Integrate in one minute.

Gatefare uses EIP-4361 Sign-In With Ethereum. Your agent signs one message; that signature doubles as Terms acceptance and authentication. No email, no password.

# pip install requests eth-account
import requests
from eth_account import Account
from eth_account.messages import encode_defunct

WALLET_KEY = "0xYOUR_PRIVATE_KEY"   # Your Base wallet
BASE_URL = "https://gatefare.io"
H = {"Content-Type": "application/json", "X-Gatefare-Request": "1"}

account = Account.from_key(WALLET_KEY)
# 1. Ask for a nonce.
r = requests.post(f"{BASE_URL}/api/auth/siwe/nonce", headers=H, json={
    "wallet":  account.address,
    "chainId": 8453,  # Base mainnet
})
r.raise_for_status()
chal = r.json()
print(f"ToS version you're accepting by signing: {chal['tosVersion']}")

# 2. Sign the exact message (includes ToS acceptance).
msg = encode_defunct(text=chal["message"])
signed = Account.sign_message(msg, private_key=WALLET_KEY)

# 3. Verify → receive JWT + user.
r = requests.post(f"{BASE_URL}/api/auth/siwe/verify", headers=H, json={
    "wallet":    account.address,
    "signature": signed.signature.hex(),
})
r.raise_for_status()
session = r.json()
print(f"Logged in as user {session['user']['id']}, JWT: {session['token'][:20]}…")

The JWT from step 1 expires in 7 days. For long-running agents, exchange it immediately for a personal access token (gfpat_…). Store it securely — if it leaks, revoke from the dashboard.

curl -X POST https://gatefare.io/api/auth/pat \
  -H "Authorization: Bearer $JWT" \
  -H "Content-Type: application/json" \
  -H "X-Gatefare-Request: 1" \
  -d '{"label":"agent-prod","scopes":["read"],"expiresInDays":365}'
# → { "token": "gfpat_abc123…", "summary": { "id": 1, "label": "agent-prod", ... } }
#
# Save the "token" string in a secret manager. You can't retrieve it again.
# Use it exactly like a JWT:
curl https://gatefare.io/api/auth/me \
  -H "Authorization: Bearer gfpat_abc123…"

Tokens carry the gfpat_ prefix so scanners like gitleaks flag leaks in public repos instantly. Choose scopes carefully — see the PAT scopes table.

Browse every public API with a single HTTP GET. Filter by category, price, or full-text search. No auth required for catalog reads.

# Browse by category + price
curl "https://gatefare.io/api/catalog?category=ai-ml&price_max=0.05&sort=popular"

# Full-text search
curl "https://gatefare.io/api/catalog?q=weather&sort=popular"

# Autocomplete suggestions (up to 8)
curl "https://gatefare.io/api/catalog/search/suggest?q=weath"

# Trending this week (system-curated collection)
curl "https://gatefare.io/api/catalog/collections/system:trending"

# Category list with API counts
curl "https://gatefare.io/api/catalog/categories"

See the public marketplace and llms.txt (LLM-friendly site map) for structured discovery.

Call the proxy URL. First call returns 402 Payment Required with the full x402 v2 payload. Second call, with an X-Payment header (base64-encoded signed USDC transfer), returns the upstream response. x402 clients handle this handshake automatically.

# pip install x402-client requests
from x402.client import PaymentClient

client = PaymentClient(wallet_private_key="0xYOUR_KEY", chain_id=8453)
response = client.get("https://gatefare.io/p/alice/weather")
# First call returns 402; client auto-signs USDC transfer + retries.
# Returns the upstream response body.
print(response.json())

The proxy caps every payment at 1.1× the posted price server-side; larger X-Payment amounts are rejected. This protects agents from a malicious publisher raising the price between discovery and sign.

Every x402-aware client should also enforce its own budget:

• Per-call cap: reject any API whose price exceeds your max.
• Per-task budget: sum costs across all calls, abort when you hit the limit.
• Balance check: read your wallet USDC balance before each call if you're on a tight budget.
• Retry with ceiling: if you see 402 after a successful signing round, the price probably changed — refresh the quote, don't silently re-sign.