![\"Dexter\"](\"https://raw.githubusercontent.com/Dexter-DAO/dexter-x402-sdk/main/assets/dexter-wordmark.svg\")
\n\n \n
\n Give your agent a spending limit it cannot exceed — without ever giving up your wallet.\n
\n\n\n Open a tab, set a cap, and your agent pays as it works. No signature per charge, no escrow, no custodian. Your USDC stays in your own wallet the entire time, and the seller is still guaranteed payment.\n
\n\n\n ![\"npm\"](\"https://img.shields.io/npm/v/@dexterai/x402.svg\")
\n ![\"Node\"](\"https://img.shields.io/badge/node-%3E=18-brightgreen.svg\"){kind=icon}
\n ![\"Non-custodial\"](\"https://img.shields.io/badge/non--custodial-passkey-brightgreen\"){kind=icon}
![\"Live](\"https://img.shields.io/badge/Try_it-real_payments-blueviolet\"){kind=icon}
\n Try it with real payments →\n
\n\n---\n\n## The problem\n\nAn agent that pays for things needs money it can reach without you in the loop for every charge. The two usual ways to give it that each cost you something you shouldn't have to give up.\n\n- **Prefund an escrow** and your money leaves your wallet to sit with a custodian before you've bought anything. Your balance is on the table, and you've paid a stranger in advance.\n- **Hand it a spending delegate** and you keep custody — but you can also pull the funds mid-charge, so the seller can be left unpaid. Serious sellers decline it.\n\n## The tab\n\nA **tab** keeps both halves. You open one against your own wallet with a single passkey tap and set a cap. Your agent spends against that cap call by call, with no signature on each charge. The money never leaves your wallet — and while the tab is open, the Solana program blocks you from pulling it out from under what the agent has already run up. The seller gets paid when they settle, automatically.\n\nThe cap is enforced at consensus by an on-chain program — not by this library, and not by Dexter. The closest familiar shape is an auth-and-capture card hold, except the hold lives on-chain instead of inside a processor, and no one ever takes your money.\n\n```ts\nimport { payUrlWithTab } from '@dexterai/x402/tab';\n\nconst tabs = new Map(); // one open tab per seller, reused across calls\nconst { result, tab } = await payUrlWithTab(\n 'https://api.example.com/paid/infer',\n { method: 'GET' },\n { vault, perUnitCap: '0.01', totalCap: '1.00', tabs },\n);\n// ...the agent keeps calling; every call reuses the same tab, with no new prompt...\nawait tab?.close(); // one on-chain settle pays the seller for everything\n```\n\nThat's the whole loop: one tap to open, unlimited calls under the cap, one settle to close. The seller's address comes off the wire from the URL's own `402` challenge — never from your code. The `vault` is built once from your passkey-rooted wallet; see [Setup](#setup).\n\n---\n\n## Why you can trust it\n\n\"Unruggable\" has to be earned, so here is what backs it. Every property below is enforced by the on-chain program, not by this SDK and not by Dexter.\n\n- **Non-custodial.** Your USDC never leaves your wallet. The program holds no funds — it records bindings and gates withdrawals. There is no escrow account and no custodian to fail.\n- **The cap is consensus-enforced.** The limit is checked by the Solana program at consensus, not by this library. Read the program and verify it yourself: [`Hg3wRaydFtJhYrdvYrKECacpJYDsC9Px7yKmpncj2fhc`](https://solscan.io/account/Hg3wRaydFtJhYrdvYrKECacpJYDsC9Px7yKmpncj2fhc) on Solana mainnet.\n- **Only your passkey moves money.** Withdrawals require a WebAuthn assertion verified by Solana's secp256r1 precompile. Neither the SDK nor the facilitator holds a key that can drain your wallet.\n- **The seller is protected, surgically.** As the agent spends, accrued charges crystallize on-chain into a reservation sized to exactly what's been spent — never the whole wallet. The buyer keeps spending or withdrawing the rest of their balance freely, the seller is guaranteed what they're owed, and if a seller ever goes silent the buyer reclaims the abandoned reservation after a fixed grace period. No one's funds can be frozen indefinitely.\n- **Live on mainnet, pre-audit, and we say so.** Tabs settle on Solana mainnet today; an external audit is funded and in flight. The report and any findings publish in the [`dexter-vault`](https://github.com/Dexter-DAO/dexter-vault) program repo. Responsible disclosure: branch@dexter.cash.\n\nThe full threat model and trust assumptions live in the program's [`SECURITY.md`](https://github.com/Dexter-DAO/dexter-vault).\n\n---\n\n## Setup\n\nInstall the SDK alongside `@dexterai/vault` — it's a peer dependency, so your app and the tab adapter share one vault instance:\n\n```bash\nnpm install @dexterai/x402 @dexterai/vault\n```\n\nBuild a `vault` adapter once, from the wallet addresses you receive when you enroll at [dexter.cash](https://dexter.cash), plus your passkey signer:\n\n```ts\nimport { createSolanaVaultAdapter } from '@dexterai/x402/tab/adapters/solana';\n\nconst vault = createSolanaVaultAdapter({\n connection, // your Solana Connection (any RPC)\n swigAddress, // the vault's Swig state account, from enrollment\n vaultPda, // the vault's gate PDA, from enrollment\n passkeySigner, // browser: vault's DexterApiBrowserPasskeySigner · agent: passkeySignerFromP256Keypair(kp)\n feePayer, // lamport fee payer (a Signer)\n});\n```\n\nThat `vault` drives [the tab loop above](#the-tab). To inspect a seller's price before you spend, `resolveTabTerms(url)` reads the terms without paying — for consent screens, directories, or an agent that plans ahead.\n\n---\n\n## Get paid (sellers)\n\nYou get paid for exactly what you serve, and you hold no key. As an agent spends against its tab, charges crystallize on-chain into a reservation against the buyer's wallet; one settle at close pays your address for everything metered. One middleware advertises both a tab and a one-shot price in a single `402`, so tab-native agents and one-shot callers pay at the same rate.\n\n```ts\nimport { tabOrExactMiddleware, requireTab, openSse } from '@dexterai/x402/tab/seller';\nimport type { X402Request } from '@dexterai/x402/server';\n\napp.get('/paid/tick',\n tabOrExactMiddleware({ connection, sellerPubkey, network: 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp', perUnit: '0.01' }),\n async (req, res) => {\n if ((req as X402Request).x402) { res.json({ data: '...' }); return; } // one-shot caller, already paid\n const meter = openSse(res, { tab: requireTab(req), perUnit: '0.01' }); // tab caller\n await meter.charge(1); // demand a fresh voucher; throws if the cap is exceeded\n meter.send(JSON.stringify({ data: '...' }));\n await meter.end(); // always await — persists the final delivered amount\n });\n```\n\nWant a tab-only endpoint, or to compose the pieces yourself? The full seller surface is in [REFERENCE.md](./REFERENCE.md#sellers).\n\n---\n\n## Hosted approval (partners)\n\nWhen a partner's app opens a tab for a user, the approval runs on one Dexter-hosted consent screen, deep-linked from the partner's app. The user sees the counterparty, the cap, and the expiry, taps their passkey once, and control returns to the app. The partner builds no approval UI and never handles a passkey.\n\nThe screen is hosted for a structural reason, not a stylistic one: the vault's passkey can only sign on Dexter's own origin, so a user cannot be phished into approving on a look-alike page. The safety is a property of *where the key signs*. Flow and routing: [docs.dexter.cash](https://docs.dexter.cash).\n\n---\n\n## Also in this package\n\nTabs are the headline. The same install carries the rest of the x402 surface — each documented in full in [REFERENCE.md](./REFERENCE.md).\n\n- **One-shot payments** — a single discrete purchase over HTTP `402`, USDC on Solana and the major EVM chains. `payAndFetch` (client), `x402Middleware` (server), `useX402Payment` (React).\n- **Batch settlement (EVM)** — prepay an escrow once, make many paid calls with off-chain vouchers, settle in a handful of transactions to amortize gas. `openBatchChannel`.\n- **Discovery** — make any protected route findable by capability through the x402 bazaar spec. `bazaarExtension()`.\n- **Sponsored access & auto-listing** — endpoints paid through Dexter's facilitator are auto-discovered, named, quality-tested, and surfaced in `x402_search` across MCP clients, with no registration step.\n\n---\n\n## Supported networks\n\nTabs are Solana. One-shot and batch settlement span Solana and the major EVM chains; USDC on every chain. Full live list: [Dexter facilitator](https://x402.dexter.cash/supported).\n\n| Network | CAIP-2 | Status |\n|---------|--------|--------|\n| Solana | `solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp` | Production |\n| Base | `eip155:8453` | Production |\n| Polygon | `eip155:137` | Production |\n| Arbitrum | `eip155:42161` | Production |\n| Optimism | `eip155:10` | Production |\n| Avalanche | `eip155:43114` | Production |\n| BSC | `eip155:56` | Production |\n| SKALE Base | `eip155:1187947933` | Production (zero gas) |\n\n---\n\n## More\n\n- **[REFERENCE.md](./REFERENCE.md)** — every export, option table, and example: tabs, one-shot, batch settlement, discovery.\n- **Upgrading?** `5.0.0` makes `@dexterai/vault` a peer dependency (`>=0.19`) and unifies the passkey signer on `signOperation`. Migration from v4/v3: [REFERENCE.md](./REFERENCE.md#migration).\n- **License** — MIT, see [LICENSE](./LICENSE).\n\n---\n\n\n Dexter Facilitator ·\n OpenDexter Catalog ·\n Live Demo ·\n Become a Seller\n
\n","readmeFilename":"README.md"}