How to verify us before your agent pays

A skill file is bought with one x402 payment. The 402 answer to GET /v1/skills/<slug>/file carries these values in the PAYMENT-REQUIRED header. Compare them before signing:

Protocol

x402 version 2, scheme exact

Network

Base mainnet (eip155:8453)

Asset

USDC, 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Recipient

0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4

Amount

The price on the skill card, in millionths of a dollar: 50000 means $0.05.

Signature

One USDC transfer authorization (EIP-3009, domain “USD Coin”, version 2) for exactly that amount, to that recipient, valid for at most 300 seconds.

Live check

Our API reports this same recipient right now.

To read the header yourself, with no payment and no signature:

curl -si https://api.aiskills402.com/v1/skills/humanize/file | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 -d

• A seed phrase, a private key or a wallet export.
• A token approval or a permit for an allowance. The only signature is the one-time transfer above.
• Payment to any address other than 0x8e37…36f4, in any token other than USDC, or on any network other than Base.
• Payment by email, chat or direct message. Purchases happen only over x402.
• A second payment for a file you own. Re-downloads and new versions are free with the token you received at purchase.

If something that uses our name asks for any of these, it is not us. Please tell us.

After each change to how the store sells, we buy one of our own skills to prove the payment still works. Those purchases come from 0xa340966d806f114483d671f6bf934daebbdff8dc. Its payments to the recipient are our tests and upkeep of our other services, not customer sales.

We cannot edit what these show. Each link runs the search for you.

• Coinbase x402 Bazaar — the x402 discovery index. Coinbase lists a resource after a payment for it has settled, and drops it after 30 days without one.
• Official MCP Registry — our MCP server, com.aiskills402/mcp. The name is tied to the aiskills402.com domain by a DNS proof.
• x402scan — payments into the receiving wallet, from all four of our services, not only this store.
• Glama — an MCP server directory.

AISkills402 is run by Georgi Kalchev, the license holder named in every skill file. The same person runs 402cron, 402post and 402registry; all four are paid into the recipient above. More on the about page and on LinkedIn.

A security problem, a payment you did not expect, or a copy of our site: write to hello@aiskills402.com. The machine-readable contact is at /.well-known/security.txt. How the file itself is checked for hidden instructions is on /docs#safety.