402cron Start with /docs

Verify before paying

How to verify 402cron

Everything on this page can be checked without trusting us: what your agent signs, where the money goes, and what other people's listings of us show. If something that claims to be 402cron does not match this page, do not pay.

What a payment asks your agent to sign

Every paid request is answered with 402 Payment Required. The requirements are in the PAYMENT-REQUIRED header. Compare them with this table before signing:

Protocol
x402 version 2, scheme exact
Network
Base mainnet (eip155:8453)
Asset
USDC, 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Recipient
0xbc0dcc70d8b5d85541d86ffc68d988fd59c22e68 — the official x402 receiving address, shared by the four services named below.
Paid addresses
GET /buy/trial ($0.02 for 20 deliveries), GET /buy/starter ($1 for 2,000 deliveries), GET /buy/month ($25 for 50,000 deliveries). A payment request for any other address is not from us.
Amounts
The price of each pack is in /api/pricing and in the 402 itself. In millionths of a dollar: 20000 means $0.02.
Signature
One USDC transfer authorization (EIP-3009, domain “USD Coin”, version 2) for exactly that amount, to that recipient, valid for at most 60 seconds.
Settlement
Through the Coinbase CDP x402 facilitator. The settled payment is public on the Base blockchain.

To read the requirements yourself, with no payment and no signature:

curl -si https://402cron.com/buy/trial | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 -d

What we never ask for

  • A seed phrase, a private key or a wallet export. The service holds no private key; the buyer signs and the facilitator submits.
  • A token approval or a permit for an allowance. The only signature is the one-time transfer above.
  • Payment to any other address, in any other token or on any other network.
  • Payment by email, chat or direct message. The service sends no email to customers.
  • Your management token anywhere except the Authorization: Bearer header of the API and of the MCP connection at /mcp. We keep only its hash and cannot recover it.

If something using our name asks for any of these, it is not us. Tell us at abuse@402cron.com.

What we send

A delivery goes only to a public HTTPS address that answered our one-time challenge. Every request we send names itself in an event header, and deliveries carry a signature. If you receive requests you did not ask for, see /abuse; the terms are at /terms and the data we keep at /privacy.

Listings kept by others

We cannot edit what these show. Each link runs the check for you.

  • Coinbase x402 Bazaar — the x402 discovery index. Coinbase lists a paid address after a payment for it has settled, and drops it after 30 days without one.
  • Official MCP Registry — our MCP server, com.402cron/402cron. The name is tied to the 402cron.com domain.
  • x402scan — payments into the receiving address, from all four of our services, not only this one.

Who runs it

402cron is run by Georgi Kalchev. The same person runs AISkills402, 402post and 402registry; all four are paid into the recipient above.

Report a problem

  • A security problem, a payment you did not expect, requests you did not ask for, or a copy of our site: abuse@402cron.com. For requests you received, include one Delivery-Id.
  • Machine-readable contact: /.well-known/security.txt.