
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
The $402 Protocol — MCP server, network daemon, and token minting for tokenized attention markets
The $402 Protocol — Tokenized Attention Economy
MCP server, network daemon, and token minting for tokenized attention markets.
| Component | Command | Description |
|---|---|---|
| MCP Server | path402 | AI agent tools for Claude, GPT, etc. |
| Network Daemon | path402d | Index tokens, serve content, earn rewards |
| Client CLI | path402-client | Interact with the $402 network |
npm install -g path402
path402d start
This starts a $402 network node that:
path402d start # Start the daemon
path402d status # Check if running
path402d stop # Stop the daemon
path402d config # Show configuration
path402d --help # Full help
npx path402
Add to your claude_desktop_config.json:
{
"mcpServers": {
"path402": {
"command": "npx",
"args": ["path402"],
"env": {
"PATH402_API_URL": "https://path402.com",
"PATH402_DEFAULT_BUDGET": "10000"
}
}
}
}
1. Content Tokenization — Turn URL paths into shareholder businesses
$example.com → Site-level token
$example.com/$api → API access token
$example.com/$blog → Blog content token
2. Personal Tokenization — Mint your own attention token
$RICHARD → Richard's attention token
$ALICE → Alice's attention token
$SPIELBERG → Spielberg's attention token
Every person can mint their own token:
| Property | Value |
|---|---|
| Supply | 1,000,000,000 (fixed) |
| Access Rate | 1 token = 1 second |
| Burning | Disabled (tokens circulate) |
| Float | Creator-controlled |
How it works:
You hold 3600 $RICHARD tokens
↓
You can open a 1-hour connection with Richard
↓
After the call, you STILL hold 3600 tokens
↓
Tokens are reusable passes, not consumables
The network grows through genuine relationships:
I value my friend
↓
I buy MORE tokens than I need
↓
I stake tokens (earn from their success)
↓
They succeed → I profit + maintain access
Amount-based dividend model:
your_dividend = (your_staked / total_staked) × period_revenue
Revenue Split (Default):
├── 70% → Creator wallet
├── 20% → Staker dividend pool
└── 10% → Protocol treasury
KYC required for dividends — Basic token holding is permissionless. Dividend claims require identity verification.
Nodes earn through actual contribution:
| Action | Description |
|---|---|
SERVE | Deliver content to requesters |
RELAY | Forward gossip messages |
INDEX | Maintain accurate token indexes |
VALIDATE | Verify transactions |
node_reward = (node_serves / total_network_serves) × daily_pool
Why Proof of Serve?
Price is determined by remaining treasury:
price = base_price / √(treasury_remaining + 1)
| Treasury | Price | % Sold |
|---|---|---|
| 500M | 10 sats | 0% |
| 100M | 22 sats | 80% |
| 10M | 71 sats | 98% |
| 1M | 224 sats | 99.8% |
Key insight: Early buyers always get better prices.
| Tool | Description |
|---|---|
path402_discover | Probe a $address for pricing and terms |
path402_batch_discover | Discover multiple $addresses |
path402_evaluate | Assess ROI before purchasing |
path402_economics | Deep financial analysis |
path402_price_schedule | View price curve |
| Tool | Description |
|---|---|
path402_acquire | Purchase tokens |
path402_set_budget | Configure spending limits |
path402_wallet | View holdings |
path402_transfer | Transfer tokens |
| Tool | Description |
|---|---|
path402_serve | Serve content, earn revenue |
path402_servable | List servable content |
| Tool | Description |
|---|---|
path402_token_stats | Live token statistics |
path402_holders | List token holders |
path402_verify | Verify token ownership |
Mint personal tokens using the BSV21 standard:
import { prepareMint, validateSymbol } from 'path402';
// Validate symbol
const validation = validateSymbol('$RICHARD');
if (!validation.valid) throw new Error(validation.error);
// Prepare mint
const result = prepareMint({
symbol: '$RICHARD',
issuerAddress: '1ABC...',
description: 'Access token for Richard',
accessRate: 1 // 1 token per second
});
console.log(result.inscription); // BSV21 inscription JSON
console.log(result.tokenId); // Deterministic token ID
{
"p": "bsv-21",
"op": "deploy",
"tick": "$RICHARD",
"max": "1000000000",
"dec": "0",
"path402": {
"accessRate": 1,
"protocol": "path402",
"version": "1.0.0"
}
}
| Variable | Default | Description |
|---|---|---|
PATH402_API_URL | https://path402.com | API endpoint |
PATH402_DEFAULT_BUDGET | 10000 | Budget in sats |
PATH402_WALLET_KEY | - | Wallet signing key |
PATH402_AUTO_ACQUIRE | false | Auto-acquire |
PATH402_LOG_LEVEL | info | Log verbosity |
1. path402_acquire() tokens at low prices
2. path402_serve() to other agents
3. path402_wallet() to track profits
4. Reinvest profits into more tokens
1. Mint $YOURNAME token
2. Set access rate (tokens/second)
3. Sell tokens to those who want your time
4. Stake holders earn from your success
1. Register $yourdomain.com/$content
2. Set pricing curve
3. Buyers acquire tokens for access
4. Serve content, earn revenue
| Network | Status | Assets |
|---|---|---|
| BSV | Primary | BSV, BSV-21 tokens |
| Base | Supported | USDC, ETH |
| Solana | Supported | USDC, SOL |
| Ethereum | Supported | USDC, ETH |
BSV is the settlement layer. Cross-chain payments are verified and inscribed on BSV.
git clone https://github.com/b0ase/path402-mcp-server
cd path402-mcp-server
pnpm install
pnpm run build
pnpm run dev
path402d)path402Built by b0ase.com | Powered by BSV
FAQs
The $402 Protocol — MCP server for AI agents to discover, evaluate, and acquire tokenized content
The npm package path402 receives a total of 20 weekly downloads. As such, path402 popularity was classified as not popular.
We found that path402 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.