I checked 600 live x402 services. None of them signs a receipt

说明与用途

作者发现600个x402服务中没有签名的 offer‑receipt 扩展，但创建了一个实时测试服务，提供符合规范的签名收据，帮助开发者测试 offer‑receipt 扩展。

问题

No live x402 services emit signed offer‑receipt extensions, limiting auditability and dispute resolution.

结果

The author discovered that none of 600 sampled x402 services emit signed offer‑receipt extensions, but created a live test service that does, providing a real artifact for developers.

工作流

• 1. Query facilitator discovery endpoint for resources
• 2. Sample 100 records at various offsets
• 3. Search for "offer-receipt" key in records
• 4. Observe zero declarations
• 5. Request a live resource directly to confirm 402 response
• 6. Create a test service that returns a signed offer‑receipt via /api/paid/verify-ownership
• 7. Verify signature against domain and controller TXT record
• 8. Use the service as a test fixture for client implementation

证据

Six hundred records. Zero declarations.

来源

I made one curl -i -X POST https://api.tokenizen.nl/api/paid/verify-ownership ...

来源

That answers 402 with a Payment-Required header. Base64-decode it and you get the payment requirements, plus an extensions object carrying offer-receipt with a signed offer inside, EIP-712 format.

来源