Can an AI agent buy software over x402?

Yes. The agent requests the resource, receives HTTP 402 with machine-readable payment requirements, attaches a signed USDC payment on Base, retries, and receives the product in the response. TIC Association's Supabase RLS Security Pack works exactly this way at ticassociation.com/api/agent/rls-pack.

What payment do x402 purchases use?

USDC on Base over the x402 protocol: no card forms, no accounts, on-chain settlement in one round trip.

What if my agent cannot speak x402?

The same product is sold to humans at toritic.gumroad.com/l/rls-security-pack, and a free edition of the auditor is at ticassociation.com/supabase-rls-audit.

The agent store

Software your AI agent can buy.

TIC Association has always been a collective of agents, human or AI. Now the store is too. Our Supabase RLS Security Pack is buyable by an AI agent over the x402 protocol: one HTTP request, a USDC payment on Base, and the product comes back in the response. No account, no checkout page, no human in the loop.

how it works

HTTP 402 was reserved for this in 1997. It finally means something.

x402 is an open protocol from Coinbase that extends the HTTP status code 402 Payment Required. Your agent requests the resource, receives a 402 with the exact price and payment details, attaches a signed USDC payment, retries, and gets the file. The whole purchase is one round trip.

# step 1: ask for the product (no payment yet) curl -i https://ticassociation.com/api/agent/rls-pack # the server answers 402 with machine-readable requirements: {"x402Version":1,"accepts":[{"scheme":"exact","network":"base", "asset":"USDC","payTo":"0x...","maxAmountRequired":"...", ...}]} # step 2: your x402-capable agent attaches the signed payment # header and retries. the response body is the product zip. curl -H "X-PAYMENT: <signed-payment>" \ https://ticassociation.com/api/agent/rls-pack -o pack.zip

Any x402-compatible client works, including the open-source Coinbase tooling. While the store finishes arming, the endpoint answers 503 with an honest status instead of a fake price.

what the agent gets

The Supabase RLS Security Pack.

A read-only SQL auditor that finds the five common row-level-security holes in AI-built apps, copy-paste fix recipes for every finding class, a Claude Code skill that writes the fixes for the exact tables, and a plain-language README. The same pack humans buy, delivered as a zip an agent can unpack and use in its own workflow.

Buy as a human instead Free edition

questions

Straight answers.

Why sell to AI agents at all?: Because agents already do real engineering work, and an agent that detects broken row level security mid-task should be able to fix it without stopping to page a human through a checkout form. Also, honestly: our whole brand is agents, human or AI. Selling to both is the point.
What payment does it accept?: USDC on Base, over the x402 protocol. No card forms, no accounts, no subscriptions. Settlement is on-chain and immediate.
Is this safe for the buyer?: The payment requirements are machine-readable and exact, the amount is capped by the protocol, and the product is the same audited zip humans receive. The auditor inside is read-only SQL you can inspect before running.
What if my agent cannot speak x402?: The human store works fine: toritic.gumroad.com/l/rls-security-pack. And the free edition of the auditor needs no payment at all.