Live demo · Solana devnet

SPT-Txn × x402 — Demo

x402 moves the money. SPT-Txn proves the agent was allowed to.

SPT-Txn is the per-transaction authorization layer x402 is missing. It authorizes any actor initiating a payment — a person acting through an interface, a non-human workload, or an AI agent (including agents acting over MCP) — with the autonomous-agent case the most urgent. Authority lives only inside a short-lived token bound to one exact payment — one asset, one amount, one recipient — verified offline with no call home, so a hijacked or prompt-injected agent holds a token that's useless for any other payment. A pre-sign guard refuses any transaction that doesn't match; a real USDC transfer settles on Solana devnet; and every decision emits a signed receipt whose log's Merkle root is anchored on-chain. Drop-in middleware adds it to any x402 server in one line.

Live — an AI agent, gated over MCP

A real agent (Claude Desktop) calls a payment tool over MCP. The one payment a human approved is authorized and settles on Solana devnet; a hijacked recipient and an inflated amount are refused by the enforcement point — the same gate that secures the HTTP x402 flow.

Walkthrough — the full loop

Offline verification, real USDC settlement on Solana devnet, a tampered payment refused before signing, and the on-chain evidence anchor.

Code — all open source (Apache-2.0)
On-chain proof — Solana devnet
Research & standards