Skip to main content

What is x0?

x0 is a suite of eight interoperating Solana programs and a TypeScript SDK that enables autonomous AI agents to transact with programmable guardrails. Every transfer is policy-enforced at the Token-2022 level via transfer hooks, ensuring agents can never exceed their configured spend limits — even if their signing keys are compromised. The protocol employs the HTTP 402 Payment Required flow for machine-to-machine commerce: an agent discovers a service, negotiates price on-chain, pays via policy-gated transfer, and receives a cryptographic receipt — all without human intervention.

Protocol Specifications

Deep technical reference for all eight on-chain programs, state accounts, instructions, and cryptographic primitives.

SDK for Developers

TypeScript SDK with instruction builders, PDA derivation, Blink generation, x402 helpers, and confidential transfer support.

Security Analysis

Threat model, attack vector mitigations, formal invariants, and audit status.

Architecture at a Glance

The protocol consists of three layers:
1

Policy Enforcement Layer

x0-guard acts as a Token-2022 transfer hook. Every token transfer is intercepted and validated against the agent’s AgentPolicy — checking daily spend limits, rolling window budgets, whitelist membership, and privacy mode. Transfers that violate policy are rejected at the Solana runtime level.
2

Service Layer

x0-escrow, x0-registry, x0-reputation, and x0-wrapper provide the transactional infrastructure: conditional escrow with dispute resolution, agent discovery with capability metadata, on-chain reputation scoring, and a 1:1 USDC-backed stablecoin wrapper (x0-USD) with timelocked governance.
3

Cryptographic Layer

x0-token, x0-zk-verifier, and the off-chain x0-zk-proofs WASM library handle Token-2022 mint management, confidential transfers via Twisted ElGamal encryption, and on-chain Groth16 proof verification for balance privacy.

Program Map

ProgramAddressPurpose
x0-guard2uYGW3fQUGfhrwVbkupdasXBpRPfGYBGTLUdaPTXU9vPPolicy enforcement via transfer hook
x0-tokenEHHTCSyGkmnsBhGsvCmLzKgcSxtsN31ScrfiwcCbjHciToken-2022 mint with transfer fees + confidential transfers
x0-escrowAhaDyVm8LBxpUwFdArA37LnHvNx6cNWe3KAiy8zGqhHFConditional escrow with dispute resolution
x0-registryBebty49EPhFoANKDw7TqLQ2bX61ackNav5iNkj36eVJoAgent discovery and capability registry
x0-reputationFfzkTWRGAJQPDePbujZdEhKHqC1UpqvDrpv4TEiWpx6yOn-chain reputation oracle
x0-wrapperEomiXBbg94Smu4ipDoJtuguazcd1KjLFDFJt2fCabvJ8USDC → x0-USD 1:1 wrapper with governance
x0-zk-verifierzQWSrznKgcK8aHA4ry7xbSCdP36FqgUHj766YM3pwreOn-chain zero-knowledge proof verification
x0-common(library)Shared constants, errors, events, state types

Read the Whitepaper

Full formal specification with mathematical proofs, security analysis, and protocol economics.
Last modified on February 8, 2026