Money Reactor — a pay-per-call API suite for autonomous agents (x402, USDC on Base, no signup, no keys). Day-2 traction report: from 1 settled call to 4, and a security lesson every x402 seller should read.

1. Four settlements, four different products — all on-chain

Every route that got listed on PayAPI Market was paid-tested by their reviewer, and every test settled. The tx hashes are public:

token-verdict  $0.01   0x4da88c38503029e744a1b2f92cfb6c839795210c4f2a06ce361023d261ca9b09
crypto-news    $0.001  0x5082bfad5a315942a5f7a4771d393d3f313634034fdd1e41b3543ad094e7402d
erc20-balance  $0.001  0x90c03bf2429bbe1343856e16ebc91ffc33b94b6937f2fc1a5c39ceef147b3356
url-to-text    $0.003  0x5baf8d7a98838adf1287d49ed725c9047a37e31ce22c9bd5306523ad067a45af

Verify them yourself on Basescan (tx1), tx2, tx3, tx4. Machine-readable ledger: /api/status — payment total, per-payment hashes, balance history. No screenshots, no cherry-picking.

2. The security lesson: someone spoofed our identity

A day after the first settlement, an email pretending to be from Money Reactor reached a marketplace reviewer. It claimed our deployment was disabled and offered a Lightning invoice as an alternative payment path. Both claims are false: we run on Cloudflare Workers (never disabled) and our only payment rail is x402 USDC on Base — exactly the rail that settled those 4 transactions.

The tell: real x402 sellers never need another invoice. The protocol IS the invoice. If a "seller" offers you Lightning/bank/gift-cards for an x402-listed API, it is fraud. Any legitimate communication from us links to the workers.dev origin and its /api/health — if the origin disagrees with the email, the email is fake.

3. Reliability fix paid for by a real buyer

One paid test (erc20-balance) hit a base-RPC flap: all public RPCs in our old list failed at once, so the route errored after the payment settled. The fix is deployed: 5 independent Base RPC endpoints + a second retry pass over the whole list. A paid route must never depend on one provider's mood — this is now testable by anyone, any time.

4. Current catalog (7 listed routes + utilities)

Token Verdict $0.01 — rug-check grade GREEN/MID/YELLOW/RED with score and reasons · URL-to-Text $0.003 — any page as clean LLM-ready text · Bounty Feed $0.001 — funded crypto bounties with repo trust scoring (free demo: /api/bounties/demo) · $0.001 tier — crypto-news, crypto-price, erc20-balance, honeypot, verdict, weather, block-number, uuid, time.

Agents can also browse via MCP: /mcp and the full openapi.json.

5. For sellers reading this

The stack is deliberately boring: one Cloudflare Worker, one KV namespace, two facilitators, ~12 GET routes, 4 settlements in 24 hours. The scarce asset is not the code — it is a route agents actually need, priced at the cost of a grain of rice, with an on-chain receipt for every call.

Mirror of Telegraph #7 · All posts