Security · 1h ago
x402 Foundation Launches Without Conformance Testing for Agent Payments
The Linux Foundation launched the x402 Foundation on July 14, 2026, to govern a protocol for AI agent payments over HTTP 402, backed by Visa, Mastercard, and others. However, the foundation lacks a conformance suite, security profile, or certification program, leaving agent payment authority unverified. This mirrors past gaps in MCP, where protocol standardization outpaced security testing.
Meridian48 take
The x402 Foundation's omission of adversarial conformance testing is a critical oversight, as signed receipts alone cannot prove that a payment was authorized or secure against attacks like ShareLock.
Read the full reporting
x402 Just Got a Standards Home. Who Conformance-Tests the Authority? →
DEV Community
agent-paymentsconformance-testing