11 and 13 moved the client from signing whatever a server quotes to checking first. The new default cap is one dollar.
In Poland, cards are 21% of e-commerce transactions. Nearly every agentic payment integration shipped so far assumes a card credential — which makes the protocol debate a local one.
A new UCP extension lets a business offer net-30 or deposit-plus-balance and lets the buyer's side pick one. The spec is careful about rendering and explicitly silent on whether the agent may commit.
The Financial Stability Board's draft asks for human approval above a value threshold. Mastercard's reply says per-purchase human review will not scale. Both are now in the public record.
Tapestry's new 10-K names AI shopping assistants as a competitive risk for the first time, while halving its total AI mentions. Filings are a better adoption signal than surveys.
The current MCP revision makes the protocol stateless and deletes the session id. The spec's own worked example for what replaces it is a shopping cart — and that pattern is a bearer token.
Shopify's tripled AI traffic is in no filing. Etsy's under-1% is a spoken aside. The one agentic number that reached an audited statement this quarter was a cost, and it belongs to a smaller company.
Between August 4 and August 11 the x402 SDKs shipped a cluster of fixes for one failure: a request reaching a paid handler with verify and settle both skipped. The bugs lived in path normalization.
The Ninth Circuit held that when a user tasks an AI agent, it is the user who accesses the site. The case turned on an agent declining to identify itself.
Stripe says Open USD will be the default for businesses using stablecoins on its platform. Six weeks after the announcement the consortium has published no launch date and no chain list of its own.
Anthropic is removing the per-action approval prompt from Claude Code because users approved 97% of them. Agent purchase confirmations are the same kind of prompt, and the same number applies to them.
Circle named its Arc founding validators on August 5 and says public mainnet is on track for September 16. The institutions in that cohort matter more than the date.
Published agentic payment volume figures range from hundreds of millions of transactions to $41,900 a day. They are measuring different things, and some of the traffic is not commerce.
EIP-3009 (ERC-3009) lets a token move on the holder's signature alone — no gas from them. What the signature authorizes, why the nonce is random, and when to prefer receiveWithAuthorization instead.
Open Standard launched OUSD with 140 partners including Stripe, Visa, Mastercard, BlackRock, and Google. Here is what it changes about agent payment settlement economics.
Agent payment was experimental six months ago. It now has a 140-partner stablecoin, card-network credentials, and a commerce standard. Here is how it compares to traditional checkout.
Shopify now gives every store an MCP server. Agents can find your products. But agent-discoverable is not agent-executable. Here is what closes the gap.
x402 lets AI agents pay merchants over HTTP using stablecoin signatures. 100 million transactions on Base and counting. Here is how the protocol works and where it stops.
A practical guide to accepting stablecoin payments from AI agents: what you need in place, the two routes to get there, and how non-custodial settlement works.
How agentic commerce works: the transaction sequence AI agents follow, the five trust requirements, and what merchants must do to become agent-executable.
Alipay, Robinhood, Crossmint, and Worldline shipped agent payment products between May 26 and June 2. The convergence is the signal. Merchant operations is the bottleneck.
Stablecoin rails are moving into the card networks. The harder problem for agentic commerce is still execution: quotes, authorization, fulfillment, and proof.
AI agents can decide what to buy. They cannot yet execute the purchase end-to-end: discover the merchant, get a real quote, authorize against policy, settle on a stable rail, fulfill, and produce a re