Agentic Context & MCP Server

Ashlar Blue natively supports the Model Context Protocol (MCP) and standardized LLM ingestion formats, allowing autonomous AI agents to query DNS discovery, verify hardware attestation quotes, and execute zero-gas settlements without DOM scraping.

STANDARD AGENT INDEX
Open ↗
https://ashlar.blue/llms.txt
MODEL CONTEXT PROTOCOL (MCP) MANIFEST
Manifest ↗
https://ashlar.blue/.well-known/mcp.json
OFFICIAL TRUST SDK (NPM)
npm i @ashlar-blue/x402-trust
IETF PAYMENT MANIFEST
Raw ↗
https://ashlar.blue/.well-known/x402
Declared MCP Agent Tools (JSON-RPC 2.0):
• discover_x402_endpoint
Queries IANA _x402 apex TXT record via DNSSEC.
• verify_tdx_quote
Validates Intel TDX hardware MRTD hashes against immutable blockchain data availability.
• canonicalize_jcs_payload
RFC 8785 deterministic JSON formatting engine.
• submit_gasless_settlement
Submits signed EIP-3009 payload for $0.00 gas settlement.
• verify_agent_identity
Validates hardware-attested agent credentials and scope (x402 Identity WG).
• generate_tax_receipt
Emits deterministic JCS tax lines & SCITT audit receipts (x402 Tax WG).
IETF Standards Track · Section 4 ABNF Grammar

Decentralized Discovery & Verification Architecture

Standardizing autonomous machine commerce through DNS-based discovery (_x402), RFC 8785 canonical serialization, and multi-rail cryptographic verification.

View IETF Draft ↗ SCITT Attestation Draft ↗
SYSTEM ARCHITECTURE & OPERATIONAL MECHANICS

What You Are Looking At: Open Protocol Standards & IETF Specifications

The Discovery & Settlement Friction in Autonomous AI: In the emerging machine-to-machine economy, autonomous AI agents must discover, evaluate, and purchase API compute, private datasets, and real-time oracle feeds in sub-second timeframes. Historically, web services relied on centralized API catalogs, credit card billing forms, and OAuth credential brokers. These legacy mechanisms create human-in-the-loop KYC barriers, custodial counterparty risks, and single points of network failure.

How Global DNS-Based Discovery Works: Ashlar Blue resolves this barrier by routing machine commerce directly through the internet's naming infrastructure. Under the draft-x402-dns-discovery standard, any domain on Earth registers the permanent _x402 DNS label. When an agent visits a resource, it performs a single DNS query to retrieve machine-readable payment terms, facilitator URLs, and supported settlement networks (Flare Coston2 / XRPL) with sub-20ms latency and DNSSEC cryptographic origin authenticity.

Deterministic Serialization & SCITT Accountability: To prevent signature mismatches and payload tampering across disparate programming runtimes (Python, Rust, Go, TypeScript), all payment manifests and settlement receipts must follow RFC 8785 JSON Canonicalization Scheme (JCS) and IETF SCITT (Supply Chain Integrity, Transparency, and Trust) audit profiles.

⚡ How to Test These Standards
  1. Visit the x402 DNS Radar (discovery.html) to lint any live domain's _x402 record.
  2. Open your local terminal and run dig +short TXT _x402.ashlar.blue to observe the raw DNS TXT record.
  3. Inspect the ABNF Grammar Table below to understand each semicolon-delimited parameter.
💡 Standards Implementation Tips
  • Install Official SDK: Run npm i @ashlar-blue/x402-trust for zero-dependency canonical serialization.
  • Sign with DNSSEC: Always enable DNSSEC on your authoritative zone to prevent DNS spoofing of payment terms.
  • Cache DNS Lookups: Cache positive DNS responses for up to 300s (TTL) to achieve zero latency overhead on subsequent requests.
Architecture Pattern // RFC 8461 Alignment

Single-Roundtrip DNSSEC Discovery Flow

Ashlar Blue follows the proven MTA-STS (RFC 8461) architectural model. Rather than forcing clients through proprietary registration gateways, the resource server publishes an authoritative DNS TXT record under the IANA registered _x402 label at its domain.

; Query apex domain x402 discovery TXT record $ dig +short TXT _x402.agent.example.com ; Returns deterministic key-value grammar "v=x402-1; wk=https://agent.example.com/.well-known/x402; k=facilitator; net=eip155:14; scheme=exact"
Formal Grammar // Section 4

ABNF Parameter Validation

Parsers validate the semi-colon delimited parameter tokens according to deterministic RFC 5234 ABNF rules:

Parameter Type Requirement Description
v String Mandatory Protocol version (must equal x402-1).
wk HTTPS URI Mandatory Well-Known manifest endpoint for payment terms.
k Token Mandatory Node role: facilitator or resource-server.
net CAIP-2 Optional Primary settlement network (e.g. eip155:14, xrpl:mainnet).
scheme Token Optional Payment scheme identifier (e.g. exact, escrow).
Cryptographic Determinism // RFC 8785

JSON Canonicalization Scheme (JCS)

To eliminate payload malleability and signing hash mismatches across heterogeneous AI agent frameworks (Python, Rust, Go, Node.js), all x402 payment manifests and authorization envelopes must be normalized using RFC 8785 JCS.

// RFC 8785 Canonical JSON Output (Sorted UTF-16 Keys, Normalized Floats) {"extensions":{"attested-identity":{"required":true}},"facilitator":"https://ashlar.blue/api","version":"x402-1"}
Financial Standards Track // ISDA CDM & SCITT

ISDA Common Domain Model (CDM) Settlement Binding

Ashlar Blue establishes the canonical open standard mapping ISDA CDM financial lifecycle events (Variation Margin, Interest Rate Swaps, Bond Coupons, Equity DvP) directly into deterministic SCITT Signed Accounting Statements and HTTP 402 Payment Required challenges (draft-corrente-scitt-isda-cdm-settlement-00).

// ISDA CDM -> SCITT & x402-isda/v1 Payment Challenge import { parseIsdaCdmEvent, buildIsdaX402Challenge, buildIsdaScittStatement, verifyIsdaSettlement } from '@ashlar-blue/x402-trust'; const event = parseIsdaCdmEvent(rawIsdaPayload); const challenge = buildIsdaX402Challenge(event, { facilityUrl: 'https://api.ashlar.blue/settle/isda', assetNetwork: 'xrpl:mainnet' }); const statement = buildIsdaScittStatement(event); const verdict = verifyIsdaSettlement(statement, onchainReceipt);
Integration Quickstart

Install Trust SDK

npm i @ashlar-blue/x402-trust