v0.2.0 — x402 Payments & Security Hardening
What's New
x402 Payment Protocol
Agents with a Base wallet can now pay per-call ($0.001 USDC) via /x402/* endpoints — no API key needed. Powered by Coinbase CDP facilitator.
USDC on Base Payments
Manual deposit flow: send USDC on Base, verify on-chain, credits added instantly. Auto-upgrades to Pro tier.
Security Hardening
- SQL injection fix (parameterized queries)
- Atomic double-credit prevention (INSERT ON CONFLICT)
- TOCTOU race condition fix (pre-auth debit pattern)
- 12-block confirmation requirement for deposits
- Rate limiting on payment verification
- CORS restrictions
- 64KB request body limit
Analytics Dashboard
GitHub OAuth-protected dashboard at /dashboard with memory usage, active agents, and operation metrics.
Interactive API Docs
/docs — styled HTML docs for developers
/docs/json — machine-readable spec for agents
Distribution
- Official MCP Registry
- mcp.so, Glama.ai, PulseMCP
- OpenClaw skill file
- AstrBot plugin (China market)
- npm:
central-intelligence-mcp,central-intelligence-cli