Angel · Oroboros Design · 13 November 2026
State of x402 sellers — November 2026
What 35,290 paid x402 resources earned in the last 30 days, and what the 250 largest sellers miss when an agent decides whether to pay them. Every number below comes from public data: the x402 Bazaar catalog and one unpaid request per seller.
Check your endpoint (free)
One unpaid request to your URL plus your discovery files. Nothing is paid or signed. 20 free checks per hour.
The market in 30 days
resources listed in the x402 Bazaar (CDP discovery)
paid calls in the last 30 days
revenue in 30 days, calls × listed price (an upper bound)
median price of a paid resource; 90 % cost $0.05 or less
Where the money is
Commerce, not data. The largest single earner is an agentic checkout at $1.99 per call (42,744 calls, 480 payers). The best-selling data product is a token verdict at $0.02 (280,057 calls, 616 payers). By category:
| Category (by description) | Calls (30 d) | Revenue (30 d) |
|---|---|---|
| Trading and market data | 376,095 | $7,742 |
| On-chain and wallet data | 153,496 | $2,923 |
| Search and web extraction | 146,567 | $2,113 |
| LLM inference | 119,602 | $1,450 |
| Security and risk | 30,156 | $996 |
| Commerce, checkout and everything else | 255,586 | $139,919 |
Categories are keyword buckets over each resource's description; revenue multiplies calls by the listed price, so endpoints with variable amounts are overstated.
What the 250 largest sellers miss
We ran one unpaid request against one resource of each of the 250 hosts with the most Bazaar listings, plus their discovery files. 236 answered with a valid x402 payment requirement; none asked a honeypot price of $1,000 or more.
96 % of these sellers had at least one fix an agent would notice. Agents read the 402, the payment headers and these files before they pay; a missing file is a missing chance to be chosen.
The fixes, in five minutes each
1 · Let browser agents read your price
Access-Control-Allow-Origin: * Access-Control-Expose-Headers: PAYMENT-REQUIRED, PAYMENT-RESPONSE
2 · Say what you sell in /llms.txt
# Example API > Per-call market data for agents, paid with x402 (USDC on Base). - [POST /v1/quote](https://api.example.com/v1/quote): best bid/ask for a pair — $0.01 per call
3 · Describe yourself at /.well-known/agent-card.json
{"name":"Example API","description":"Per-call market data for agents","url":"https://api.example.com",
"provider":{"organization":"Example Ltd","url":"https://example.com"},
"skills":[{"id":"quote","name":"Quote","description":"Best bid/ask for a pair, $0.01 per call via x402"}]}
4 · List your paid routes at /.well-known/x402
{"version":1,"resources":["https://api.example.com/v1/quote"]}
5 · Keep the EIP-712 domain right
For USDC on Base, Ethereum, Polygon, Arbitrum, Optimism and Avalanche the extra of each option is {"name":"USD Coin","version":"2"}; on Base Sepolia it is "USDC". A wrong domain makes every signature fail.
Want it done for you?
Fix Report — we send the exact changes for your stack in 48 hours (€149) · Listing in 20+ agent directories (€149) · Daily x402/MCP monitoring (€19 per month) · x402 Paywall Sprint, one endpoint end to end (€1,490). Questions: ouro@oroboros-design.com.
For agents: the full preflight is POST https://angel.oroboros-design.com/agenten/signal/preflight {"url":"…"} (0.05 USDC via x402, or a pack by card), and the token risk check is POST …/agenten/signal/token-risk {"token":"0x…"}. Both are tools of the TradeSignal MCP server.
Method
Market numbers: the public x402 Bazaar catalog (CDP discovery API, all 35,290 items, fields l30DaysTotalCalls and l30DaysUniquePayers, read 13 Nov 2026); prices are the lowest official-USDC option per resource. Seller scan: the 250 hosts with the most Bazaar listings, one resource each, one unpaid GET or POST with an Origin header, plus /llms.txt, /.well-known/agent-card.json, /openapi.json, /.well-known/x402 and /.well-known/mcp/server-card.json; 6 seconds and 64 KB per request. Nothing was paid or signed. Data, not investment advice.