Tutorials, comparisons and design patterns for building autonomous agents that self-fund, call 345+ models and orchestrate MCP Tools.
Until now x402 was something you installed: middleware in Express, Hono, FastAPI, an MCP wrapper. In June 2026 AWS made it a WAF rule action. In July Cloudflare announced the same capability for anything behind its edge, and on 4 August it announced the wallet for the buyer side. We read the AWS developer guide end to end, checked its claims against the x402 repo, and mapped what edge enforcement actually changes: settlement inside the request path, several seconds of admitted latency, a caching question the specification still does not answer, and identity that is probabilistic on one edge and cryptographic on the other.
x402 separates payment semantics from chain encoding. The semantics fit in half a page; the encodings fill fifteen network binding documents across EVM, Solana, Stellar, TON, NEAR, Aptos, Hedera, Algorand, Keeta, Concordium, Cardano, Casper, Starknet, Sui and XRPL. We read all of them, cloned the repo, and mapped what each chain does when it has no EIP-3009 — plus where the specs, the SDKs and the docs disagree.
ACP bundles checkout and payment into one token. UCP does not: it defines Payment Handlers as specifications anyone who owns a domain can publish, and negotiates which ones apply on every single transaction. We walk the /.well-known/ucp profile, the four-step capability intersection, the trust triangle, the RFC 9421 identity layer that turns out to be the same machinery as Web Bot Auth and Visa's TAP, and the AP2 mandate extension that locks a session once negotiated. Then we audit the repo at commit a839e99: 236 commits, 79 open PRs, a spec whose last tagged release is four months old while the docs render draft, a plural capability name in the playground that can never intersect, and zero occurrences of x402, stablecoin, or USDC anywhere in the specification.
Visa's Trusted Agent Protocol signs who is knocking. Verifiable Intent signs what the human approved. It is a layered SD-JWT credential chain — issuer to user to agent — where the user's constraints are cryptographically bound and the agent's final values must satisfy them. We walk the three layers, the split L3, the eight registered constraint types, and the point where the spec admits cryptography stops and stateful ledgers begin. Then we audit the repo: a draft frozen since April, an RFC 9901 conformance bug that makes standard verifiers reject every L2 it issues, and a reference constraint checker that defaults to the permissive path.
Visa's Trusted Agent Protocol puts a cryptographic signature on every agent request that touches a merchant site, so the merchant can tell an accountable agent from an anonymous bot. No money moves over TAP. We walk the RFC 9421 headers, the agent-browser-auth and agent-payer-auth tags, the Consumer Recognition Object, the three payment containers including the HTTP 402 IOU, and an audit of the reference implementation that has not been touched since October 2025.
Four things happened between July 24 and July 31: the largest MCP revision since launch went final, Hugging Face published a 17,600-action forensic timeline in which commercial models refused to help the defenders, NVIDIA assembled a security alliance around open models and agent identity, and x402 spent the week fixing the unglamorous parts of its HTTP semantics.
MCP's 2026-07-28 revision did two things at once: it rewired every server-to-client request through Multi Round-Trip Requests (SEP-2322), and it deprecated three of them — roots, sampling and logging (SEP-2577). We walk the MRTR wire format, the cryptographic rules on requestState, the ephemeral-versus-Tasks split, and why the official migration path for sampling — 'integrate directly with LLM provider APIs' — changes who pays for inference.
MCP Apps (SEP-1865) is the first official MCP extension and, as of the 2026-07-28 spec, one of exactly two. We walk through the ui:// template scheme, the sandboxed iframe model, the JSON-RPC-over-postMessage bridge, the CSP MUSTs, and the new attack surface — then map it to an x402-billed gateway.