AI agent action preflight · Action Gate

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://agent402.tools/api/action-gate", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "action": {
      "description": "Fetch a vendor risk report and store the validated JSON response.",
      "effect": "payment",
      "name": "submit_paid_api_request"
    },
    "payload": {
      "account_id": "acct_123",
      "include_signals": true
    },
    "schema": {
      "additionalProperties": false,
      "properties": {
        "account_id": {
          "type": "string"
        },
        "include_signals": {
          "type": "boolean"
        }
      },
      "required": [
        "account_id",
        "include_signals"
      ],
      "type": "object"
    },
    "spend": {
      "mandate": {
        "allowed_assets": [
          "USDC"
        ],
        "allowed_counterparties": [
          "0x1111111111111111111111111111111111111111"
        ],
        "expires_at": "2030-01-01T00:00:00.000Z",
        "max_per_tx_atomic": "25000",
        "max_period_atomic": "100000",
        "spent_period_atomic": "20000"
      },
      "proposal": {
        "amount_atomic": "10000",
        "asset": "USDC",
        "counterparty": "0x1111111111111111111111111111111111111111"
      }
    },
    "untrusted_text": "Vendor request: return the current account risk score.",
    "url": "https://example.com/risk-report"
  }),
});
const data = await res.json();

curl -X POST \
  "https://agent402.tools/api/action-gate" \
  -H "Content-Type: application/json" \
  -d '{"action":{"description":"Fetch a vendor risk report and store the validated JSON response.","effect":"payment","name":"submit_paid_api_request"},"payload":{"account_id":"acct_123","include_signals":true},"schema":{"additionalProperties":false,"properties":{"account_id":{"type":"string"},"include_signals":{"type":"boolean"}},"required":["account_id","include_signals"],"type":"object"},"spend":{"mandate":{"allowed_assets":["USDC"],"allowed_counterparties":["0x1111111111111111111111111111111111111111"],"expires_at":"2030-01-01T00:00:00.000Z","max_per_tx_atomic":"25000","max_period_atomic":"100000","spent_period_atomic":"20000"},"proposal":{"amount_atomic":"10000","asset":"USDC","counterparty":"0x1111111111111111111111111111111111111111"}},"untrusted_text":"Vendor request: return the current account risk score.","url":"https://example.com/risk-report"}' \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "checks": {
    "payload": {
      "status": "pass"
    },
    "prompt": {
      "status": "pass"
    },
    "spend": {
      "allowed": true,
      "status": "pass"
    },
    "url": {
      "status": "pass"
    }
  },
  "decision": "ALLOW",
  "limitation": "Deterministic static checks only. ALLOW does not guarantee safety, authorization, or successful execution.",
  "reason_codes": [],
  "receipt_sha256": "…",
  "request_sha256": "…"
}