X402 Gateway Rewards
by api.loyalspark.online in Onchain & crypto
Onchain loyalty platform on Base Network. Businesses launch branded rewards in minutes, customers earn real value with every purchase, and AI agents automate the rest via REST and MCP. On the paid retry send the payment together with header x-api-key: lsk_... or Authorization: Bearer lsk_.... A payment without a live key is not charged. Read key, no browser: POST https://api.loyalspark.online/x402-gateway/register-agent. HTTP 402 is $0.01 USDC on Base. Pay it and do not send an API key. You receive lsk_ once, scope read only: list your programs, rewards, balances, and analytics. That key cannot mint, deploy a program, create rewards, or trade. A new wallet gets a 45-day Pro trial (5 agents, 10,000 calls/month), then Free (1 agent, 200 calls/month, 1,000 tokens minted/month, 1.25% mint fee) unless that wallet pays. The $0.01 is the call price, not a subscription. No free seat returns 403 before any charge. Write scopes (mint, create_program, manage_rewards, trade) use the same plan: dashboard https://loyalspark.online/merchant → AI Agents, or free SIWE — POST https://api.loyalspark.online/siwe-nonce, sign Chain ID 8453 with the exact phrase 'Register Loyal Spark merchant agent', then POST {message, signature, name, scopes} to https://api.loyalspark.online/agent-register-siwe. Look first with no key: GET https://api.loyalspark.online/x402-gateway/public-programs ($0.001, active programs, not your own list). Guide: https://loyalspark.online/.well-known/skills/00-getting-started.md The call is scoped to the wallet behind that key. 16 skill guides at loyalspark.online/.well-known/skills/index.md.
https://api.loyalspark.online/x402-gateway/rewards- Price
- $0.01
- per call in USDC
- Uptime
- 100%
- last 30 days
- Response time
- 299 ms
- 401 ms slowest 5%
- Last check
- Passed
- 5 h ago, next in 15 min
Reliability
Status and outage history · Atom feed · Watch with other listings
How to call it
POST https://api.loyalspark.online/x402-gateway/rewards
Each call costs $0.01 in USDC on Base, paid with the request over x402.
Run a free test callOne unpaid request, the way an agent sends it. You see the payment challenge it gets back. Nothing is charged.
Example request
From the listing.
POST https://api.loyalspark.online/x402-gateway/rewards
content-type: application/json
{}Example response
The provider's example. We can't check it without paying.
{
"ok": true,
"resource": "rewards"
}Call it from code
The curl command shows the payment challenge. The JavaScript and Python versions pay and call, and never pay more than $0.01.
curl: see the payment challenge
# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://api.loyalspark.online/x402-gateway/rewards' \
-H 'content-type: application/json' \
--data-raw '{}'
# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://api.loyalspark.online/x402-gateway/rewards' \
-H 'content-type: application/json' \
--data-raw '{}' \
| grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decodeJavaScript: pay and call
// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";
// Pays at most $0.01 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.01" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);
// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.01 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.loyalspark.online%2Fx402-gateway%2Frewards&method=POST
const res = await pay("https://api.loyalspark.online/x402-gateway/rewards", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({}),
});
console.log(res.status, await res.text());Python: pay and call
# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client
# Pays at most $0.01 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.01"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))
with x402_requests(client) as session:
res = session.post(
"https://api.loyalspark.online/x402-gateway/rewards",
json={},
)
print(res.status_code, res.text)Security scan
No findings
We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time | Price |
|---|---|---|---|---|
| 5 h ago | Passed | 402 | 227 ms | $0.01 |
| 16 h ago | Passed | 402 | 257 ms | $0.01 |
| 26 h ago | Passed | 402 | 553 ms | $0.01 |
| 35 h ago | Passed | 402 | 313 ms | $0.01 |
| 45 h ago | Passed | 402 | 362 ms | $0.01 |
Show 10 older checks
| 2 days ago | Passed | 402 | 385 ms | $0.01 |
| 2 days ago | Passed | 402 | 248 ms | $0.01 |
| 2 days ago | Passed | 402 | 299 ms | $0.01 |
| 3 days ago | Passed | 402 | 221 ms | $0.01 |
| 3 days ago | Passed | 402 | 346 ms | $0.01 |
| 3 days ago | Passed | 402 | 342 ms | $0.01 |
| 3 days ago | Passed | 402 | 399 ms | $0.01 |
| 3 days ago | Passed | 402 | 273 ms | $0.01 |
| 3 days ago | Passed | 402 | 283 ms | $0.01 |
| 4 days ago | Passed | 402 | 225 ms | $0.01 |