Forge
Forge · Workshop

x402 & Agent Payments

Half-day facilitated session: from lab HTTP 402 payments to a production-minded dry-run with spend caps. Built for operators and small teams - not a content dump.

LOCAL / SIGNAL / CONTROL
Format
Half-day · live
Focus
x402 + OpSec
Ends with
Dry-run checklist
Session arc
01
Model
Stack + threats
02
Lab 402
Seller + buyer
03
Caps
Agent policy
04
Dry-run
Prod mindset
Agenda

What we do in the room

BLOCK 01
45 min
Threat model & stack
  • ·Why API keys fail agents
  • ·SOTA Operator Stack in one diagram
  • ·YubiKey vs hardware wallet vs float wallet
BLOCK 02
60 min
Lab: payment-gated API
  • ·Seller returns HTTP 402 with requirements
  • ·Buyer pays USDC and retries
  • ·Test facilitator / documented lab network only
BLOCK 03
45 min
Agent spend policy
  • ·Dedicated float key
  • ·Per-call and daily caps in code
  • ·What never lives on the agent host
BLOCK 04
45 min
Dry-run toward production
  • ·Facilitator as a dependency
  • ·Metrics and receipts
  • ·Kill switch and incident tabletop
BLOCK 05
30 min
Close-out
  • ·Personal / team checklist against the SOTA stack
  • ·When to escalate to institutional custody (e.g. Taurus-class)
  • ·Optional: follow-on retainer scope

Outcomes

  • ·A mental model of x402 that matches production, not slides-only theory
  • ·A lab-proven 402 → pay → 200 path your team has seen work
  • ·Written spend-cap policy for any agent or automation wallet
  • ·Mapped admin paths to YubiKey (or gap list)
  • ·Clear next step: self-serve SOTA stack vs facilitated implementation

Prerequisites

  • ·Laptop with a modern browser; optional local Node if you want to run seller code live
  • ·Willingness to use a disposable test wallet (never mainnet treasury keys in the room)
  • ·One YubiKey or plan to order (we will not enroll secrets for you in the room)
  • ·Optional: read the SOTA Operator Stack page before day-of

Deep-dive reference material lives separately for people who want to read after the session - the workshop is the organizing product, not a long article.

Before / after

How this fits the rest of the site

SOTA Operator Stack

The blueprint you implement over weeks.

Open blueprint →
This workshop

Facilitated half-day to internalize payments + caps.

You are here
OS guides

Tactical hardening under the stack.

OpSec hub →
Book a cohort

Private team session or next open cohort. Tell us headcount and whether you need agent float design only or full SOTA stack audit.

Request workshop Read the stack first