OceanAltOceanAlt
HTTP 402 · Payment Required→ agent pays →HTTP 200 · OK

200Lab

From 402 to 200.

In 1997, HTTP reserved a status code almost nobody ever used: 402 Payment Required. Thirty years later, AI agents brought it to life: a machine requests, gets billed, settles on its own, and receives 200 OK— that five-character flip is the entire story of the agent economy, and the origin of this lab's name. We don't paraphrase protocol docs. We build them.

Toolbench

Everything you can actually use today. All publicly accessible unless noted, no signup required.

Demo #1 · The Agent That PaysLIVE

Click run: an agent with a wallet is born in your browser and buys a piece of paid content from this site — every round-trip and signature actually happens. Open DevTools (F12 → Network) and watch the 402 with your own eyes.

200lab — agent-payment-demo LIVE

Transparency: the 402 round-trip and EIP-712 signatures are all real (verify in DevTools). Settlement lands on Base Sepolia testnet and is verifiable on the block explorer; past the daily testnet cap or on an on-chain failure it falls back to simulated, noted on the receipt. The public gateway (firewall demo) always simulates settlement.

Demo #2 · The Trust Layer That Blocks Bad AgentsLIVE

If machines can pay on their own, bad agents can misbehave on their own. Between 402 and 200 we insert a trust layer — Know-Your-Agent + a policy firewall. Pick a scenario and watch it allow the good and block the bad, before settlement. A live reference of our Responsible Agentic Payments Framework.

compliance-gate · KYA + Firewall

Pick a scenario — watch the trust layer allow or block before settlement:

// run a scenario above

Note: signing/verification is real (see the x402 demo above); this focuses on the compliance layer above it (KYA attribution + firewall policy).

From demo to product

The two demos above aren't toys — behind them is the product OceanAlt is building: a compliant payment layer any agent can call. For humans it's the principle; for agents it's a capability.

STANDARD

Responsible Agentic Payments (RAP)

Seven pillars: KYA attribution, mandate & limits, firewall, AML screening, auditability, privacy, interoperability. Open, protocol-neutral.

FOR AGENTS

Compliant Payment Tool (MCP)

oceanalt-mcp-pay: an MCP tool agents call natively — KYA + firewall + AML before settlement, so any agent can pay safely.

ROUTER

Compliant Payment Router

Aggregates settlement rails (x402/Circle/Stripe…) with a compliance layer on top — called once per agent payment.

What just happened

01 · Quote

The agent requests a resource. The server doesn't ask who you are — it sends a bill: HTTP 402 with amount, payee, and a one-time nonce. No signup, no API key.

02 · Sign

The agent signs an EIP-712 payment authorization with its own wallet — cryptographically unforgeable, and the key never leaves the agent.

03 · Retry

The agent retries the same request with the signed credential in an X-PAYMENT header. To the server, this is money arriving.

04 · Settle

The server verifies the signature, checks the quote, burns the nonce (single-use), releases the content and settles. 402 becomes 200. Done.

More

200Lab is an independent research project, not affiliated with Coinbase or the official x402 protocol. Demo code will be open-sourced with the testnet release.