DNA — Payment rails for AI agents. x402 micropayment protocol on Solana. Netting, transfer, stream settlement. Receipt anchoring on-chain.
dna-x402 is an early-stage Rust project in the AI payments / x402 ecosystem, focused on agent-payments, agent-to-agent, agent-to-agent-protocol, ai. It currently has 8 GitHub stars and 1 forks, and sits alongside related tools like piprail, mcp-client, p402-protocol, x402-sdk, docs, pincerpay.
Think Stripe — but for AI agents paying each other, not humans paying websites.
An agent calls an API. The API charges USDC. The agent pays automatically and gets a receipt. No accounts, no API keys, no humans in the loop. The receipt is permanent and verifiable on Solana.
Quote. Pay. Verify. Receipt. Anchor.
DNA x402 is Parad0x Labs' payment rail for agent-to-agent and API commerce on Solana. It turns paid endpoints into machine-readable x402 flows with payment verification, signed receipts, optional on-chain anchoring, analytics, and seller tooling.
The active product in this repository is the x402/ package.
Canonical public repository:
https://github.com/Parad0x-Labs/dna-x402
Parad0x-Labs/x402-dna is a legacy mirror. Public links, install instructions, and builder docs should point to dna-x402.
You don't need to be a protocol nerd to use this. A few ways people put it to work:
You keep your keys — the rail just handles the money. (Not investment advice; what you build and charge is up to you.)
Parad0x Labs builds Web0 on Solana — money and agents that settle themselves. You are here: 💸 Payments — the rail every other layer settles on.
| Layer | Repo | Does |
|---|---|---|
| 💸 Payments | dna-x402 (this repo) | x402 rail: quote → pay → verify → receipt → anchor |
| 🛠️ Build | dna-x402-builders | Hosted kit: turn any API/bot into a paid agent |
| 🕶️ Privacy | Dark-Null-Protocol | Groth16 privacy settlement, published proofs |
| 🗜️ Data | liquefy | Columnar compression that beats Zstd |
| 🛡️ Audit | liquefy-openclaw-integration | Flight recorder: 24 engines + Solana-anchored audit trails |
| 🎬 Media | nebula-media | Proof-carrying media compression — scene-aware + on-chain receipts |
| 🧠 Local AI | nulla-local | Local-first agent runtime — your machine, your memory |
See it live (a consumer app running on these rails): parad0xlabs.com
product: dna-x402
category: fast payment rail for agent and API commerce
best_for:
- paid API endpoints
- agent-to-agent service calls
- x402 payment verification
- signed receipts and receipt anchoring
entrypoints:
buyer: ./x402/AGENTS.md
seller: ./x402/README.md
proof_docs: ./docs/PROOF.md
not_for:
- zk privacy settlement hot path
- mixer or privacy-pool flows
related_repo:
privacy_settlement: https://github.com/Parad0x-Labs/Dark-Null-Protocol
dark_null_privacy_path: docs/DARK_NULL_PRIVACY_PATH.md
frontier_primitives: docs/DARK_NULL_FRONTIER.md
frontier_research: docs/DARK_NULL_FRONTIER_RESEARCH.md
solana_frontier_research: docs/SOLANA_FRONTIER_RESEARCH.md
degen_use_cases: docs/DEGEN_USE_CASES.md
anti_copytrade_alpha: docs/ANTI_COPYTRADE_ALPHA.md
fee_saving_primitives: docs/FEE_SAVING_SOLANA_PRIMITIVES.md
edge_capstone_flow: docs/EDGE_CAPSTONE_FLOW.md
canonical_repo: https://github.com/Parad0x-Labs/dna-x402
legacy_mirror: https://github.com/Parad0x-Labs/x402-dna
| If you need... | Use DNA x402 for... |
|---|---|
| machine-speed paid API calls | 402 -> pay -> retry -> receipt |
| a buyer integration | fetchWith402 |
| a seller/paywall integration | dnaSeller() and seller middleware |
| proof and verification | signed receipts + replay-safe verification |
| on-chain auditability | receipt_anchor and VERIFIED semantics |
| privacy settlement | optional Dark Null receipt path, or use Dark-Null-Protocol directly |
Already have a pay-per-request system, an agent billing gateway, or a GPU/compute marketplace on Solana? You don't need to rebuild anything.
| If your stack has... | What DNA x402 adds |
|---|---|
| Your own 402 payment handler | x402-standard adapter — your agents reach every x402-gated API without code changes |
| Off-chain settlement records | receipt_anchor + Liquefy — 83× compressed receipts, permanent Merkle root on Solana, tamper-proof billing history |
| Ed25519 agent keys | Dark Passport — hardware-bind those keys to a Secure Enclave or passkey, on-chain provable identity |
| GPU/compute operators claiming hardware | NullLive — continuous hardware-attested proof heartbeat, verifiable on Solana |
| Per-request USDC settlement | Compressed audit trail — 1M payment receipts → 32 bytes on-chain, $0.001/day |
| Inference market or compute routing layer | x402 + receipt_anchor — agents pay for compute per-call, receipts prove delivery, permanent audit trail. Settlement infrastructure under your market structure |
| Private signal API behind a key or token gate | x402 paywall — replace key management with per-call USDC. Agents pay the signal endpoint directly, no subscriptions, no admin |
| Autonomous trading agents, execution logs off-chain only | receipt_anchor — every signal → filter → execution event anchored permanently on Solana. Verifiable strategy history, no centralized log |
These are additive layers. Drop them in alongside what you already ship.
20+ packages shipped across payments, privacy, compression, identity, and Web0:
| Package | What it does |
|---|---|
openclaw-x402-gate |
Server-side 402 challenge + structural verify + on-chain USDC settle confirmation. Public beta, non-custodial (recipientAddress is your own wallet — the gate holds no keys), unaudited. |
openclaw-x402-pay |
Self-custody client payer with a hard spend cap enforced before any transaction is signed (maxAmountUsdc), BYO-signer, no key custody. Public beta, unaudited. |
@parad0x_labs/outcome-receipts |
Creator-signed outcome attached to delivery receipt. Success fee fires only if outcome is positive. No-fake-PnL enforced on-chain, not by marketing. |
@parad0x_labs/agent-reputation |
Agent proves delivery rate, accuracy, and latency without revealing any buyer. ZK-ready over receipt history. |
@parad0x_labs/receipt-dag |
Append-only proof chain — every action links to the previous one. Anti-equivocation: same sequence nonce from same agent = on-chain proof of cheating. Built + tested (v0.2.0); batch Merkle root (RFC-6962) anchored on mainnet via receipt_anchor 6HSRGivdYR5D7yTDy1TFMCM8h3LzXxRtKU1RA3RnCMRN. Unified cross-layer graph is the next build. |
@parad0x_labs/zk-access |
Agents prove "I have tier X with Y calls left" without revealing wallet. Phase 2: Groth16 circuit. |
@parad0x_labs/blind-access |
Buyer pays once, receives N access tokens. Server cannot link which buyer spent which token. Phase 2: RSA blind signatures. |
@parad0x_labs/session-channels |
200 micro-actions in a session → one compressed receipt batch → one Solana anchor. For bots, devices, and agents with high action frequency. |
docs/SNARKPACK_BATCH_SETTLEMENT.md |
Spec: batch N Groth16 proofs into one aggregate verification. 100 agent payment proofs in one tx. Requires SIMD-0302 (G2 ops, PR #549 open). |
@parad0x_labs/royalty-waterfalls |
Recursive fee attribution for derivative agents. Agent B uses Agent A's signal — downstream receipt carries sourceReceiptHash + fee split. No custody, receipt-based only. |
@parad0x_labs/pay-to-receive |
Charge for inbound attention. Sender pays to have their payload received, processed, or acted on. Receipt binds ciphertextHash + delivery proof. Bots, rooms, agents. |
@parad0x_labs/mcp-server |
MCP server exposing the full stack to Claude Desktop, Cursor, Windsurf, and any MCP-compatible agent. Tools: x402_get_quote, anchor_receipt, lookup_passport, build_outcome_receipt, compress_receipts, get_stack_status, private_compute. |
@parad0x_labs/context-capsule |
Compress LLM session history 83x before injecting into context. 98% token cost reduction per agent session. searchCapsule finds relevant messages without decompressing full history. |
@parad0x_labs/stream-income |
Agent earns from x402 calls, proceeds auto-stream to NULL stakers. Passive income rail. |
@parad0x_labs/wormhole-x402 |
Cross-chain x402 solver. Base agent pays, Solana receipt anchored permanently. 0.1% solver spread. |
@parad0x_labs/deepfake-gate |
x402 paywall on deepfake detection APIs. EU AI Act demand. Dual-layer with NullLive. |
@parad0x_labs/agent-token |
PumpFun token per agent. Market cap drives discovery. 90% trading fees to creator. |
docs/ZK_COMPRESSION_RECEIPT_LOG.md |
ZK Compression V2 receipt log. 10M receipts near-zero cost. EU AI Act audit trail. |
| Question | Answer |
|---|---|
| What is it? | x402 payment rail for agents and APIs on Solana |
| What does it do? | quote, pay, verify, receipt, anchor |
| Who uses it? | agent builders, API providers, workflow sellers, autonomous buyers |
| How do buyers integrate? | fetchWith402 and x402-compatible proof retry flow |
| How do sellers integrate? | seller SDK + paywall middleware |
| What makes it defensible? | receipts, replay protection, anchor semantics, diagnostics, market telemetry |
| What should use the optional Dark Null path? | privacy-sensitive paid unlocks that need a private receipt summary |
receipt_anchor| Area | Status | Notes |
|---|---|---|
x402/ package |
Active | Canonical product surface |
receipt_anchor program |
Active | Receipt anchoring for VERIFIED semantics |
| Seller / buyer SDKs | Active | Live in x402/src/ |
| Dark Null privacy path | Active SDK surface | Optional hash-only private receipt request path |
| Proof / audit docs | Active | See docs/ |
/agent front door |
Active | See site-agent/ |
| Privacy / zk settlement | Separate repo | Use Dark-Null-Protocol |
Built on top of DNA x402, NULL Miner is a Solana agent-work rail for phones, browsers, and servers: task receipts, passkey-sealed agent keys, x402 payout paths, NULL emission accounting, and lottery/root primitives.
First known open-source Solana stack combining x402-style HTTP payments, signed/anchored receipts, optional Dark Null private receipt settlement, and agent identity/work rails in one public developer workspace.
Prior art note: x402 is an open standard with multiple Solana implementations (Coinbase, Pay.sh, Solana Foundation). Our specific contribution is the integrated four-layer stack — no competing open-source project ships all layers together.
1551 tests green. 8 programs live on Solana mainnet-beta. 20+ packages shipped.
| Surface | Status |
|---|---|
| OSS devnet profile | Ready to deploy with zero fees and zero NULL emission |
| Commercial mainnet profile | Ready for mainnet pilot deploy after wallet/RPC/program-id checks; external audit pending |
| Program enforcement flag | Off by default; flips on post-audit with --features mainnet rebuild |
| NULL token | Mainnet mint exists: 8EeDdvCRmFAzVD4takkBrNNwkeUTUQh4MscRK5Fzpump |
| Program | What it does |
|---|---|
dark_semaphore |
Nullifier registry for agent work proofs |
dark_secp256r1_vault |
P-256/WebAuthn passkey vault record with encrypted key material stored in a PDA |
dark_secp256k1_auth |
MetaMask/ETH address to Solana agent binding via secp256k1 precompile flow |
null_token_hook |
Token-2022 transfer-hook gate for passport/allowlist policy |
null_lottery |
Keccak/SHA-256 commit-reveal lottery/root primitive with fallback-draw path |
null_mint_gate |
NULL emission claim ledger with nullifier replay protection |
The commercial profile can be deployed to mainnet as a pilot while external audit is pending. It creates public transaction evidence and supports audit/grant funding. This status must stay visible anywhere the pilot is promoted:
--features mainnet rebuildThe pilot may expose mainnet program accounts and public receipts before the
audit is complete. Stronger enforcement paths activate after audit sign-off
via a --features mainnet rebuild.
| Feature | Pre-audit pilot | Post-audit activation |
|---|---|---|
| Program accounts on mainnet | Yes, after deploy txs exist | Yes |
| Receipt/nullifier ledgers | Yes | Yes |
| Passkey vault storage | Yes | Yes, with reviewed enforcement path |
| NULL emission accounting | Yes | SPL mint CPI only after audit sign-off |
| Lottery root/draw records | Yes | Token settlement/winner enforcement only after audit sign-off |
| Enforcement flag | off |
on with --features mainnet post-audit rebuild |
| OSS Devnet | Commercial Mainnet Pilot | |
|---|---|---|
| House fees | 0% | 0.5% config |
| NULL emission | Disabled | 5% accounting config |
| Lottery ticket price | Free | 10 NULL config |
| License | MIT | MIT code, Parad0x-operated deployment |
| Audit gate | Off | Off until external audit review and explicit activation |
| Who it serves | Builders, forks, research | Public tx evidence, commercial mainnet pilot with external audit pending |
# OSS devnet - free, MIT, zero extraction
./scripts/deploy/devnet-oss.sh
# Commercial mainnet pilot - program deployment only, audit gate remains off
./scripts/deploy/mainnet-commercial.sh
Full deployment guide: DEPLOYMENT.md
Parad0x Labs has two separate lanes:
DNA x402
402 -> pay -> retry -> receiptDark Null Protocol
This repo is not a mixer repo, privacy-pool product page, or zk hot-path payment system.
The full agent-commerce workspace is public in this repository, not hidden in a local-only tree. Current main carries a 343-member Cargo workspace: 311 crate entries, 10 Solana program entries, the TypeScript x402 package, the public builder site, and the local agent/admin UI.
Start with docs/PUBLIC_FRONTIER_WORKSPACE.md for the public inventory, promoted module map, Dark Null integration points, and regression commands.
fetchWith402DNA x402 now includes a Public Beta builder and agent developer pack for users and teams building paid APIs, agents, data feeds, tools, and vertical apps on the rail.
Start here:
config/x402.public-beta.example.jsondocs/API_REFERENCE.mddocs/BUILDER_QUICKSTART.mddocs/AGENT_QUICKSTART.mddocs/DNA_X402_DEGEN_MODE.mddocs/SELLER_LISTING_GUIDE.mddocs/BUILDER_FEES.mddocs/DNA_X402_PUBLIC_BETA_ACCEPTANCE.mdExamples:
examples/buyer-agent-tsexamples/seller-paid-api-tsexamples/builder-monetized-agent-tsexamples/webhook-receiver-tsexamples/receipt-verifier-tsAcceptance:
npm run acceptance:builder
Public Beta scope: users can create paper agents, public profiles, copy settings, and builder/API integrations. Low-risk live payments are open with client-side signing, emergency pause, Telegram monitoring, and visible fee waterfalls. Backend custody, backend signing, hidden fees, auto-sweep, unrestricted autonomous live trading, physical goods, public netting, and high-risk categories are not in beta scope.
Connect wallet. Pick agent. Set max pain. Let it cook.
Degen Mode turns Solana trench ideas into safe DNA x402 agent primitives: fresh pair scouts, wallet stalkers, copy-the-chad agents, rug radar, pump radar, paper ape labs, and paid signal rooms. The useful parts are scanner, signal, paper-sim, and trade-intent shapes. The unsafe parts stay out: no pasted private keys, no backend custody, no backend signing, no fake PnL, no guaranteed-profit claims, and no unrestricted autonomous live execution.
Launch-facing primitives for Solana-native agents, paid signal rooms, wallet intelligence, private unlocks, and x402-powered monetization loops.
Six frontier-edge primitives built for on-chain degen survival:
| Primitive | What It Does | Daily Win |
|---|---|---|
dark-alpha-receipts |
Anti-copytrading receipts - commit hash published, trade hidden until x402 paid reveal | Sell alpha without getting front-run |
dark-swarm-capsule |
Proof-carrying service capsule - prove no custody keys, no root keys | Pick the safest relayer without trusting anyone |
dark-compressed-leaves |
ZK Compression leaf schema — Light Protocol v2 adapter design (integration planned, not live) | Projected: 10,000 receipts for 0.02 SOL vs 8.9 SOL full accounts |
dark-meme-risk |
Hash-only memecoin risk scoring model (live oracle endpoint not deployed) | Score a token before aping - no raw mint in any receipt |
dark-fee-optimizer |
P-token (SIMD-0266) + ZK Compression savings model (live routing not wired) | Projected: 50k transfers/day at 98% fewer compute units |
ritual-blink-gateway |
FRONTIER EDGE — Blinks + x402 + ritual grammar + Token-2022 Hook + HookVerdict capsule, ONE atomic tx | Embed a payment-gated ritual transaction in a tweet link |
Full doc: docs/DEGEN_USE_CASES.md
Fee savings: docs/FEE_SAVING_SOLANA_PRIMITIVES.md
Anti-copytrading spec: docs/ANTI_COPYTRADE_ALPHA.md
Edge capstone flow: docs/EDGE_CAPSTONE_FLOW.md
Run the Rust regression suite with: cargo test --workspace
x402/README.mdx402/AGENTS.mddocs/DARK_NULL_PRIVACY_PATH.mddocs/REPOSITORY_IDENTITY.mddocs/site//agent UI: site-agent/.null identity + pay-by-name in your agent? Add the companion MCP in one line: claude mcp add null -- npx -y @parad0x_labs/null-mcp (resolve, register, private pay, verifiable receipts — keyless, BYO signer). Tool list: npmjs.com/package/@parad0x_labs/null-mcpgit clone https://github.com/Parad0x-Labs/dna-x402
cd dna-x402/x402
npm install
cp .env.example .env
npm run build
npm start
For local seller flows and buyer testing, open x402/README.md.
| Path | Purpose |
|---|---|
x402/ |
Canonical package, server, SDKs, verifier, diagnostics |
crates/ |
Rust primitive workspace for agent commerce, route privacy, receipts, fee logic, and Dark Null bridges. The load-bearing core is a tested primitives library — built crates with inline #[test] coverage spanning x402 receipts/privacy (dark-x402-core), receipt and capsule chains (dark-receipt-chain, dark-alpha-receipts), nullifier sharding (dark-nullifier-epoch-manager), stealth addresses (dark-stealth-ed25519, dark-stealth-address), the Poseidon-BN254 shielded pool tree (dark-shielded-pool-core), end-to-end private pay (dark-private-x402), and demo-grade HTLC/mixer scaffolds. These are libraries, not deployed programs. |
programs/receipt_anchor/ |
Solana program for receipt anchoring |
programs/live_attestation/ |
NullLive — continuous hardware attestation for live streams. Signed frame batches anchored on Solana every 1–5 min. Badge goes dark when heartbeat stops. See docs/NULLLIVE_README.md |
packages/nulllive-sdk/ |
TypeScript SDK for NullLive attestation packets, Merkle batch roots, and Solana instruction builders (@parad0x_labs/nulllive-sdk) |
programs/ |
Solana program workspace including receipt anchoring, proof gates, nullifier records, transfer hooks, and chaff |
docs/ |
Proof, security, deploy, and programmability docs |
site/ |
Public docs/proof front door |
site-agent/ |
/agent onboarding and control-room UI |
scripts/ |
Deployment and ops helpers |
docs/PROOF.mddocs/FOOTPRINT.mddocs/PROGRAMMABILITY_CONTRACT.mddocs/X402_COMPAT.mddocs/DARK_NULL_PRIVACY_PATH.mdx402/test-mainnet/Deep research across five threads: forgotten e-cash (Chaum 1982, GNU Taler deployed in a Swiss bank), cryptographic holy grails (Diamond iO from PSE 2025, witness encryption now practical for algebraic statements), proof aggregation (SnarkPack in Filecoin production — 819 Groth16 proofs → 2KB, no circuit rebuild), MPC primitives (Snowblind threshold blind signatures where even full signer collusion can't link issuance to spending), and UTXO privacy systems (FCMP++ on Monero Q1 2026 — 100M+ anonymity set, the biggest privacy advance in blockchain history that nobody outside Monero knows about).
The single most underappreciated finding: every deployed ZK payment system has an access pattern leak — your Merkle path fetch tells the full node which leaf you're proving. Piano PIR (2024, IEEE S&P) is at 12ms + 220KB per nullifier check. The fix exists. Zero deployments.
docs/DARK_NULL_FRONTIER_RESEARCH.md
DNA x402 now has an optional Dark Null receipt path:
normal: quote -> commit -> payment proof -> signed receipt -> paid unlock
dark-null: normal path + hash-only Dark Null private receipt request
normal remains the default. dark-null is for paid alpha reveals, private signal rooms, wallet-stalker reports, API access receipts, and receipt chains where raw resource paths should not become public receipt metadata.
The SDK exports createDarkNullPrivacyRequest() and verifyDarkNullPrivacyRequest(). The request requires canonical transfer settlement evidence and fails closed without it.
Read docs/DARK_NULL_PRIVACY_PATH.md.
The current Dark Null Groth16 stack is not the ceiling. Ten research directions — ZK access receipts, recursive proof batches, compressed nullifier state, proof-carrying relayer swarms, Alpenglow-ready instant private payments, MEV-blind settlement, ephemeral payment sessions, Confidential Token-2022 bridges, MPC-sealed pricing, and full private agent-to-agent API commerce — describe where the DNA x402 and Dark Null stacks converge.
None of these are shipped. All of them are buildable from the current foundation or from adjacent infrastructure that is either live or close.
Parad0x-Labs/Dark-Null-Protocoldocs/PARADOX_STACK.md
MIT - Parad0x Labs
x402 (HTTP 402 Payment Required) SDK + MCP server: let any API charge for itself and any AI agent pay for itself, USDC & stablecoins across EVM, Solana & 8 more chain families, in a couple of lines. Backendless, no fee, self-custodial, paid straight to your wallet. TypeScript, MIT.
Discover and pay AI agents on nullpath's marketplace via MCP. x402 micropayments with USDC.
P402 Payment Protocol
x402 SDK for AI agent payments - Base & Solana USDC micropayments
Official documentation for {xpay✦}. Learn how to monetize, manage, and observe your AI agents using the x402 protocol.
On-chain USDC payment gateway for AI agents. x402 protocol.
Agent behavior that compiles
An open SDK for agentic payments. Let AI agents make payments, hold funds, and move money across chains with policy enforcement and human approval built in.
x402 payments in Rust: verify, settle, and monitor payments over HTTP 402 flows
The self-improving LLM router that optimize your agentic workflows with every runs, works with any harnesses, any models, any loops.
Production-ready x402 facilitator server.
Rust SDK for the x402 payment protocol.