v2.2.81-brand-asset-integration / buyer-agent-spend-policy

Spend rules before any buyer-agent paid retry.

Publish buyer-agent spend rules for ApexScout's owned x402 routes so AgentCore Payments-style buyers can inspect limits before any paid retry.

Boundary: ApexScout publishes seller-side payment policy. Buyer wallets, budgets, approvals, and paid retries stay in the buyer-controlled platform.

Start here: /agentcore-buyer-start turns this policy into a single no-spend buyer path from policy to OpenAPI import to unpaid 402 preflight.

Coinbase source ยท AWS source

Default caps

Session cap

$5.01

One $0.01 fit check plus one explicitly approved $5.00 audit.

First paid route

$0.01

Start with /api/opportunity-check.

Audit route

$5.00

Requires explicit higher-spend authorization.

No automatic spending

on

Stop after one paid JSON response by default.

Allowed paid routes

$0.01 cap 0.01

/api/opportunity-check

first paid fit check. Use first when a buyer agent needs a low-cost trust and opportunity check before committing to a deeper audit.

Unpaid first: HTTP 402. Paid retry, only if authorized: HTTP 200.

$5.00 cap 5.00

/api/agent-revenue-audit

builder monetization audit. Use only when the buyer has explicitly approved a higher-spend builder monetization audit.

Unpaid first: HTTP 402. Paid retry, only if authorized: HTTP 200.

Free preflight

Blocked actions

JSON

{
  "name": "ApexScout AgentCore Payments Spend Policy",
  "version": "v2.2.81-brand-asset-integration",
  "mode": "buyer-agent-spend-policy",
  "liveMode": "zero-contact-inbound-only",
  "purpose": "Publish buyer-agent spend rules for ApexScout's owned x402 routes so AgentCore Payments-style buyers can inspect limits before any paid retry.",
  "announcementContext": {
    "source": "Amazon Bedrock AgentCore Payments and Coinbase x402 public launch signal",
    "observedDate": "2026-05-11",
    "sourceUrls": {
      "coinbase": "https://www.coinbase.com/blog/introducing-amazon-bedrock-agentcore-payments-powered-by-x402-and-coinbase",
      "aws": "https://aws.amazon.com/blogs/machine-learning/agents-that-transact-introducing-amazon-bedrock-agentcore-payments-built-with-coinbase-and-stripe/"
    },
    "relevance": "Managed buyer agents need explicit payment policy before they retry a 402 challenge with real funds.",
    "apexScoutInterpretation": "ApexScout is publishing seller-side spend guidance and import metadata, not acting as a buyer wallet, budget controller, AWS integration, or endorsement claimant."
  },
  "policyScope": {
    "appliesTo": "ApexScout owned x402 protected routes only",
    "sellerSidePolicy": true,
    "buyerSideWalletControlRequiredElsewhere": true,
    "buyerBudgetControlRequiredElsewhere": true,
    "awsWalletIntegrationAdded": false,
    "automaticBuyerSpendingAdded": false,
    "paidUpstreamCallsAdded": false,
    "officialAwsCoinbaseStripeEndorsementClaimed": false
  },
  "defaultSpendPolicy": {
    "recommendedSessionCapUsd": "5.01",
    "recommendedFirstPaidCapUsd": "0.01",
    "recommendedBuilderAuditCapUsd": "5.00",
    "requiresBuyerAuthorization": true,
    "stopAfterOnePaidResponseByDefault": true,
    "noAutomaticRetryLoop": true,
    "noEscalationWithoutExplicitApproval": true,
    "noSubscription": true,
    "payOnceGetJsonOnce": true
  },
  "allowedPaidRoutes": [
    {
      "path": "/api/opportunity-check",
      "method": "POST",
      "price": "$0.01",
      "maxAmountAtomicUnits": "10000",
      "network": "eip155:8453",
      "role": "first paid fit check",
      "expectedUnpaidStatus": 402,
      "expectedPaidStatus": 200,
      "spendCapUsd": "0.01",
      "whenToUse": "Use first when a buyer agent needs a low-cost trust and opportunity check before committing to a deeper audit.",
      "approvalPolicy": "Buyer-controlled wallet must authorize exactly one paid retry after inspecting the unpaid 402 JSON."
    },
    {
      "path": "/api/agent-revenue-audit",
      "method": "POST",
      "price": "$5.00",
      "maxAmountAtomicUnits": "5000000",
      "network": "eip155:8453",
      "role": "builder monetization audit",
      "expectedUnpaidStatus": 402,
      "expectedPaidStatus": 200,
      "spendCapUsd": "5.00",
      "whenToUse": "Use only when the buyer has explicitly approved a higher-spend builder monetization audit.",
      "approvalPolicy": "Requires explicit buyer-side authorization beyond the first-paid-call cap; no automatic escalation from the $0.01 route."
    }
  ],
  "freePreflightRoutes": [
    "/docs.json",
    "/mcp-tool-pack",
    "/api/mcp-tool-pack",
    "/.well-known/mcp.json",
    "/agentcore-readiness",
    "/api/agentcore-readiness",
    "/agentcore-gateway",
    "/api/agentcore-gateway",
    "/api/agentcore-openapi.json",
    "/agentcore-buyer-start",
    "/api/agentcore-buyer-start",
    "/agent-payment-alpha",
    "/api/agent-payment-alpha",
    "/agent-safety-posture",
    "/x402-proof",
    "/buyer-agent-challenge",
    "/api/cash-register"
  ],
  "paymentMetadataPrivacy": {
    "publicMetrics": "aggregate-only",
    "buyerPromptsPublic": false,
    "walletHistoriesPublic": false,
    "rawRequestBodiesPublic": false,
    "paidResponseBodiesPublic": false,
    "rawFeedbackPublic": false,
    "routeMetadataPublic": true,
    "sellerWalletPublicInPolicy": false
  },
  "x402ChallengePolicy": {
    "protocol": "x402",
    "rail": "Base mainnet",
    "network": "eip155:8453",
    "facilitator": "https://api.cdp.coinbase.com/platform/v2/x402",
    "expectedUnpaidStatus": 402,
    "paidRetryAllowedOnlyWithBuyerControlledX402": true,
    "paidRetryLimit": 1,
    "unpaidProbeAllowed": true,
    "unpaidProbeCountsAsRevenue": false
  },
  "blockedActions": [
    "No scraping",
    "No third-party discovery",
    "No outreach automation",
    "No manual messages, posts, DMs, or emails",
    "No paid upstream calls",
    "No automatic buyer spending",
    "No automatic paid retry loop",
    "No automatic escalation from $0.01 to $5.00",
    "No buyer wallet custody",
    "No AWS wallet or budget management",
    "No settlement rail change",
    "No seller wallet change",
    "No fake traction",
    "No buyer-level public data",
    "No official AWS, Coinbase, or Stripe endorsement claim"
  ],
  "agentReadableSurfaces": {
    "page": "https://apexscout.ai/agentcore-payments-policy",
    "api": "https://apexscout.ai/api/agentcore-payments-policy",
    "wellKnown": "https://apexscout.ai/.well-known/apexscout-spend-policy.json",
    "agentCoreReadiness": "https://apexscout.ai/agentcore-readiness",
    "agentCoreGateway": "https://apexscout.ai/agentcore-gateway",
    "agentCoreOpenApi": "https://apexscout.ai/api/agentcore-openapi.json",
    "agentCoreBuyerStart": "https://apexscout.ai/agentcore-buyer-start",
    "agentCoreBuyerStartApi": "https://apexscout.ai/api/agentcore-buyer-start",
    "mcpToolPack": "https://apexscout.ai/mcp-tool-pack",
    "agentPaymentAlpha": "https://apexscout.ai/agent-payment-alpha",
    "cashRegister": "https://apexscout.ai/api/cash-register"
  },
  "checks": {
    "baseMainnetX402Only": true,
    "buyerWalletManagedByApexScout": false,
    "awsWalletIntegrationAdded": false,
    "automaticBuyerSpendingAdded": false,
    "automaticPaidRetryAdded": false,
    "automaticRouteEscalationAdded": false,
    "paidUpstreamCalls": false,
    "buyerLevelDataPublic": false,
    "sellerWalletChanged": false,
    "settlementRailChanged": false,
    "officialAwsCoinbaseStripeEndorsementClaimed": false,
    "cashRegisterAggregateOnly": true,
    "unpaid402StillExpectedBeforePayment": true
  },
  "nextAction": "Load /agentcore-buyer-start and this spend policy before any paid retry, use free preflight routes first, and require buyer-side authorization for exactly one paid x402 retry."
}