deliberately brokenx402

Multiple payment options

Two accepts entries on Base Sepolia, an inflated decoy before the real one.

Your client should Pay the cheaper option, not blindly the first.

Protocol: x402
Network: Base Sepolia
Price: 0.0001 USDC
Scheme: exact
Facilitator: x402.org
Behavior: Multiple payment options

Several payment options, an expensive decoy first and the cheap valid one after it. A correct client picks an affordable option, not blindly the first.

Customize this test

Your endpointMultiple payment options

/api/x402?quirk=multiple-accepts

Try it

curl -i "https://test402.com/api/x402?quirk=multiple-accepts"

Returns 402 offering an inflated option before the real one -- two accepts entries for x402, two Payment challenges in one WWW-Authenticate for MPP. Both reference clients have shipped this bug.

Response it will return (HTTP 402)

PAYMENT-REQUIRED: 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

{
  "x402Version": 2,
  "error": "PAYMENT-SIGNATURE header is required",
  "resource": {
    "url": "https://test402.com/api/x402?quirk=multiple-accepts",
    "description": "test402 challenge",
    "mimeType": "application/json"
  },
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:84532",
      "amount": "100000",
      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
      "payTo": "0x0000000000000000000000000000000000000402",
      "maxTimeoutSeconds": 300,
      "extra": {
        "name": "USDC",
        "version": "2",
        "assetTransferMethod": "eip3009"
      }
    },
    {
      "scheme": "exact",
      "network": "eip155:84532",
      "amount": "100",
      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
      "payTo": "0x0000000000000000000000000000000000000402",
      "maxTimeoutSeconds": 300,
      "extra": {
        "name": "USDC",
        "version": "2",
        "assetTransferMethod": "eip3009"
      }
    }
  ],
  "extensions": {
    "https://test402.com/extensions/facilitator": {
      "id": "x402org",
      "url": "https://x402.org/facilitator"
    }
  },
  "note": "test402 scenario. quirk=multiple-accepts"
}