# XGuard

> XGuard is a guarded x402 v2 verification and settlement gateway for autonomous agents and applications on Base mainnet USDC.

XGuard charges $0.002 only for a successful billable settlement. Verification, malformed requests, failed settlements, duplicates, replays, and discovery requests are not billable.

## Discovery
- [Provider manifest](https://xguard-mainnet.maqamapp.workers.dev/.well-known/x402/facilitator.json): machine-readable facilitator identity, integration, pricing, onboarding, and safety metadata
- [Agent Card](https://xguard-mainnet.maqamapp.workers.dev/.well-known/agent-card.json): machine-readable agent/service capability metadata
- [MCP server metadata](https://xguard-mainnet.maqamapp.workers.dev/.well-known/mcp/server.json): official remote MCP server metadata
- [Remote MCP](https://xguard-mainnet.maqamapp.workers.dev/mcp): streamable HTTP MCP endpoint for agent discovery
- [Bazaar resources](https://xguard-mainnet.maqamapp.workers.dev/discovery/resources): machine-readable catalog of x402-paid HTTP APIs and MCP tools
- [Bazaar search](https://xguard-mainnet.maqamapp.workers.dev/discovery/search?query=x402): searchable XGuard catalog surface
- [OpenAPI](https://xguard-mainnet.maqamapp.workers.dev/openapi.json): complete HTTP API description
- [Supported x402 kinds](https://xguard-mainnet.maqamapp.workers.dev/supported): live x402 capabilities and authoritative signer attribution
- [Status](https://xguard-mainnet.maqamapp.workers.dev/status): operational status
- [Readiness](https://xguard-mainnet.maqamapp.workers.dev/readyz): live mainnet route readiness

## Core API
- POST https://xguard-mainnet.maqamapp.workers.dev/v1/register — create a merchant identity and receive a Bearer API key
- POST https://xguard-mainnet.maqamapp.workers.dev/verify — verify an x402 v2 payment authorization
- POST https://xguard-mainnet.maqamapp.workers.dev/settle — settle an x402 v2 payment with duplicate protection and finality tracking

## Authentication
Protected merchant and payment endpoints use Authorization: Bearer <merchant-api-key>.

## Protocol
x402 version 2; Base mainnet (eip155:8453); exact scheme; native USDC.
## Agent discovery
MCP: https://xguard-mainnet.maqamapp.workers.dev/mcp (preferred protocol 2026-07-28; Streamable HTTP; stateless)
MCP manifest: https://xguard-mainnet.maqamapp.workers.dev/.well-known/mcp/server.json
Bazaar resources: https://xguard-mainnet.maqamapp.workers.dev/discovery/resources
Bazaar search: https://xguard-mainnet.maqamapp.workers.dev/discovery/search?query=<terms>
Safe migration kit: https://xguard-mainnet.maqamapp.workers.dev/.well-known/xguard/migrate?from=<cdp|payai>&name=<merchant>
The migration kit is instruction-only and does not move funds, change third-party infrastructure, or synthesize x402 settlements.