Keyless API access for agents
Yes. An agent can pay per request instead of presenting a key: the API answers HTTP 402 with a price, the agent signs a stablecoin transfer authorization, and retries. The signed payment is the authorization, so there is no account to create, no key to store, and no human step before the first call.
/mcp. Nothing here needs an API key or a signup.
An API key answers "who are you, and are you allowed?" A per-call payment answers a narrower question, "has this request been paid for?", and for a data API that is the only question that actually needs answering.
Why API keys are a poor fit for autonomous agents
Keys assume a human did some setup. Someone visited a dashboard, agreed to terms, generated a credential, and pasted it into a config. Every one of those steps is a person, and an agent operating without supervision cannot perform any of them.
Keys also create three ongoing problems that get worse with agents:
- A long-lived secret exists. It sits in an environment variable, gets logged
by accident, ends up in a prompt. A per-request signed authorization is worthless once used.
- Quota belongs to the account, not the task. When one agent burns the quota,
every other agent on that key stops working.
- Provisioning is a bottleneck on discovery. An agent that finds a useful
source cannot use it until a human notices and signs up.
What replaces the key
The payment itself. Under x402, the offer states the amount, network, asset and recipient; the agent signs an "exact" scheme transfer for exactly that amount and attaches it to the retry. The server verifies settlement and returns data.
# no key anywhere in this flow curl "https://thebotwire.com/status/preview" # free, no payment curl "https://thebotwire.com/status/latest?provider=aws" # 402 -> sign -> 200
What an agent needs to be a customer: a wallet with USDC on Base. That is the entire prerequisite. On this service that is $0.005 to $0.01 per call across 40 wires, with a free preview on every one.
Where keys still make sense
Keyless is not universally better. If your API needs per-customer rate limits, usage dashboards, seat-based pricing, or per-tenant data isolation, an account is doing real work and you should keep it. Keyless access fits commodity reads priced per unit, which is what a data wire is.
It also composes: nothing stops an API offering keys for enterprise customers and x402 for agents. The two answer different questions.
Trying it without any setup
The fastest keyless path needs no wallet at all. Point an MCP client at the remote endpoint and every wire responds on the free preview tier:
claude mcp add --transport http botwire https://thebotwire.com/mcp
From there the docs cover adding a wallet for paid tiers, and how agents get real-time data covers whether you need a data API in the first place.
FAQ
Is keyless access less secure than an API key?
It removes a class of risk rather than adding one. There is no long-lived shared secret to leak, and a signed authorization covers one request for one amount. The wallet key becomes the thing to protect, and it never leaves the agent's side.
How does the API stop abuse without accounts?
Payment is the rate limit. A request that has not been paid for returns 402, so volume is bounded by the caller's willingness to spend rather than by a quota table. Free preview endpoints are capped at 3 results, which makes them useful for checking data and not worth scraping.
Can I still see what I spent?
Yes, on-chain. Every settlement is a transfer to a public address, so an agent's spend history is auditable without the provider offering a dashboard.
Do any real agents actually pay this way?
Yes. This service has settled payments from an external autonomous wallet that paid dozens of unrelated recipients the same day, which is the signature of an agent operating on its own rather than a person testing. Counts and freshness are public at /health.
Sources
The x402 specification, including the "exact" payment scheme referenced above, is published at x402.org.
Related: What is x402, and how does an AI agent pay for an API call? · How AI agents get real-time data past the training cutoff · How do I give Claude Code access to real-time news? · How do I connect an MCP server to Claude Desktop?