accepts, selects the best network and token based on available balance, signs an ERC-3009 authorization inside the TEE, and returns the complete signed object ready for submission.
How Signing Works
The private key never leaves the secure enclave. The wallet:- Receives the
paymentRequirementsobject (theacceptsarray from the merchant) - Selects a network/token pair — based on balance availability and chain preference
- Constructs an ERC-3009
transferWithAuthorizationand signs it inside the TEE - Returns the full x402 payment object for the agent to submit
Using x402 via MCP
If your agent is connected to the Agent Wallet MCP server, x402 authorization is exposed as a tool. PasspaymentRequirements from the merchant response and receive the signed object back — no additional formatting required.
See Agent Wallet MCP Server to get connected, and x402 Payments in Agent Wallet for a full breakdown of the buyer-side flow.
Agent Wallet MCP Server
Connect your agent to the wallet via MCP
x402 Payments Concept
Deep dive into x402 from the buyer perspective