RSL DECLARATIONS · SIGNED EVIDENCE · HTTP X402
The AcqPath HTTP x402 purchase contract
Quote first, private claim second, signed payment third. This is a multi-step report flow, not a generic one-call paid MCP tool.
1. Select and quote
Read coverage; choose resource, purpose, user_class and tier. POST /v1/rights/quote once. Inspect available and decision_preview. Keep claim_token private.
2. Read and verify the unpaid offer
GET the quote-provided /v1/rights/reports/{id} with X-AcqPath-Claim. A valid unpaid request returns 402 and PAYMENT-REQUIRED.
Verify x402 v2 exact requirements and the Ed25519 offer-receipt signature against the pinned key. Match the quote resource, amount, Base network, USDC asset, recipient and expiry.
3. Persist and redeem
Use a buyer-controlled signer within your task budget. Persist an encrypted checkpoint containing the exact authorization before submitting it.
GET the same redeem URL with X-AcqPath-Claim and PAYMENT-SIGNATURE. Verify signed report contents, context, settlement receipt and delivery-proof bindings.
4. Return evidence, not an authorization shortcut
UNKNOWN, missing declarations, unsupported origins and LICENSE_REQUIRED do not authorize use. A report records observed RSL declarations; it is not a license or legal clearance.
On ambiguity, resume the original checkpoint without new quote or signature. For refund requests use the documented operator-reviewed flow only after a deliberate decision; it does not send money automatically.