Visual companion to the deep research from 113 sources. Where the protocol stands after 18 months in production, who is using it, how big the real economy is, and where it goes next.
Sources113
Sections12
Cumulative tx138M
Real economy / yr$17M-$73M
Foundation members40
v2 launchDec 11 25
v2.5 ETAQ1-Q2 27
GENIUS ActJan 18 27
1. Bottom line
The 60-second read
x402 is real infrastructure with a small economy. The headline $24.24M / 30-day number on x402.org overstates the underlying agent-driven real economic activity by roughly 8-15× depending on which data vendor is measuring. The audited economic value settling through agent-native payment rails is on the order of $17M-$73M per year.
The protocol is durable. Linux Foundation governance (operational launch Jul 14 2026), 40 founding members (Visa, Mastercard, Stripe, AWS, Google, Cloudflare), AWS Bedrock AgentCore Payments GA on May 7 2026, and the Coinbase CloudFront/WAF integration launched Jun 16 2026.
x402 is the leading crypto-native rail for machine-to-machine micropayments. It competes with Stripe MPP (Tempo, $500M / $5B), Google AP2, and the card-network Trusted Agent protocols. The 12-24 month outlook: a plateau at $50-150M annual settled value with potential step-changes to $3.7B-$73B if average tickets migrate from sub-cent to card-sized.
Two structural truths: 87% of payments are between $0.0001 and $0.10 [Chainalysis Q3 2026]; US-funded agents made 88.1% of AI inference volume; Chinese wallets made 0.1% but 90% of security/code-analysis (AgentLISA). The agent economy that can actually be measured in 2026 settles tens of millions of dollars a year, at a few cents per payment.
The 12-month inflection points to watch: AWS CloudFront GA, Cloudflare Monetization Gateway, Stripe MPP adoption, ERC-8004 working-services above 10% of registrations, sustained $1+ tickets on machine rails, agent-flagged card volume disclosures.
Wash-filtered organic volume · 89% of $135.7M raw removed
Solana x402
23.2M
tx in 4 weeks ending Sep 22 2026 · 76% of all x402 activity
TRM strict agentic
$5K-11K
/month run-rate · 0.6-7.5% of $52.7M cumulative is plausibly agentic
Chainalysis cumulative
138M
x402 transactions on Base · 12 months ending Jul 2026
2. The measurement gap — what each counter actually counts
Headline 30-day x402 volume by source (same window)
x402.org $24M vs Allium $3M vs Artemis $1.6M = 15× spread · TRM Labs strict $0.005-$0.011M
Why the gap exists · The wash-trading taxonomy
3 independent methodologies · 50-90% of headline volume removed
The x402.org dashboard has not changed since March 2026
The 75.41M / $24.24M / 94.06K / 22K numbers have displayed identically in March, July, twice in August, and September 2026 — not plausible behavior for a live 30-day rolling counter. The dashboard counter appears to be static or stuck. Independent indexers (x402scan, Artemis, Allium) give numbers 8-15× lower.
3. Growth curve — from 1,500 to 138M in 15 months
x402 cumulative transactions on Base · May 2025 → Q3 2026
Daily settled volume — Helios / Jamie Coutts series
7-day moving average · USD · DOWN 93% YTD · DOWN 55% over 3 months · now ~$41,800/day
The durable adoption signal is wallet behaviour, not transaction count
Chainalysis Q3 2026 [Chainalysis report]: wallet refill rates (70.6% → 89.3% within 30 days); median time-to-payment (73 days → 18 minutes); $1+ transfers (49% → 95% of value); payer wallets 197 days old vs 423 average, 26 distinct tokens vs 4. Agents are converting from testing to paying.
4. Chain share · Geographic split · Vertical mix
Chain share · last 30 days
Geographic split · AI inference tx
Vertical mix · 500 catalogued services
5. Competitive landscape — five protocols racing
Protocol
Owner
Status
Transport
Network
30-day volume / signals
x402
Coinbase / Cloudflare / Linux Foundation
Production
HTTP 402 status code
Base, Solana, multi-EVM
75M tx, $24M nominal
Stripe MPP
Stripe + Tempo (Paradigm)
Production (Mar 18 26)
HTTP, payment-method-agnostic, sessions
Tempo, multi-chain
100+ services at launch · $500M / $5B
Google AP2
Google + 60+ launch partners
Pre-launch (FIDO Apr 26)
HTTP/A2A via x402 extension
Multi-rail
<10K transactions
OpenAI ACP
OpenAI + Stripe
Effectively shelved
Stripe Checkout native
Stripe rails
<15 Shopify merchants live
L402
Lightning Labs
Live, niche
HTTP 402 + LSAT bearer
Bitcoin Lightning
Sub-cent · micro-sats
Where x402 wins
Ships today (75M+ monthly tx, 165M+ lifetime). Open governance under Linux Foundation. Facilitator model means merchants avoid custody. Crypto-native — any agent with a key can pay without onboarding. 5,800+ GitHub stars, 100+ integrations in 18 months.
Where MPP wins
Payment-method-agnostic HTTP (card, stablecoin, ACH under one envelope). Stateful sessions with spending limits. Enterprise controls (disputes, refunds, KYC onboarding). Card minimum $0.50, stablecoin min $0.01 USDC. Tempo sub-second finality.
6. Market sentiment — 6 bullish vs 7 bearish anchors
The 6 bullish anchors · durable but valuation claims
14,820 indexed resources · 60% have zero calls in 30d · $314/day total CDP-facilitated market
@x402/* SDKs
TypeScript, Go, Python. Modules: core, server, client, facilitator, coinbase, mcp. Same scheme abstraction (exact, upto, batch-settlement) across all three languages. MIT license, Coinbase contributed.
At a $0.001 ticket, CDP fees eat 100% of revenue. At $0.01, 10%. At $0.10, 1%. The fee floor means sellers cannot be viable at sub-cent on Coinbase CDP. The Bazaar launch analysis confirms: 87% charge ≤$0.10; only 28 resources charge >$10 [fetchgate.dev Aug 28 2026].
8. Security findings — academic and audit research
USENIX Security '26 (Wang et al.) — X402SCOPE analysis of 15 production facilitators
99% of x402 transactions flow through this 15-facilitator set · Coinbase and ThirdWeb explicitly affected
Metric
Value
Detail
Facilitators tested
15
Production facilitators · 99% of x402 volume
Sellers affected
~60,000
Per USENIX disclosure
Buyers affected
~360,000
Per USENIX disclosure
Security rules defined
8
Critical payment infrastructure requirements
Rule violations
49
Every facilitator violates at least one rule
Vulnerabilities
31
5 attack classes
Resource leakage on production middleware
up to 100%
Probabilistic Service Duplication
Affected vendors
2+
Coinbase + ThirdWeb (named)
4 attack vectors · T1-T4 threat model
T1 PII exfiltration: agent tool calls expose intent in request body — seller, facilitator, and intermediaries all see it. T2 Wallet drain: x402 has no merchant-side subsidy limit; EIP-3009 signature once signed can be submitted to any facilitator. T3 Replay: x402 has no application-layer nonce; on-chain nonce is for token-level double-spend, not resource-level single-use. T4 Signature context-agnosticism: EIP-712 typed-data hash doesn't always include resource URL or merchant identity.
"How early the measurement infrastructure is" — Noah Levine, a16z. The academic and audit numbers above are best read as a lower bound. Coinbase and ThirdWeb acknowledged the disclosures and adopted mitigations, but enforcement is uneven across the 99% of volume.
9. Roadmap · 2025-05 → 2028-Q1
10. Five scenarios for annual settled value
Annual settled US-dollar value flowing through agent-native payment rails · log scale
Scenario A is the live measurement · F is the Four Pillars high case
$17M-$73M
Scenario A — Current measured Live data · TRM strict $5K-$11K/month · Helios $41.8K/day 7d avg
Baseline
$146M-$730M
Scenario B — 10x growth Ticket + population 10x · AWS GA + Cloudflare waitlist
Scenario F — Four Pillars high Population 100M+ · Gartner 33% enterprise agents by 2028
Stretch
Four inflection points to watch
Agent-flagged card volume — first network disclosure of agent-initiated transaction value. Sustained $1+ tickets — agents carrying purchases, not pings. Working ERC-8004 endpoints above 10% — currently 2.24% (8,631 of 385,998). AgentFi TVL crossing $100M — one basis point of $311B stablecoin float.
The race · who wins by 2027
x402 wins sub-cent crypto-native. Stripe MPP wins enterprise card rails. Google AP2 wins human-facing regulated commerce. L402 wins Bitcoin-native. Convergence via Visa Trusted Agent Protocol and A2A x402 extensions.
11. Five recommendations by role
For builders
Ship an MCP server with paid tools
Use xmcp 0.8 (5 lines) or Cloudflare agents/x402. Register on Bazaar via the discovery extension. Surface in Coinbase Agentic Market. The 30-second MVP stack exists.
For sellers
Target the $0.01-$0.50 sweet spot
Where x402's per-call economics work and agents can compose calls without burning wallet funds on facilitator fees. Use the Bazaar extension, the right EIP-712 domain, the Coinbase SQL API pattern.
For investors
Track the four inflection points
AWS CloudFront GA · Cloudflare Monetization Gateway · Stripe MPP adoption · ERC-8004 working-services above 10%. 12-month window is the right horizon; trillion-dollar scenarios are 2028+.
For regulators
GENIUS Act enforcement Jan 18 2027
Will require PPSI freeze-and-burn on USDC flows. EU MiCA grandfathering closed Jul 1 2026 already locked non-compliant EMTs. The x402 stack has MiCA-mapping JSON responses available.
For incumbents
The bigger risk is being bypassed
Visa's Trusted Agent Protocol explicitly interoperates with x402. Incumbents that don't ship an agent-payment story in 2027 will watch average ticket stay at sub-cent while volume grows into millions-per-day without them.
Honest gaps remaining
What's missing from this snapshot
No public per-seller revenue. No published buyer or seller retention. No reliable enterprise-side adoption data. No definitive facilitator-fee revenue. No public EU/Asia growth rates.
12. Verdict
The verdict · 17 October 2026
x402 is real infrastructure with a small economy. Linux Foundation governance with 40 founding members; AWS + Cloudflare + Stripe + Visa + Mastercard + Google on the steering committee. v2 shipped Dec 2025, v2.5/v3 on track for Q1-Q4 2027. SDKs, MCP, Bazaar, Agentic Market all functional.
The commercial economy is small. TRM strict agentic: $154K-$1.92M cumulative, $5K-$11K/month run-rate. Visa + Artemis adjusted: ~$15M. Helios daily: $41,800 average, DOWN 93% YTD.
The bull anchors are TAM/durability, not current volume. Four Pillars' $186B-$1.9T 2028 scenarios and the a16z $30T 2030 forecast are durable-but-valuation claims. None of the six bullish anchors claim current volume is large.
The gap between "AI agents could pay for things" and "AI agents are paying for things at scale" is wide. The 12-month window will tell us whether x402 crosses it or stalls at the sub-cent-ticket plateau.
Bottom line: x402 wins sub-cent crypto-native merchant rails; Stripe MPP wins enterprise card rails; AP2 wins human-facing regulated commerce; L402 wins Bitcoin-native. They converge rather than displace. Visa Trusted Agent Protocol + A2A x402 extensions are the bridges.