x402 Bazaar
coinbase.com · Agent-Commerce Infrastructure modeIntegrated
Last probed 2026-10-07 04:17 UTC · Verified (Partial)
x402 Bazaar — Coinbase-run discovery/marketplace layer listing x402-payable agent services.
Verdict: Discover, activate, and operate are only partly probed. Manage isn't probed yet.
- DiscoverIncomplete
- ActivateIncomplete
- OperateIncomplete
- ManageNot yet probed
Capability parity
Each stage answers one question about what an agent can do unattended. Stages are ordered by the credential-gateway dependency: Activate issues the keys that unlock Operate and Manage. A row marked “Not yet probed” means no probe has tried that capability yet — a different ledger from the “unassessed” properties under Findings, where no probe tier capable of catching that interrupt has run.
Discover
Can an agent find and read it, no account?
Assessment incomplete - not yet probed: Read pricing & limits without login.
- Be found by a retrieval agentEasy
Retrieval access present.
Evidence
- Path tried
- robots.txt / sitemap / discovery headers
- Where it stalled
- completed
- Evidence tier
- Tier 2 (live attempt)
- Verification
- Evidence-only — graded from passive signal, not live-verified.
- Backing checks
retrieval_bot_access, sitemap_xml, link_header_discovery
- Read what it does and how to use itEasy
Machine-readable docs present.
Evidence
- Path tried
- llms.txt / AGENTS.md / schema.org / docs
- Where it stalled
- completed
- Evidence tier
- Tier 1 (unauth probe)
- Verification
- Evidence-only — graded from passive signal, not live-verified.
- Backing checks
llms_txt, llms_full_txt, agents_md, agent_card, markdown_content, schema_org_jsonld, content_signals
- Read pricing & limits without loginNot yet probed
Public pricing was not confirmed - the page was absent, gated, or unreadable.
Activate
Can an agent sign up and walk away with the keys it needs?
Assessment incomplete - not yet probed: Obtain an API / MCP access credential; Obtain a management / admin key.
- Create an account self-serveEasy
Signup inspected — no blocker found.
Evidence
- Path tried
- signup flow
- Where it stalled
- completed
- Evidence tier
- Tier 1 (unauth probe)
- Verification
- Evidence-only — graded from passive signal, not live-verified.
- Obtain an API / MCP access credentialNot yet probed
No self-serve credential signal detected - key issuance not yet probed.
- Obtain a management / admin keyNot yet probed
No scoped or administrative key path was confirmed after activation.
- Accept the terms without a bot-banEasy
No bot-prohibition signal found.
Evidence
- Path tried
- ToS / policy scan
- Where it stalled
- completed
- Evidence tier
- Tier 0 (passive scan)
- Verification
- Evidence-only — graded from passive signal, not live-verified.
Operate
Can an agent do the service's actual jobs — call, transact, pay?
Assessment incomplete - not yet probed: Pay via an agent rail (x402 / ACP / AP2).
- Call the primary service over MCP / APIEasy
Verified by a live call.
Evidence
- Path tried
- API / MCP / browser
- Where it stalled
- completed
- Evidence tier
- Tier 2 (live attempt)
- Verification
- Verified — a live attempt completed.
- Backing checks
mcp_server
- Complete a transaction / checkoutNot applicable
Integrated tool — the API call is the transaction, no separate checkout.
- Pay via an agent rail (x402 / ACP / AP2)Not yet probed
No agent-payment metadata detected - payment rails not yet probed.
Manage
Can an agent administer the account and provision resources?
No probe has attempted this stage yet: Provision / scale / tear down a service; Change account details / set budget / rotate keys; View usage & billing; Cancel / export / delete (offboard).
- Provision / scale / tear down a serviceNot yet probed
Not probed - provisioning is not part of the probe suite yet.
- Change account details / set budget / rotate keysNot yet probed
Not probed - account admin is not part of the probe suite yet.
- View usage & billingNot yet probed
Authenticated usage and billing access was not confirmed.
- Cancel / export / delete (offboard)Not yet probed
No self-serve cancellation, export, or deletion path was confirmed.
Findings
How scoring works →Interrupt tier: Low-Interrupt — no interrupts found; interrupt score 81 / 100 — the badge-driving metric. (range 50–100 · 10 unassessed)
Every tool starts at 100. Each interrupt found subtracts a penalty of base weight × timing × hardness × evidence — the multiplier values below come from the same rubric tables the score is computed with. New snapshots also provisionally subtract 50% of the full worst-case tax for each unassessed property and 25% for evidence-graded successes not live-verified by Tier 2.
Property coverage
A check only counts as clean when a probe tier capable of detecting that interrupt actually ran and found nothing. Not tested ≠ clean.
| Property | Stage | State | Evidence | Required |
|---|---|---|---|---|
| SSO-only signup, no API-key issuance | activate | partial | Some coverage exists, but the available evidence is incomplete. Tier 1 assesses this property. | no |
| Email OTP verification | activate | unassessed | Tier 1 (unauth probe) + Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 1 assesses this property. | no |
| SMS / phone OTP verification | activate | unassessed | Tier 1 (unauth probe) + Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 1 assesses this property. | no |
| Mandatory phone verification call | activate | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| Mailed physical code (postal) | activate | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| “Contact sales” wall (no self-serve path) | activate | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| Manual approval queue | activate | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| Rate-limit-triggered manual review | manage | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| One-time account / payment-method provisioning | manage | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| Identity / KYC verification | activate | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| Crypto wallet / key-custody setup | operate | unassessed | Tier 2 (live attempt) ran but did not gather enough evidence to claim clean. Tier 2 assesses this property. | no |
| CAPTCHA / bot-challenge | activate | success | None found — checked at Tier 0 (passive scan) + Tier 1 (unauth probe) + Tier 2 (live attempt) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 0 assesses this property. | no |
| ToS clause banning automated/bot access | discover | success | None found — checked at Tier 0 (passive scan) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 0 assesses this property. | no |
| Mandatory redirect to vendor’s own site | operate | success | None found — checked at Tier 1 (unauth probe) + Tier 2 (live attempt) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 1 assesses this property. | no |
| No Machine Interface | operate | success | None found — checked at Tier 1 (unauth probe) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 1 assesses this property. | yes |
No interrupts found — no evidence penalties. Unassessed properties still contribute a provisional tax.
How we scored this
- Confidence: Verified (Partial) (0.75) — A live Tier-2 session ran but stopped early at a detected hard blocker — verified up to that point, unknown beyond it.
- Machine-Readability sub-score: 64 / 100 (a separate integration-ease signal — it never enters the Interrupt Score or badge).
- Some capability stages are not yet probed — shown plainly in the spine above, never as a pass.
- Rubric, tiers, confidence model, and badge thresholds →
Machine-readability checks 64 / 100
Four check groups, equal weight: machine interfaces, browsing efficiency, element discoverability, and discovery/agent access. Each check carries an evidence grade (proven / plausible / emerging) — an honesty label that never weights the score. What these mean →
- llms.txtemergingFound — docs.cdp.coinbase.com/llms.txt (32.9 KB, 260 links)
- llms-full.txtemergingFound — docs.cdp.coinbase.com/llms-full.txt (1024.0 KB, 1124 links)
- AGENTS.mdemergingFound — docs.cdp.coinbase.com/AGENTS.md
- A2A agent cardemergingFound — docs.cdp.coinbase.com/.well-known/agent-card.json
- MCP server (well-known or official registry)plausibleFound — docs.cdp.coinbase.com/.well-known/mcp.json
- OpenAPI/Swagger specplausibleNot provided
- Rate-limit headersplausibleNot provided
- Structured JSON error responsesplausibleNot provided
- OAuth authorization-server metadata (RFC 8414)provenNot provided
- API catalog (RFC 9727) (emerging)emergingNot provided
- Agent-payment discovery (x402 / UCP) (emerging)emergingNot provided
- Lean HTML transfer sizeplausibleNot provided
- Manageable DOM sizeplausible1380 DOM nodes (threshold 1500)
- High content-to-markup densityplausibleNot provided
- Content readable without JS executionprovenraw HTML holds 99% of rendered text (5719 vs 5760 chars; threshold 40%)
- Clean-content alternate (RSS/Atom/feed/markdown)plausibletext/markdown
- Serves markdown on Accept: text/markdownplausiblereturned text/markdown; charset=utf-8
- Interactive elements are semanticplausible149/149 semantic (100%); 0 div/span click targets
- Form fields have accessible namesplausibleNot provided
- Inputs carry autocomplete hintsplausibleNot provided
- WebMCP tools (modelContext API)emergingNot provided
- AI retrieval/search fetchers allowed (robots.txt)provenno retrieval-fetcher blocks in robots.txt
- Sitemap (indexability)plausibleFound — docs.cdp.coinbase.com/sitemap.xml
- schema.org JSON-LD in raw HTMLplausible1 valid JSON-LD block(s) in raw (pre-JS) HTML
- Content-Signal directives (robots.txt)emergingai-train=yes, search=yes, ai-input=yes
- Web Bot Auth key directory (emerging)emergingNot provided
- Discovery Link headers on homepage (emerging)emergingrel=api-catalog
- Pricing visible without loginNot provided
- robots.txt AI-crawler accessplausibleno AI-crawler blocks in robots.txt
- Management or admin key pathNot checked — not found after activation
- Authenticated usage and billing readNot checked — not found after activation
- Account offboarding pathNot checked — not found after activation
- Unauthenticated API error is structured JSONplausibleNot provided
- Unauthenticated API returns auth guidance (401/403 or documented)plausibleNot provided
- API exposes rate-limit headersplausibleNot provided
- API key obtainable without human interactionplausibleNot checked — no OpenAPI spec found; self-serve API-key path indeterminate from Tier 1
Evidence & history
Last probed 2026-10-07 04:17 UTC. The raw JSON is the archival record.
| Date | Score | Badge | Rubric version |
|---|---|---|---|
| 2026-10-07 04:17 UTC | 81 | Low-Interrupt (current) | rubric v2026.4 |
| 2026-10-07 04:17 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-09-07 01:58 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-09-07 01:50 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-09-07 01:46 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-08-10 00:39 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-08-10 00:23 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-08-09 23:47 UTC | 66 | Moderate-Interrupt | rubric v2026.4 |
| 2026-08-09 23:47 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-08-09 23:46 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-08-09 17:13 UTC | 81 | Low-Interrupt | rubric v2026.4 |
| 2026-08-09 05:23 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 05:23 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 05:15 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 05:15 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 05:13 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 05:12 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 03:14 UTC | 88 | Low-Interrupt | rubric v2026.3 |
| 2026-08-09 01:47 UTC | 88 | Low-Interrupt | rubric v2026.2 |
| 2026-08-09 01:45 UTC | 88 | Low-Interrupt | rubric v2026.2 |
| 2026-07-10 07:16 UTC | 100 | Low-Interrupt | rubric v2026.1 |
Alternatives in Agent-Commerce Infrastructure
Other Agent-Commerce Infrastructure tools in the same mode (integrated), ranked by Overall LLM-Friendliness (the mean of Interrupt Score and Machine-Readability) — comparable to this listing because they share its usage mode.
- 95Overallx402 (Coinbase protocol)
x402.org · Agent-Commerce InfrastructureMR92 - 88OverallFewsats
fewsats.com · Agent-Commerce InfrastructureMR78 - 78triageOverallNekuda
nekuda.ai · Agent-Commerce InfrastructureMR74 - 75OverallChatGPT Instant Checkout / OpenAI ACP
openai.com · Agent-Commerce InfrastructureMR90 - 69triageOverallCrossmint
crossmint.com · Agent-Commerce InfrastructureMR62