# BitBooth — Multi-Chain x402 Payment Gateway

> BitBooth is a production x402 payment gateway that lets AI agents pay for APIs per request, with no API keys, no signup, and no human in the loop. It settles on four rails in production: Base, XRPL, Stellar, and the XRPL EVM Sidechain. Built and operated by Heinrichs Software Solutions Company, an SBA-certified Service-Disabled Veteran-Owned Small Business.

## What it is

BitBooth implements the [x402 V2 protocol](https://x402.gitbook.io) (Coinbase Foundation + Linux Foundation). Any HTTP API can be wrapped: when an agent calls a paid endpoint, the server returns `HTTP 402 Payment Required` with a challenge listing every payment option it will accept. The agent pays on the rail it already holds, retries with the payment proof, and receives the data. One round trip.

The gateway is pure ESM JavaScript on AWS Lambda, CDK, and DynamoDB. Automated tests cover settlement, replay protection, nonce handling, and idempotency; dated results are available for the release under technical evaluation.

## Try it without an account

```
POST https://app.heinrichstech.com/v1/cdp/echo
Content-Type: text/plain

hello
```

The unpaid call returns `HTTP 402` with the challenge in the **response body**. Note that the challenge is also mirrored in a `payment-required` header, but that header is not exposed to browser JavaScript via CORS, so read the body.

```bash
curl -s -X POST https://app.heinrichstech.com/v1/cdp/echo \
  -H 'content-type: text/plain' \
  -d 'hello' | jq .
```

## Settlement rails

Four rails, eight payment options, all advertised in a single `accepts[]` array on one 402 response.

| Network | CAIP-2 | Assets | Scheme |
|---|---|---|---|
| Base Mainnet | `eip155:8453` | USDC | `exact` (EIP-3009) |
| Base Mainnet | `eip155:8453` | LINK | `onchain` (transfer then reference) |
| XRPL Mainnet | `xrpl:0` | XRP, RLUSD, USDC (IOU) | `exact` |
| Stellar Mainnet | `stellar:pubnet` | XLM, USDC | `exact` |
| XRPL EVM Sidechain | `eip155:1440000` | XRP (native gas token) | `onchain` (native transfer then reference) |

The XRPL EVM Sidechain chain ID is **1440000**. Verify any of this against the live endpoint rather than trusting this file.

## Verified settlements

- **Base mainnet:** [`0x4fd3f93c…57c0`](https://basescan.org/tx/0x4fd3f93c2b19bd6b7152a0b4e0accb98d8b50284e8693427631b0c26d30157c0) — block 45,944,220, EIP-3009 `transferWithAuthorization` of 0.001000 USDC to the gateway payTo address.
- **XRPL mainnet:** [`493F6F1A…45C0`](https://xrpscan.com/tx/493F6F1ADB9D258898A028F1D0A34684F5DD8B8C9F99BC6FB3432EA1F8AA45C0) — ledger 103,630,264, 0.005 XRP, ~1.3s round trip.

## MCP integration

```bash
npm install @bitbooth/mcp-fetch
```

In Claude Desktop / Claude Code / Cursor / any MCP host:

```json
{
  "mcpServers": {
    "bitbooth-fetch": {
      "command": "npx",
      "args": ["-y", "@bitbooth/mcp-fetch"],
      "env": { "BITBOOTH_AGENT_KEY": "0x<wallet-key>" }
    }
  }
}
```

The agent gets a `fetch(url, mode)` tool that pays via x402 automatically.

## Protocol guarantees

- **Replay protection:** nonce-based on EVM, sequence tracking on XRPL, per-payment, with DynamoDB TTL
- **Idempotency:** `X-Idempotency-Key` header, same request means same outcome
- **Fraud prevention:** pre-payment velocity checks, max-amount ceilings, nonce-reuse tracking
- **Rate limits:** per-IP (anonymous) or per-tenant (API key)

## Who builds it

Heinrichs Software Solutions Company is a Navy-veteran-owned engineering shop and an SBA-certified SDVOSB (UEI SXG3SA9JMM47, CAGE 1ZSB5). Alongside the gateway we build serverless AWS systems — Lambda, CDK, DynamoDB, API Gateway — for teams that need them shipped.

## First purchasable engineering workstream

The HSSC Integration Reliability Sprint takes one funded Node.js, TypeScript, or AWS API, webhook, background job, or workflow item from a reproducible problem to review-ready code, targeted tests, before-and-after evidence, and handoff notes.

- First Fix: $1,250 prepaid, one existing integration defect, up to eight engineering hours, three to five business days.
- Delivery Sprint: $3,500 fixed fee, one integration family, up to thirty engineering hours, seven to ten business days.
- Reserved Month: $7,500, one repository, up to sixty engineering hours, and up to six accepted backlog items over four weeks.

These are founding-client rates for HSSC's first three paid customers.

HSSC does not claim federal past performance. Portfolio evidence is labeled as founder-developed, company-operated, public documentation, runnable demonstration, public source, or private implementation material.

## Links

- **[Company homepage](https://heinrichstech.com/):** Heinrichs Software Solutions Company
- **[Integration Reliability Sprint](https://heinrichstech.com/integration-reliability-sprint.html):** fixed scope, pricing, exclusions, and acceptance evidence
- **[BitBooth landing page](https://heinrichstech.com/bitbooth.html):** live multi-chain demo
- **[GitHub](https://github.com/Drock91/bitbooth-docs):** MIT-licensed API documentation, OpenAPI specification, and runnable examples. The production gateway implementation remains private; source review may be arranged for qualified evaluations.
- **[npm @bitbooth/mcp-fetch](https://www.npmjs.com/package/@bitbooth/mcp-fetch):** MCP server
- **[x402 V2 spec](https://x402.gitbook.io):** Coinbase + Linux Foundation protocol
- **[.well-known/agent.json](https://heinrichstech.com/.well-known/agent.json):** machine-readable manifest
- **Contact:** contact@heinrichstech.com