Skip to main content
Software already discovers and acts on its own. What it does not do is open an account, enter a card and sign up for a plan. Infi Rail charges per request to whoever pays in stablecoin, using the x402 protocol — the 402 Payment Required that had been sitting in HTTP since 1997 without being used for anything. The money lands in your wallet. The signed authorization names the recipient, so there is no field in which Infi could put itself.

How one charge happens

  1. An agent calls your route without paying. Your server answers 402 with the price, the network and the address.
  2. The agent signs an authorization and repeats the call with an X-PAYMENT header.
  3. Your server asks Infi whether it may serve. We verify the signature at the facilitator, record the authorization, check exposure and answer.
  4. You serve the response. On-chain settlement happens afterwards, in the background.
Step 4 is what matters for latency: the response does not wait for the chain. What the agent waits for is verification, not block confirmation.

Setting it up

In the dashboard, under Rail. Three things:
  • network — Base or Solana (mainnet in production, testnet in sandbox);
  • your wallet — where the money lands;
  • sign a message — we issue a nonce and you sign it with that wallet.
The third step is what prevents the most expensive mistake here. A wrong address on a chain pays a stranger, permanently, and there is no chargeback. The signature proves the key is yours before any agent pays. If you use MetaMask, Phantom or another injected wallet, there is a button. If the key lives on hardware, in a CLI or behind a multisig, the message is shown for you to sign elsewhere and paste the signature back. The asset and its decimals are not fields: they come from the network’s facilitator. A wrong exponent misprices every charge by a factor of 10^n, and that is not a decision we let you type.

Risk

Two things you control, both worth the reading time: Max exposure per agent. The ceiling on what one agent may owe before it is refused. It is the most a bad actor costs you. Grace. What your server may release on its own while Infi is unreachable. It has two numbers: per agent, and total per process. The total is the one that actually binds — during grace the payer address comes from an unverified payload, so a hostile client forges a fresh address per request and mints a fresh per-agent bucket with it. Only the per-process ceiling limits anything.

Where charges show up

Under Payments, with ?view=all: card, pix and agent in the same list, with the network and the transaction hash linking to the explorer. Only what actually settled is listed. A call paid from an agent’s prepaid balance does not appear as a new transaction — its money arrived when the package was bought, and counting it again would count it twice.

Limits today

  • Networks: Base and Solana. Settlement depends on the facilitator connected to the account.
  • An agent is identified by its wallet address and becomes a customer of the product — metering, invoicing and history work unchanged.
  • Agent payment is its own rail, separate from pix, boleto and card. There is no fallback from one to the other: they are different money.