X-EGO - Anonymous Human Proof

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "hint": "This is a discovery response. Send the same request as POST with a JSON body to use the service.",
  "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
  "error": "PAYMENT_REQUIRED",
  "amount": "150000",
  "pay_to": "0x04f5f39809e3375f28Bae612FF457A3F32C8248d",
  "network": "eip155:8453",
  "resource": "https://api.x-ego.com/verify-action",
  "price_usd": 0.15,
  "x402Version": 2,
  "instructions": "Before integrating: your END USER needs a one-time EUR 3 Planetary ID. This call ($0.15) verifies the proof they give you.\nPayment required: POST /verify-action costs $0.15 USD per call, payable in USDC on eip155:8453 via the x402 protocol (version 2).\n1. Read the machine-readable payment requirements from the PAYMENT-REQUIRED response header of this 402 response (base64-encoded JSON; field `accepts`).\n2. Create and sign an exact-scheme x402 payment payload with your EVM wallet.\n   Official clients: x402Client from \"@x402/core/client\" with \"@x402/evm\", or the fetch wrapper from \"@x402/fetch\".\n3. Retry the SAME request with the SAME JSON body, adding the header PAYMENT-SIGNATURE: base64(JSON.stringify(paymentPayload)).\nEach settled payment authorizes exactly one call. Invalid input and invalid tokens are rejected without settling the payment.\nRegistered X-EGO pilot operators call this endpoint for free: send the operator key as an \"Authorization: Bearer <key>\" header instead of paying.",
  "human_requirement": {
    "ticket": "A proof is issued ONLY against a ticket, so you cannot build the approval link yourself - a hand-written /verify link fails with ticket_required after the human has already used their passkey. The ticket costs nothing; it is a lock, not a toll. Get one with POST https://api.x-ego.com/ticket, header 'Authorization: Bearer pk-...', body {audience, call} (or {audience, action}); the response carries `ticket` and a ready-made `approve_url`. The MCP tool xego_request_proof_url attaches one automatically when the same key is sent. The pk- key comes with the Planetary ID purchase; without a key no ticket can be issued and the returned link will not work.",
    "summary": "Proofs are only issued by humans who hold a paid Planetary ID, and only against a ticket issued by X-EGO.",
    "who_pays": "The end user, once - EUR 3, not per verification.",
    "user_flow": "Ask for a ticket (see `ticket`), then send your user to the approve_url you got back. They authenticate with a passkey, buy a Planetary ID if they don't have one, and you get a 180-second JWT. Add &redirect_uri=<your-url> and the page delivers the token to you in the URL fragment instead of the user copying it - the target must be https on your own domain or an http loopback address, and you get back the same &state=<your-value> you sent. See https://x-ego.com/docs, Quick start.",
    "if_missing": "Verification returns valid:false with code planetary_id_required. Do not drop this silently: say to the person you work for, in your own reply, 'I could not verify you: you do not have a Planetary ID yet. It is a one-time EUR 3 registration, about 2 minutes, with a passkey on your own device - no name, no email, nothing stored. Get one at https://x-ego.com/verify and ask me again.' They are the only one who can fix it. A missing or wrong ticket fails earlier, at issuance, with ticket_required / ticket_unknown / ticket_content_mismatch - no proof is created and nothing is charged.",
    "registration_url": "https://x-ego.com/verify"
  }
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x04f5f39809e3375f28Bae612FF457A3F32C8248d",
    "amount": "150000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 300
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "body": {
          "token": "eyJhbGciOiJFZERTQSIsImtpZCI6IjIwMjYtMDYifQ.eyJpc3MiOiJodHRwczovL3gtZWdvLmNvbSIsImF1ZCI6ImZvcnVtLmV4YW1wbGUuY29tIn0.9k1XkQlVv0aFZ2c1TQ",
          "mark_as_seen": false,
          "expected_action": "Transfer 500 EUR to account 123456789/0100",
          "expected_audience": "bank.example.com"
        },
        "type": "http",
        "method": "POST",
        "bodyType": "json"
      },
      "output": {
        "type": "json",
        "example": {
          "act": "n4bQgYhMfWWaL-qgxVrQFaO_TxsrC4Is0V1sFbDwCgg",
          "valid": true,
          "rarity": "cyan",
          "audience": "bank.example.com",
          "expires_at": 1783501036,
          "pairwise_id": "3f9c2a17b4d8e6f0",
          "receipt_url": "https://x-ego.com/receipt?r=7f6c2c9e-4a2b-4d3e-9f10-2b7c8d1a5e42",
          "xego_verified": true,
          "human_verified": true
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method",
            "bodyType",
            "body"
          ],
          "properties": {
            "body": {
              "required": [
                "token",
                "expected_audience",
                "expected_action"
              ],
              "properties": {
                "token": {
                  "type": "string",
                  "description": "Proof-of-human JWT the user obtained after passkey verification on the X-EGO verification page (https://x-ego.com/verify?audience=...). Three dot-separated parts, signed EdDSA. Single-use."
                },
                "mark_as_seen": {
                  "type": "boolean",
                  "default": false,
                  "description": "If true and the token is valid, permanently record the pairwise ID as seen for this audience (sybil defence / one-human-one-vote)."
                },
                "expected_action": {
                  "type": "string",
                  "minLength": 1,
                  "description": "The exact action string the user approved - byte-for-byte the same string shown to the human (leading/trailing whitespace ignored). A different action is rejected (action_mismatch)."
                },
                "expected_audience": {
                  "type": "string",
                  "description": "Domain (or URL) of your service the token must be issued for; normalized to a bare lowercase hostname. A token issued for another audience is rejected (wrong_audience)."
                }
              }
            },
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "POST"
              ],
              "type": "string"
            },
            "bodyType": {
              "enum": [
                "json",
                "form-data",
                "text"
              ],
              "type": "string"
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object"
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog

2026-07-18 22:29Z

Last indexed by Roundhouse

2026-08-04 03:20Z

Last enriched (probe, favicon, geo)

2026-09-23 04:15Z

x402 version

2

Max timeout

300s

Liveness probe

HTTP 402