BitBooth

The first working x402 MCP server. Your agent fetches a URL, pays $0.005 stablecoin per call, gets clean markdown back. No API keys. No signup. No humans.

npm install @bitbooth/mcp-fetch

Built on the x402 protocol (Coinbase + Linux Foundation). Real money loop verified end-to-end on XRPL Mainnet — see the tx hash below.

✅ Real money loop verified end-to-end on XRPL Mainnet — last tx 493F6F1A… (1.3s round-trip).

🛡️ Testnet by default. Defaults to Base Sepolia so a fresh install spends free testnet USDC, not real money. Opt into mainnet explicitly.

🛣️ Shipping next (this week): mode:"render" (Playwright-based JS rendering for SPAs the free @modelcontextprotocol/server-fetch can't see — code is in the repo, awaiting Chromium Lambda Layer wiring). After that: shared fetch cache, mcp-youtube, mcp-pdf. Track progress in GOALS.md.

Try it right now

The flagship agent-native endpoint. No API key. No signup. Just pay.

# 1. Hit the endpoint — get a 402 with a payment challenge
curl -X POST https://app.heinrichstech.com/v1/fetch \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com","mode":"render"}'

# HTTP/1.1 402 Payment Required
# {
#   "challenge": {
#     "nonce": "e058d5d6272f4dd8192abf8f4ba1bcb0",
#     "accepts": [{
#       "network": "eip155:84532",
#       "payTo": "0x6Eb83C70a71c81BE7Fc13F0d711A28736a9E37Fc",
#       "asset": "USDC@0x036CbD53842c5426634e7929541eC2318f3dCF7e",
#       "amount": "20000"
#     }]
#   }
# }

# 2. Agent signs + sends 0.02 USDC on Base Sepolia to payTo
# 3. Agent retries with X-Payment header containing the tx hash
# 4. Gets 200 OK + clean markdown back

Or try it live — click "Run Demo" on the 6-chain race:
→ heinrichstech.com/bitbooth.html

Install as an MCP server

One line and any Claude Code / Cursor / Windsurf / Continue agent can use it:

npm install @bitbooth/mcp-fetch

Add to your MCP config:

{
  "mcpServers": {
    "bitbooth-fetch": {
      "command": "npx",
      "args": ["-y", "@bitbooth/mcp-fetch"],
      "env": { "BITBOOTH_AGENT_KEY": "0x<your-testnet-wallet-private-key>" }
    }
  }
}

See packages/mcp-fetch/README.md for full configuration.

How it works

Agent                         BitBooth                        Your API
  │                              │                               │
  │── POST /v1/fetch ───────────►│                               │
  │◄── 402 Payment Required ─────│  (challenge: amount, nonce)   │
  │                              │                               │
  │── send USDC on-chain ────────────────────────────────────►   │
  │── retry with X-Payment ─────►│                               │
  │                              │── verify on-chain ────────►   │
  │                              │◄── confirmed ─────────────    │
  │                              │── proxy request ──────────►   │
  │◄── 200 OK ──────────────────────────────────────────────────│

1. Agent calls a paywalled endpoint
2. Server returns 402 Payment Required with a signed challenge (amount, nonce, payTo, expiry)
3. Agent signs and sends the payment from its wallet
4. Agent retries with the tx hash in the X-Payment header
5. BitBooth verifies on-chain, checks replay protection, proxies through
6. Server responds 200 OK

One round-trip. Verified end-to-end at 1.3s on XRPL Mainnet and Base Sepolia today. Other chains have adapter code in the repo and are activated as customers ask.

Supported chains

Today's only real-money production rail is XRPL Mainnet. Base Sepolia is testnet — agents can pay there using free Circle faucet USDC, useful for development but it isn't real revenue. To enable Base Mainnet (real USDC), fund the configured agent wallet with real USDC on Base, set XRPL_NETWORK / chainId env vars per docs/DEPLOY.md, and re-deploy.

✅ = a real payment has settled end-to-end on this rail (real money OR testnet). ⚙️ = code is in the repo, just needs config / activation. 🛣 = on the roadmap, not built yet.

Every 402 challenge returns an accepts[] array of currently-enabled chains. The agent picks the rail it already has balance for.

API

Full spec in openapi.yaml.

Architecture

bitbooth-gateway/
├── src/
│   ├── routes/          # HTTP route tables
│   ├── controllers/     # Request parsing, response shaping
│   ├── services/        # Business logic, orchestration
│   ├── adapters/        # External system clients
│   │   ├── base/        #   Base mainnet + Sepolia (viem)
│   │   ├── xrpl/        #   Native XRPL (xrpl.js)
│   │   ├── xrpl-evm/    #   XRPL EVM Sidechain (ethers)
│   │   ├── solana/      #   Solana mainnet + devnet (@solana/web3.js)
│   │   └── ows/         #   Open Wallet Standard
│   ├── middleware/      # x402, auth, rate-limit, idempotency, errors, CORS
│   ├── validators/      # Zod schemas (every boundary validated)
│   ├── repositories/    # DynamoDB (10 tables)
│   ├── handlers/        # Lambda entry points
│   └── lib/             # Config, logger, errors, crypto, metrics, secrets
├── infra/               # AWS CDK (Lambda + API GW + DDB + Secrets Manager + WAF)
├── packages/
│   ├── mcp-fetch/       # @bitbooth/mcp-fetch — MCP server for fetch tool
│   ├── langchain-bitbooth/  # LangChain tool wrapper
│   └── bitbooth-py/     # Python client
├── tests/               # 3,368 unit tests + integration tests
├── scripts/             # Smoke tests, load tests, ops tools
└── docs/                # Deploy guide, integration guide, ADRs

Stack

• Runtime: Node 20, pure JavaScript (ESM), no TypeScript
• Cloud: AWS Lambda, API Gateway, DynamoDB, Secrets Manager, CloudWatch, WAF
• Chains: XRPL Mainnet + Base Sepolia (live), XRPL EVM + Solana (adapter code in repo, awaiting activation)
• Protocol: x402 V2 (HTTP 402 Payment Required)
• Validation: Zod at every boundary
• Testing: Vitest — 3,368 tests, all passing
• Infra: AWS CDK (stage-aware: dev/staging/prod)
• Deploy: esbuild bundles per-Lambda, cdk deploy

What's built

• x402 V2 protocol — challenge/response with nonce-based replay protection, on-chain settlement. Verified end-to-end on live staging (XRPL mainnet XRP (real money) + Base Sepolia USDC (testnet, dev-only), 1-8s round-trip).
• Multi-chain routing — single API, multiple rails advertised in each 402 challenge. Agent picks based on wallet balance.
• Agent-native endpoint (/v1/fetch) — zero signup, zero API key, pure pay-per-call. Three modes: fast (0.005 USDC, raw HTML → markdown), full (0.005 USDC, article extraction via Readability + Turndown), render (0.02 USDC, Playwright JS rendering for SPAs/dashboards that naive HTTP can't crawl).
• Multi-tenant SaaS — self-service signup, API keys, per-route pricing, session-based client portal.
• Fiat onramping — not implemented yet. /v1/quote is unrouted until a real exchange adapter ships (e.g. Moonpay). Today BitBooth is crypto-in only: agents pay from a wallet they already control.
• Fraud prevention — velocity rules, nonce tracking, amount bounds, configurable thresholds.
• Rate limiting — token bucket, 4 tiers (Free/Starter/Growth/Scale), per-IP for anonymous callers.
• Idempotency — 24h result caching via DynamoDB TTL.
• Admin console — branded admin at app.heinrichstech.com/admin with Tenants, Metrics, Earnings (Grafana-style), self-service password rotation.
• Webhook DLQ — retry with exponential backoff, max-age cleanup.
• Observability — CloudWatch Synthetics canary, alarms, structured pino logging with redaction.
• OpenAPI 3.0 spec at /openapi.yaml, auto-validated against live routes in CI.

Quick start

npm install           # install deps
npm run lint          # eslint --max-warnings=0
npm test              # 3,368 tests, ~20s
npm run build         # esbuild bundles to dist/
npm run cdk:synth     # validates CDK stack (STAGE=dev)

Deploy

# Staging (Base Sepolia, free testnet USDC)
STAGE=staging npm run cdk:deploy:staging

# Production (Base mainnet, real USDC)
STAGE=prod npm run cdk:deploy:prod

Full walkthrough in docs/DEPLOY.md.

Testing

npm test                          # run all 3,368 unit tests
npm run test:integration          # requires LocalStack + testnet RPC
npm run test:coverage             # coverage report (target ≥80% on services/ and middleware/)

Docs

• CLAUDE.md — development conventions and non-negotiables (read before contributing)
• openapi.yaml — full API specification
• docs/DEPLOY.md — CDK deployment guide
• docs/RUNBOOK.md — operational runbook (alerts, incident response)
• docs/integration-guide.md — 5-minute API integration walkthrough
• docs/adr/ — architecture decision records
• packages/mcp-fetch/README.md — MCP server for AI agents

Security

• No secrets in code — all loaded from AWS Secrets Manager at cold start
• Least-privilege IAM per Lambda
• x402 endpoints verify the on-chain transaction, check nonce against DDB for replay protection, enforce a ≤ 120s payment window
• Webhooks verify HMAC before any business logic
• Logger redacts API keys, private keys, signed payloads
• Input size limits: JSON body ≤ 100KB unless explicitly opted in
• Rate limits via API Gateway usage plans + per-account token bucket

See CLAUDE.md for the full security posture.

Contributing

This is a working open-source x402 reference gateway. PRs welcome. Before opening one:

1. npm run lint must pass with zero warnings
2. npm test must pass all 3,368 tests
3. npm audit --audit-level=high must return 0
4. Add Zod validators for any new request shape
5. No TypeScript — this is pure JavaScript + JSDoc typedefs (see CLAUDE.md)

License

MIT — free for commercial and personal use.

Links

• Live demo (6-chain race)
• Live staging API
• @bitbooth/mcp-fetch on npm
• x402 V2 spec (Coinbase + Linux Foundation)
• .well-known/agent.json
• llms.txt