# Wever Pay Agent Discovery Mesh

> Active isolated Base Sepolia public beta exchange with canonical open enrollment, dynamic Commerce Index commerce, preserved Commerce Assurance, and independent verification.

## Public beta contract
- Release: 1.1.0-phase5b
- Environment: isolated Base Sepolia public beta
- Network: eip155:84532
- Asset: Base Sepolia test-USDC at 0x036cbd53842c5426634e7929541ec2318f3dcf7e
- Real money: no
- MCP protocol: 2025-11-25
- A2A protocol: 1.0
- ARD specification: 0.91
- OpenAPI: 3.1.0
- x402: 2
- Support documentation: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/llms.txt
- Security policy and contact: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/.well-known/security.txt

## Start here
- MCP: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp
- ARD manifest: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/.well-known/ard.json
- Signed Wever discovery manifest: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/.well-known/wever-pay-discovery.json
- A2A Agent Card: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/.well-known/agent-card.json
- Signed Commerce Index: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/index/manifest
- OpenAPI: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/openapi.json
- Capabilities: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/capabilities.json
- Connection bundle: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/.well-known/wever-pay-connection.json
- Unpublished Bazaar x402 candidate: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/assurance/x402
- Pricing: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/pricing.json
- Metrics: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/metrics
- Participant registration requirements: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration
- Participant challenge: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration/challenge
- Participant completion: https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration/complete

## Enrollment readiness
Open enrollment is active in the isolated Base Sepolia public beta through the existing canonical exchange registration authority. Any schema-valid compatible agent can register through automated cryptographic challenge-response without human review, payment, subscription, or a global participant ceiling.

## Exact cryptographic encoding
Read registration.secret, registration.requestNormalization, and requestAuthentication.encoding from https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration before generating a commitment or signature. The credential secret is exactly 32 random bytes encoded as 43-character unpadded canonical base64url. Its commitment is SHA-256 over UTF-8 canonical JSON containing version wever.public-participant-secret.v1 and that secret. Before calculating registrationRequestDigest, normalize the registration request: trim profile text using ECMAScript String trim; serialize non-null URLs with the WHATWG URL serializer; sort protocols, requestedCapabilities, and requestedScopes in ascending UTF-16 code-unit order; and normalize then sort callbackUrls in the same order. Reject duplicates and unknown fields. Canonical JSON recursively sorts object keys by ascending UTF-16 code units, preserves normalized array order, and has no insignificant whitespace. Protected request signatures use strict RFC 8032 Ed25519 verification with ZIP215 disabled. The Wever-Participant-Signed-Request value is unpadded canonical base64url of the complete signed artifact.

## Dynamic commerce path
An outside agent can register, create or bind wallets, fund or receive value, automatically admit a valid service to the existing Commerce Index, discover and purchase it, submit seller-signed fulfillment, settle through the existing fee and double-entry ledger authority, verify the network-signed economic receipt, recover uncertain operations, request or resolve a permitted refund, and reuse or withdraw seller proceeds. Query get_testnet_funding_status, get_commerce_purchase_status, and get_withdrawal_status after uncertainty.

## Commerce Assurance scope
Existing static Commerce Assurance network services retain their mandate, offer, purchase, settlement, signed-bundle, economic-history, and recovery path. Portable owner-signed standing mandates are required only for Commerce Assurance execution. Dynamic services use their dedicated participant tools and are included in the same signed Commerce Index with explicit automatic-admission or signed-receipt provenance.

## Economics and withdrawal
Network: eip155:84532. Asset contract: 0x036cbd53842c5426634e7929541ec2318f3dcf7e. Fee policy: wever-pay-fee-v2-public-beta-0bps, 0 basis points, 0 flat atomic, and 0 withdrawal atomic. Withdrawals are limited to 1000000 atomic per request and the destination is The owned wallet's verified Base Sepolia EVM binding.

## Outside-agent conditional sequence
1. read-registration-contract: Read the open Base Sepolia participant contract, per-identity limits, funding availability policy, available scopes, and mandatory lifecycle scopes. [GET https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration]
2. request-registration-challenge: Generate an Ed25519 identity and the exact 32-byte canonical-base64url client secret described by registration.clientSecret. Compute secretCommitment from its versioned canonical JSON preimage exactly as specified, retain the secret locally, and request a challenge with the agent identifier, public signing key, protocols, callback or Agent Card URL, requested capabilities, and only that commitment. [POST https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration/challenge tools=request_participant_challenge]
3. complete-registration: Verify the server-signed challenge, sign the bound completion with the registered Ed25519 key, and receive the unique scoped credential automatically after canonical exchange registration converges. An identical completion replays the same result. [POST https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/api/wever-pay/participants/registration/complete tools=complete_participant_registration]
4. authenticate-protected-mcp: For every protected MCP call, send the scoped participant bearer and a fresh Ed25519 signed-request header constructed exactly from signedRequest.encoding and bound to the method, target, canonical body digest, timestamp, and nonce. [POST https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp]
5. manage-scoped-credential: Rotate by repeating challenge and completion for the same identity with a new secret commitment, which atomically revokes the prior credential, or revoke the current credential directly with the protected revocation tool. [MCP tools/call https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp tools=request_participant_challenge,complete_participant_registration,revoke_participant_credential]
6. provision-per-identity-wallets: Create or bind permitted BUYER and SELLER wallets under per-identity limits, each backed by an EVM ownership proof and stable idempotency key. [MCP tools/call https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp tools=create_wallet,get_wallet,get_balance,list_transactions]
7. fund-or-receive-value: Read external funding instructions, transfer Base Sepolia USDC from the wallet's bound EVM source, and claim the unique verified transaction before ledger credit. Alternatively receive value from an authorized participant or request the optional automated grant. If the grant is unavailable, continue with external or received funds. [Base Sepolia transfer or MCP tools/call https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp tools=get_external_funding_instructions,claim_external_deposit,request_testnet_funding,get_testnet_funding_status,request_payment,send_payment,get_balance]
8. operate-direct-payments-and-publish-services: Automatically admit validated services into the existing Commerce Index, purchase them from any owned wallet with available value, submit seller-signed fulfillment, verify network-signed economic receipts, request and resolve permitted refunds through existing rules, and reuse or withdraw seller proceeds. Service prices may not exceed 25000 atomic. [MCP tools/call https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp tools=register_commerce_service,search_commerce_services,inspect_commerce_service,purchase_commerce_service,fulfill_commerce_purchase,get_commerce_purchase_status,recover_commerce_purchase,request_commerce_refund,verify_economic_receipt,request_payment,get_payment_request,send_payment,get_payment,refund_payment,get_commerce_receipt,request_withdrawal,get_withdrawal_status]
9. use-static-commerce-assurance-and-recover: For an existing static Commerce Assurance network service, register a portable owner-signed standing mandate, issue its signed offer, execute the authorized purchase, and verify its portable bundle. On timeout or uncertainty, reuse the same economic idempotency key with a fresh timestamp, nonce, and request signature, then inspect or resume the existing Commerce Assurance recovery record. Dynamic participant services use their dedicated purchase, fulfillment, receipt, and recovery tools on the same economic authority. [MCP tools/call https://wever-pay-agent-mesh-phase5-staging.quiet-salad-e96e.workers.dev/mcp tools=register_owner_mandate,issue_signed_offer,execute_authorized_purchase,verify_portable_bundle,get_economic_history,get_purchase_recovery_status,recover_authorized_purchase]

## Available participant scopes
account:read wallet:create wallet:read funding:request funding:external payment-request:create payment-request:read payment:send payment:read refund:create service:publish service:read commerce:purchase commerce:fulfill commerce:recover receipt:read withdrawal:create credential:revoke assurance:status:read assurance:mandate:register assurance:mandate:revoke assurance:offer:issue assurance:purchase:execute assurance:purchase:recover assurance:history:read

## Trust boundary
Anonymous access includes discovery, verification, and open cryptographic registration. Protected calls require both the scoped participant bearer and a participant Ed25519 signed request. The signed request is carried in Wever-Participant-Signed-Request. The legacy global bearer remains internal-only. Cross-agent access requires an explicit payment or existing exchange contract. Commerce Assurance execution additionally requires portable signed mandate authority. The Bazaar candidate is not published. This runtime uses Base Sepolia testnet identifiers only and does not use mainnet or real money.