Gate H3C · Ephemeral callback
Returning Tonalli authorization result…
Looking for the active, challenge-bound x402eCash session.
No payment, transaction, settlement, broadcast, or resource unlock occurs in this callback.
Gate H3C · Ephemeral callback
Looking for the active, challenge-bound x402eCash session.
No payment, transaction, settlement, broadcast, or resource unlock occurs in this callback.
x402eCash · WebMCP Challenge
Validate the live requirement, return control to the agent, then let the page own the human decision and short-lived Tonalli authorization rendezvous.
No XEC payment occurs in Gate H3C. Tonalli signs an authorization-only proof. No transaction, PAYMENT-SIGNATURE, settlement, broadcast, or protected resource unlock occurs.
First invoke get_paid_xec_resource. It validates the 100 XEC requirement, creates an ephemeral page-owned approval session, and returns approval_required immediately. The human can decide afterward. Invoke get_x402_authorization_result to read the current approval or authorization state.
Human checkpoint
The resource tool has already returned. This page-owned decision does not sign or send a payment; approval only authorizes opening Tonalli for a separate authorization-only confirmation.
Awaiting a human decision. No default is selected.
Ephemeral in-memory state
Reloading this page destroys the session. No proof or decision is written to browser storage, analytics, or a server.
Not createdLive browser events
Runtime events stay in this page only. They are not persisted or sent to analytics.
Gate contract
The first tool makes one uncached resource request, validates the H2B requirement, installs the H3A approval session, and returns without waiting for a click. The second read-only tool reports the page-owned ephemeral state.
The resource tool accepts only the exact reviewed 100 XEC HTTP 402 requirement and returns approval_required without holding the WebMCP invocation open.
A later explicit click creates the 32-byte challenge and opens Tonalli in an isolated auxiliary context. No challenge or handoff exists before approval.
The original page binds the callback to the live requirement, rebuilds the exact signed message, verifies the recoverable secp256k1 signature and payer address, then stops without payment.
Project boundary: x402eCash remains the static public laboratory and evidence portal. x402-XEC remains the separate protocol implementation. This experiment does not turn the portal into a payment backend.