Published 2026-10-18. Full catalogue scan of 2026-10-18: 46,348 x402 resources across 2,460 hosts.
46,348 pay per call resources across 2,460 hosts, up from 32,058 a week ago. 25,783 return a well formed 402 that could settle, 20,514 cannot be paid with either GET or POST, 36 are malformed, 9 were unreachable, 3 are not payable and 3 were skipped. Nothing was left unclassified this week. 25,783 carry a price in this scan, median 0.01 USDC. A PAYABLE verdict means the challenge is well formed and, on Solana, the destination account exists. It is not a claim about delivery, quality or honesty.
The payable share fell from 96 percent to 55.6 percent, and the whole drop is one host. market.datapackvibe.com lists 19,783 resources, every one of them under a single path prefix, and none of them answers GET or POST with a usable 402. 13,040 of those resources are new this week and 6,430 were PAYABLE last week. Without that host the catalogue has 26,565 resources and 25,783 of them are payable, 97 percent, the same share as every previous week. We report the raw figure and this note together so that neither reads as a market shift.
Base carries 25,595 payable resources, Solana 8,097, then Polygon 4,522 and Arbitrum 3,042. Each count is distinct payable resources on that network from the published payability index, counted once per network a resource accepts.
Against the 11 October scan, 19,567 resources appear and 5,277 are absent. Of the 19,567, 2,142 had been seen in an earlier scan and came back, 17,425 are seen for the first time. 13,040 of the new resources come from the single host named above. Absent does not mean dead: the endpoint may simply not be in this scan. 6,719 resources kept their URL and changed verdict, and 6,497 of those sit on that same host.
New this week: a measurement of what agents actually paid, from public Base data. We take every USDC transfer to a payTo address of a PAYABLE catalogue resource during the seven days to 18 October 11:54 UTC and keep it only when the same transaction carries an AuthorizationUsed event, the EIP-3009 path that x402 settles through. The method is checked against our own revenue wallet: 20 transfers, 0.225 USDC, matching our ledger exactly.
Result: 10,349 USDC over 293,933 transfers from 3,249 distinct paying wallets, median 0.019 USDC per call. 1,321 of the 1,531 Base payTo addresses received at least one payment. The ten largest addresses took 77 percent of the value. A week earlier, measured the same way, it was 9,955 USDC, 268,637 transfers and 2,777 wallets. Value grew 4 percent, paying wallets grew 17 percent.
By distinct paying wallets the leaders are AX1 Console (885 wallets, 108,362 calls, 2,167 USDC), BotPay NFT Mint (345), corpusAI Cloud Pricing (230), BlockRun.AI (187), Otto AI (148), StableEnrich (126) and X Pay (101 wallets, the largest by value at 2,951 USDC). One listing names the zero address as its payTo; 50 transfers to that address, 1,366,373 USDC in total, carry an AuthorizationUsed event but match no catalogue price, so they are not x402 calls and are excluded. A distinct wallet is not a distinct customer. The full table is in the JSON.
The public payability index at /ata-audit/payability_index.json now reflects this 18 October scan. On 16 October our sanctions screen started refusing input that is not a crypto address with HTTP 400 and no charge, before the payment step, after an external tester paid for two calls with garbage input and received a clean verdict; those two charges were refunded. The verdict logic itself was unchanged.
Still zero across the scanned catalogue: 0 of 46,348 checked endpoints emit an x401 header. This is checked once a week, after the Sunday full scan.