RISK INTELLIGENCE FOR THE AGENTIC ECONOMY
Every x402 payment carries hidden risk. XVA-402 is the first autonomous risk layer for x402 — an AI agent that scores counterparty risk, detects anomalies, and dynamically adjusts pricing before settlement. One line of middleware. Zero custody. Built on Solana.
Real-time credit scoring for AI agents and API endpoints. Analyzes on-chain transaction history, settlement speed, failure rates, and wallet behavioral patterns to produce a composite risk profile.
Monitors payment patterns across the x402 network. Detects velocity spikes, unusual drain patterns, suspicious payment loops, and potential sybil attacks in real-time before settlement.
Auto-adjusts fee pricing based on real-time risk assessment. Risky counterparties pay higher fees, trusted agents get lower rates. Protects LPs and service providers without manual intervention.
On-chain registry of agent reputation scores. Other protocols query XVA-402 as a risk oracle — composable, permissionless reputation layer for the entire agentic economy.
risk queries paid via x402 · no token required · USDC settlement on Solana
| Risk score | basic (0–1) |
| Registry access | public |
| Rate limit | 5 req/sec |
| Support | community |
| Risk score | full breakdown |
| Anomaly detection | included |
| Dynamic repricing | included |
| Webhook alerts | included |
| Rate limit | 100 req/sec |
| Private models | custom |
| Thresholds | configurable |
| Throughput | unlimited |
| SLA | guaranteed |
| White-label | available |
defense-in-depth: 4 layers around every risk query
XVA-402 never holds or moves funds. Read-only access to transaction data. Non-custodial by design — no smart contract risk.
Every risk score anchored to on-chain data. Inputs auditable, models versioned, score history published to on-chain registry.
Per-agent query caps prevent abuse. Exponential backoff on suspicious query patterns. DDoS protection at infrastructure level.
Risk model weights and feature importance published. No black box — every score explained down to contributing factors.
If XVA-402 unreachable, default is pass-through. x402 payments proceed normally. No single point of failure.
No persistent storage of payment details. Risk queries are ephemeral. All API communication over TLS 1.3.
Stateless middleware. Sub-200ms inference. On-chain data indexed via Helius DAS. ML models served via edge functions. Registry writes use Solana's native program infrastructure. Here's the risk scoring mechanism.
XVA-402 is the risk infrastructure layer for x402. As autonomous AI agents begin transacting at scale via HTTP-native payments, the need for real-time counterparty risk assessment becomes critical. XVA-402 fills this gap — providing credit scoring, anomaly detection, and dynamic pricing for every x402 transaction on Solana.
x402 enables frictionless payments between agents, but trust is assumed. There is no native mechanism to assess whether a counterparty is reliable, solvent, or behaving anomalously. A single malicious agent can drain funds from an API provider before anyone notices. Current x402 implementations settle first, ask questions never.
XVA-402 intercepts x402 payment handshakes and produces a real-time risk score before settlement. The score is derived from on-chain transaction history, behavioral pattern analysis, and anomaly detection. Based on the score, XVA-402 autonomously approves, rejects, or reprices the transaction — protecting both parties.
Composite risk score (0.00–1.00) computed from three dimensions: credit risk (tx history, default rate, wallet age, settlement speed), velocity risk (transaction frequency, volume spikes, time-of-day patterns), and anomaly risk (deviation from baseline behavior, sybil indicators, counterparty graph analysis). Each dimension weighted per pool/endpoint configuration.
Four autonomous agents operate in concert: Sentinel (credit scoring), Watcher (anomaly detection), Adjuster (dynamic fee pricing), and Oracle (on-chain reputation registry). Each agent can operate independently or be composed into a full risk pipeline. Agents communicate via shared state on Solana program accounts.
XVA-402 charges $0.001 USDC per risk query, paid via x402 itself — making it the first risk protocol that dogfoods its own payment rail. Free tier: 1,000 queries/month. No token required for usage. Revenue model is pure utility: more x402 adoption = more risk queries = more revenue. Protocol treasury funded by query fees. Enterprise tier available for dedicated infrastructure with custom risk models and SLA guarantees.
Zero custody — XVA-402 never holds, moves, or has authority over user funds. Read-only on-chain data access. Every risk score is verifiable against on-chain inputs. Fail-safe default: if XVA-402 is unreachable, x402 payments pass through unblocked. No single point of failure. All queries ephemeral — no persistent storage of payment details. TLS 1.3 encrypted transit.
V1 (Now): Middleware SDK, basic risk scoring, public agent registry, pay-per-use pricing. V2: ML model upgrades (gradient boosted trees → neural), cross-chain risk scores (Base, Arbitrum), webhook alert system. V3: Decentralized risk oracle network, on-chain governance for model parameters, multi-token collateral risk assessment.
agent_id | Solana public key of the agent wallet |
amount | Transaction amount (e.g. "0.5") |
token | Token mint address or symbol (default: USDC) |
detail | Return full breakdown (true/false, default: false) |
agent_id | Solana public key of the agent wallet |
window | Lookback window in minutes (default: 60) |
agent_id | Solana public key of the agent wallet |
Install the XVA-402 middleware package. Works with any Node.js/Express x402 server.
Create a config file or pass options inline. Define what happens at each risk level.
One line. The middleware intercepts x402 payment headers, scores the counterparty, and acts before your handler runs.
Use the XVA CLI to simulate risk queries against your server before going live.
Deploy your server. XVA-402 risk scoring is now live on every incoming x402 payment. Monitor via the dashboard or webhook alerts.
Integrate XVA-402 into your x402 stack in one line. Free tier — no token required.