csoai/x402-bazaar-conformance

x402 Bazaar conformance census

<!-- csoai-funnel-2026-09-27 -->

In one line: One probe per host listed in the public x402 Bazaars (Coinbase CDP, PayAI): does the payment door the index advertises answer the x402 protocol? For builders of agents that pay per call, and for x402 sellers checking their own door.

Use it

from datasets import load_dataset
ds = load_dataset("csoai/x402-bazaar-conformance", split="train")
print(ds[0])

• —Look up the signed measurements held about one x402 endpoint (paste its URL): https://councilof.ai/verify-server/?ref=hf-x402-bazaar-conformance&url=
• —Daily wash-adjusted x402 activity on Base: <https://councilof.ai/measurements/x402-activity/?ref=hf-x402-bazaar-conformance>
• —For agents: MCP endpoint POST https://councilof.ai/mcp (free read tools; call tools/list).
• —A row about you is wrong, or you want an endpoint left out? Ask for a re-check or object: <https://councilof.ai/census/?ref=hf-x402-bazaar-conformance>

Fresh data

This Hub copy is a dated snapshot. If it disagrees with the live source, the live source wins.

• —Daily signed x402 activity record: https://councilof.ai/measurements/x402-activity/
• —Daily signed index of every measurement capsule: https://councilof.ai/measurement-capsules/ (also published on the Hub as csoai/evidence-index)
• —Pay per call for a fresh, signed capsule: GET https://councilof.ai/api/ras/x402-check?url=<x402-resource-url> returns an x402 payment challenge for a fresh conformance receipt for one x402 resource, read live by the census rule.
• —Pay per call for a fresh, signed capsule: GET https://councilof.ai/api/pop/x402-bazaar returns an x402 payment challenge for the current x402 Bazaar listings slice, counted within each index.
• —Payment terms are published only in <https://councilof.ai/.well-known/x402.json>; this card quotes no price. Payment buys delivery and freshness, never a result, and verifying anything stays free.

Cite

@misc{csoai_x402_bazaar_conformance,
  title        = {x402 Bazaar conformance census},
  author       = {{CSOAI Ltd (Council of AI)}},
  year         = {2026},
  publisher    = {Hugging Face},
  url          = {https://huggingface.co/datasets/csoai/x402-bazaar-conformance},
  note         = {Zenodo DOI 10.5281/zenodo.21991104: UNAVAILABLE since 29 Sep 2026 (Zenodo blocked the CSOAI account; appeal pending; status https://councilof.ai/interop/zenodo-status.json). Cite the served methodology: https://councilof.ai/signed/HOW-TO-VERIFY.md. Measurement, not certification.}
}

Measurement, not certification. This card adds no score or ranking of any company. A row marked UNMEASURED has not been measured; it is not a pass.

<!-- /csoai-funnel-2026-09-27 -->

For buyers: Live x402 buyer check covers the free RLUSD preview, current signed 402 offer and delivery checks. Re-read the live challenge and catalogue before acting; the September census below is a dated measurement, not a current price or settlement guarantee.

3,520 distinct hosts, every one listed in a public x402 Bazaar (Coinbase CDP or PayAI), probed 2026-09-05.

Being listed is not the same as being reachable

Nearly a third of the hosts in these indexes do not answer. Under one in nine presents a door an agent can actually transact against.

Method

One GET per DISTINCT HOST listed in either public x402 Bazaar (Coinbase CDP, PayAI), using the first resource that index advertises for that host. Conformant = HTTP 402 AND a PAYMENT-REQUIRED response header AND x402Version 2 in the body AND an extensions.bazaar block. Identifiable UA, 12s timeout, 24 concurrent. Nothing signed, nothing paid, no door settled.

Verification. Sampled 12 hosts from each of status=None, 404 and 405 and re-probed with a browser User-Agent and a 30s timeout: all 36 reproduced their original outcome exactly. The result is not an artefact of the probe's UA or timeout.

Self-check. councilof.ai appears in this census and is conformant (402, header, v2, extension). It is measured by the same probe as everyone else, not exempted.

What this is not

a seller's honesty, product quality, price, or whether a door would deliver after payment. It measures ONE thing: whether the door an index advertises answers the protocol an index reads.

Measurement, not certification. Council of AI (CSOAI Ltd, UK 16939677).

Offer column (2026-09-05)

snapshots/conformance-with-offers-2026-09-05.jsonl adds offer_sku and offer_basis to every row. Only the 394 conformant hosts are mapped — a host whose door does not answer the protocol has no buyer to offer anything to.

UNMAPPED is a real answer. 118 listings carry no word that gives a basis to name a SKU. They are left empty rather than given a default — absent is not zero.

Method. Keyword rules over the host's own Bazaar listing text, first match wins, rules listed in the dataset. A host with no matching word is UNMAPPED, never assigned a default. The rules are in offers-summary.json, so you can disagree with a specific rule rather than with the table.

What this is not. a claim that any of these hosts wants, needs, or has agreed to anything. It is our read of their own public listing text, and it says which of our SKUs their buyers COULD use.

<!-- csoai-hubcard-v2 -->

The live board is the authority

  

GET https://councilof.ai/api/gspc — quote totals.public_count. This Hub card is a printer of that GET, never a second engine. If the fetch fails the honest answer is UNCHECKABLE — never a fabricated 0.000. Status words: LOADING / UNREACHABLE / UNMEASURED / UNCHECKABLE.

Lid: 23 axes measured · 14 model comparisons: 0 separated · 7 TIE · 7 UNTESTED · 9 fact runs · TIE is TIE · not a certificate. A public leader score is a published field, not proof of a separated leader; read each row's status and separation.

This repository: NOT A BOARD MEASUREMENT — this repository is a corpus, mirror or door published by CSOAI. It carries no axis score. The measured slots live on the board GET below.

What is in this repository

manifest.jsonl is derived from this repository's own file tree at 2026-09-27T05:00:40Z; it lists every file with its size, its blob hash and a direct URL, so an agent can enumerate the repo without cloning it.

Citation

@misc{csoai_gspc_x402_bazaar_conformance,
  title        = {x402-bazaar-conformance — Council of AI / GSPC},
  author       = {{CSOAI Ltd}},
  year         = {2026},
  doi          = {10.5281/zenodo.21991104},
  note         = {DOI record unavailable since 29 Sep 2026 (Zenodo account blocked; appeal pending)},
  howpublished = {Hugging Face Hub, \url{https://huggingface.co/datasets/csoai/x402-bazaar-conformance}},
  note         = {Live board: https://councilof.ai/api/gspc. Measurement, not certification.}
}

Measurement, not certification. Issued by CSOAI Ltd (England & Wales, Companies House 16939677), 3rd Floor, 86–90 Paul Street, London EC2A 4NE. Card refreshed 2026-09-27T05:00:40Z. <!-- /csoai-hubcard-v2 -->

<!-- csoai-capability-densify-2026-09-14-tui7 -->

Capability + living GET (TUI7 distribution 2026-09-14)

Live board: GET https://councilof.ai/api/gspc → quote totals.public_count / totals.lid at read time (no frozen count)
Hub cards: GET https://councilof.ai/api/hub-cards → quote counts.cells / counts.measured / counts.unmeasured LIVE (no typed Hub triple)
Hub bank: https://huggingface.co/datasets/csoai/gspc-hub-cards
Free verify: https://councilof.ai/gspc-verify
Discovery: GET https://councilof.ai/.well-known/x402.json (live · Base · USDC)
OX discovery resources: councilof 0/60 honest — do not invent rows
Measurement, never certification.

 

Council of AI — GSPC + Hub printer

• —Living board: https://councilof.ai/api/gspc — quote totals.public_count / totals.lid (never invent MEASURED)
• —Hub cards (read live): https://councilof.ai/api/hub-cards
• —Hub dataset bank: https://huggingface.co/datasets/csoai/gspc-hub-cards
• —Verify free: https://councilof.ai/gspc-verify
• —x402 discovery: https://councilof.ai/.well-known/x402.json
• —Catalog: https://councilof.ai/api/x402
• —Free door (amount 0): https://councilof.ai/api/free-door
• —Jail goldbank: https://huggingface.co/datasets/csoai/gspc-jail-goldbank
• —Human: free + x402 PAYG · Coming—Paddle not live · never Stripe
• —Agents: payTo is merchant receive — never the signer
• —Self-settle proves the rail; stranger revenue is separate (do not invent buyers)
• —Measurement, not certification. Never sell a rank. Never certify.

Any Hub x402.json in a CSOAI printer is a byte-mirror of the living well-known GET — not a second authority. <!-- /csoai-capability-densify-2026-09-14-tui7 -->

<!-- csoai-openx402-free-cite-2026-09-14 -->

OpenX402 + free discovery (cite only · never invent OX resource rows)

OpenX402 server: Council of AI · https://councilof.ai · payTo 0x212686404a7d1e1fd88f35ed6200c3af7a78ae31
Servers API: GET https://openx402.ai/api/servers (LIVE row · registered 2026-09-14 · Base tx 0x0eb1ead995e235a2…)
Whitelist: GET https://facilitator.openx402.ai/whitelist/0x212686404A7D1E1fD88F35eD6200c3aF7A78ae31 → whitelisted true
OX discovery resources: GET https://facilitator.openx402.ai/discovery/resources → councilof still 0/60 (no free advertise API; settle-through required — do not invent rows)
Estate well-known: GET https://councilof.ai/.well-known/x402.json → 10 resources · mode live
OpenAPI: https://councilof.ai/openapi.json
Free-door: https://councilof.ai/api/free-door (402 amount 0 · bazaar)
Free crawl: https://councilof.ai/api/feeds/provider-diff (200 JSON · not a paid OX resource)
Catalog: https://councilof.ai/api/x402
Measurement, never certification. Self≠revenue. Never clone PayAI.

Owner: N-Sites spray onto HF leftovers / registry printers. OX discovery stays 0 until settle-through — never invent. Stamp 2026-09-14T03:29Z.

<!-- csoai-smithery-e1e2-honest-2026-09-14 -->

Smithery / MCP door (measured 2026-09-14 — not a certification)

• —Primary free MCP door: https://councilof.ai/mcp — GET 200; tools/list = 12 tools (matches registry tools[] for csoai/gspc-mcp).
• —Smithery primary listing: https://smithery.ai/server/csoai/gspc-mcp · registry https://registry.smithery.ai/servers/csoai/gspc-mcp — deploymentUrl=https://gspc-mcp--csoai.run.tools → GET/POST 401 `invalid_token` (Smithery auth required). Prefer Connect https://councilof.ai/mcp; registry deploymentUrl is gateway-by-design (run.tools 401 without bearer) — do not claim registry points at the council door.
• —Stale duplicate: https://smithery.ai/server/csoai/gspc · registry https://registry.smithery.ai/servers/csoai/gspc — tools[] includes phantoms measure|verify|jail-probe|enter-arena (not on live /mcp); deploymentUrl=https://gspc--csoai.run.tools also 401. Prefer archive/unlist; keep only csoai/gspc-mcp.
• —Registry write: PATCH/DELETE need Authorization — no free write without Nick Smithery login (HARD BLOCKER if token absent).
• —Measurement only. Never invent that Smithery was fixed. Never certify. <!-- /csoai-smithery-e1e2-honest-2026-09-14 -->

<!-- csoai-cite-v1:start -->

Objections, contact and corrections

To object to a row, ask for a re-check, request a correction or ask for a record to be withdrawn, email nicholas@csoai.org or use the appeals and dispute route at https://councilof.ai/dispute/. Corrections are listed in the corrections ledger at https://councilof.ai/api/corrections, with what changed and when. CSOAI Ltd (company no. 16939677, England and Wales) is the accountable publisher.

How to cite

CSOAI Ltd (Council of AI). x402 Bazaar conformance census. 2026. Hugging Face dataset csoai/x402-bazaar-conformance. https://huggingface.co/datasets/csoai/x402-bazaar-conformance

@misc{csoai_x402_bazaar_conformance,
  title        = {x402 Bazaar conformance census},
  author       = {{CSOAI Ltd}},
  year         = {2026},
  howpublished = {Hugging Face dataset, https://huggingface.co/datasets/csoai/x402-bazaar-conformance},
  note         = {Corrections: https://councilof.ai/api/corrections}
}

Licence: CC-BY-4.0. Attribute Council of AI, CSOAI Ltd (16939677), https://councilof.ai.

Corrections and verification

• —Corrections ledger (signed): https://councilof.ai/api/corrections. Corrections to CSOAI's published records are logged there with what changed and when.
• —Verify a signed record yourself, free and without an account: https://councilof.ai/gspc-verify/ (step by step: https://councilof.ai/signed/HOW-TO-VERIFY.md).
• —Conformance kit for signed-receipts/v1, with test vectors for implementers: https://councilof.ai/spec/signed-receipts/v1/conformance/ <!-- csoai-cite-v1:end -->

<!-- csoai-archive-by-axis:start 2026-10-06 -->

Signed archive by axis (measurement, never certification)

Source: https://councilof.ai/signed/card_index.json (schema csoai.gspc-card-index/0.1, packaged 2026-08-28T15:39:25Z). Existing signed units only; measured is not scored; supply-led, never a grade.

Totals: 335 signed cards · 16 card_index axes · 335/335 cards HTTP 200 · 64 distinct public model names.

Live lids (re-GET 2026-10-06T01:13Z):

• —GET https://councilof.ai/signed/card_index.json → n_cards=335
• —GET https://councilof.ai/api/gspc → 23 axes · 23 measured
• —GET https://councilof.ai/api/hub-cards → 384/384/0 (cells/measured/unmeasured)

Connect: Primary MCP: https://councilof.ai/mcp

Verify (free): https://councilof.ai/gspc-verify/ · method https://councilof.ai/signed/HOW-TO-VERIFY.md

Zenodo DOI 10.5281/zenodo.21991104: UNAVAILABLE since 29 Sep 2026 (Zenodo blocked the CSOAI account; appeal pending; status https://councilof.ai/interop/zenodo-status.json). Cite the served methodology: https://councilof.ai/signed/HOW-TO-VERIFY.md

Caveat: do not fuse card_index axes (16) with board axes (23) or Hub cells (384); they are three different counts. Per-card values are point-in-time; never compare a card's accuracy to the live board as one number. RunPod pod outputs are UNSIGNED and are not counted or cited. <!-- csoai-archive-by-axis:end 2026-10-06 -->

<!-- csoai-smithery-connect-honest-2026-10-05 -->

Smithery / MCP Connect (measured 2026-10-05 — not a certification)

• —Primary Connect (free tools): https://councilof.ai/mcp — initialize 200; call tools/list. Prefer this URL in every agent config.
• —Smithery discovery: https://smithery.ai/servers/csoai/gspc-mcp — external release lists upstream https://councilof.ai/mcp. Registry deploymentUrl remains the Smithery gateway (https://gspc-mcp--csoai.run.tools); POST without bearer → 401. That is gateway-by-design — do not claim the registry points at the council door.
• —Stale duplicate `csoai/gspc`: UI /servers/csoai/gspc 404 after unlist attempt; registry row may still exist with run.tools 401. Prefer only csoai/gspc-mcp for discovery.
• —Measurement only. Never invent that registry deploymentUrl equals councilof.ai/mcp. Never certify. <!-- /csoai-smithery-connect-honest-2026-10-05 -->