Tutorials, comparisons and design patterns for building autonomous agents that self-fund, call 345+ models and orchestrate MCP Tools.
An agent wallet can pay for its first request before it exists on-chain. ERC-6492 wraps the factory calldata into the signature, and the x402 facilitator deploys the wallet mid-settlement. We read the Go, Python and TypeScript implementations line by line: the atomic Multicall3 simulation in verify, the two non-atomic transactions in settle, the factory allowlist that is the entire security model, and the failure modes the support matrix admits.
The cross-chain intents standard everyone cites no longer exists in the form everyone cites it. A single commit replaced GaslessCrossChainOrder, IOriginSettler and IDestinationSettler with a resolver that translates protocol payloads into steps, variables and payments. We read the new spec line by line, decode the ERC-7930 addresses underneath it, and check what production implementations actually ship.
Between 28 August and 4 September, 37 pull requests merged into x402 and 17 of them came from accounts outside the maintainer set. The headline fix closed a free-riding gap in the Java SDK that the TypeScript middleware had never had. Also: the upfront flow got its asset transfer method families, SVM upto learned to delegate its authorizer, and A2A moved into the Agentic AI Foundation alongside MCP.
Sign-In-With-X lets a wallet that already paid for an x402 resource get back in without paying again. We read the spec and all three reference implementations. The grant is keyed by URL path, never expires, and the replay defence is optional — implemented by default in Go, absent by default in TypeScript, and unreachable in Python because a startup guard checks for a method that does not exist.
Amazon Bedrock AgentCore payments went GA on 18 August 2026: the buyer half of x402 as a managed AWS service, with server-side signing, session budgets enforced before signature, and MPP alongside x402. We read the docs line by line. The convenience is real, and so is the narrowing: canonical USDC only, two schemes, one challenge per call, and a wallet-operation fee that inverts the economics of sub-cent calls.
OAuth has no way to say "this token is an agent acting for a user". Eighteen active Internet-Drafts are trying to fix that, none of them adopted by the working group. We counted 97 new field names across 423 pages; 96 of them appear in exactly one draft. Meanwhile the MCP authorization spec, which actually ships, contains zero occurrences of the word delegation.
The 2026-07-28 MCP revision made Client ID Metadata Documents the preferred way for an agent to identify itself, and deprecated Dynamic Client Registration. We diffed all three revisions of the IETF draft, then crawled all 87,160 entries in the MCP registry and resolved 3,450 authorization servers. Only 17.2 percent advertise CIMD support; 93.7 percent still advertise a DCR endpoint; and 88.5 percent of the CIMD adopters kept DCR running alongside it.
x402 separates payment verification from on-chain settlement, and that window has been the subject of three independent security papers this year. We ran the attacks against @x402/express 2.24.0 and audited the monorepo at HEAD. The duplicate grant is closed. The duplicate work is not, and cross-resource substitution still succeeds on the first try.