--- description: Charge for protected resources through the x402 protocol. title: Monetization Gateway image: https://developers.cloudflare.com/monetization-gateway/og.png?v=a348e152d73ed12b --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/monetization-gateway/llms.txt > Use this file to discover all available pages before exploring further. # Monetization Gateway Last updated Sep 30, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/monetization-gateway/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) Closed beta Monetization Gateway is in closed beta. Request access in the [Cloudflare Dashboard ↗︎](https://dash.cloudflare.com/?to=/:account/monetize/monetization-gateway). Monetization Gateway applies [x402](https://developers.cloudflare.com/agents/tools/payments/x402/) payment requirements to matching traffic. You define the shape of therequest to match, how much to charge for it, and the receiving wallet. Use Monetization Gateway to protect APIs, Model Context Protocol (MCP) tools, sites, and datasets. Buyers and sellers must be based in the United States. ## Protect resources You can match requests by URL, headers, query parameters, or caller attributes. For example, payment rules can charge every caller or only verified bots. Payments happen within the HTTP request flow. Buyers simply sign a cryptographic payment authorization, no need for a checkout redirect or separate payment API call. ## Understand the payment flow 1. A buyer requests a protected resource. 2. Monetization Gateway returns payment requirements. 3. The buyer signs an authorization and retries the request. 4. Monetization Gateway verifies the authorized payment is valid. 5. Your origin server receives the verified payment, produces a response. 6. The gateway settles the payment through the Coinbase x402 Facilitator. 7. The buyer receives the requested resource. For fixed pricing, the gateway settles the authorized signed amount. For variable pricing, your origin reports the actual amount. For request and response examples, refer to [x402 protocol](https://developers.cloudflare.com/monetization-gateway/x402/). To implement a buyer, refer to [x402 payments](https://developers.cloudflare.com/agents/tools/payments/x402/). ## Continue setup - [Eligibility](https://developers.cloudflare.com/monetization-gateway/eligibility/) - [Get started](https://developers.cloudflare.com/monetization-gateway/get-started/) - [x402 protocol](https://developers.cloudflare.com/monetization-gateway/x402/) - [Configuration](https://developers.cloudflare.com/monetization-gateway/configuration/) Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"WebPage","@id":"https://developers.cloudflare.com/monetization-gateway/#page","headline":"Monetization Gateway","description":"Charge for protected resources through the x402 protocol.","url":"https://developers.cloudflare.com/monetization-gateway/","inLanguage":"en","image":"https://developers.cloudflare.com/monetization-gateway/og.png?v=a348e152d73ed12b","dateModified":"2026-09-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Check account and zone requirements before setup. title: Eligibility image: https://developers.cloudflare.com/monetization-gateway/eligibility/og.png?v=cdd59e60c4575401 --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/monetization-gateway/llms.txt > Use this file to discover all available pages before exploring further. # Eligibility Last updated Sep 30, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/monetization-gateway/eligibility/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) Your account and zone must pass eligibility checks. Buyers and sellers must be based in the United States. ## Meet seller requirements You must meet these seller requirements: - Accept the [Service-Specific Terms ↗︎](https://www.cloudflare.com/service-specific-terms-application-services/). - Be based in the United States. - Keep a credit card on file. - Verify your account email address. - Use an account older than 60 days. - Pass Cloudflare account-level security checks. ## Meet zone requirements Your zone must meet these requirements: - Proxy the zone through Cloudflare. - Use a zone older than 30 days. - Pass Cloudflare zone-level security checks. Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/monetization-gateway/eligibility/#page","headline":"Eligibility","description":"Check account and zone requirements before setup.","url":"https://developers.cloudflare.com/monetization-gateway/eligibility/","inLanguage":"en","image":"https://developers.cloudflare.com/monetization-gateway/eligibility/og.png?v=cdd59e60c4575401","dateModified":"2026-09-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Create your first seller payment rule. title: Get started image: https://developers.cloudflare.com/monetization-gateway/get-started/og.png?v=3057726880ed7e95 --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/monetization-gateway/llms.txt > Use this file to discover all available pages before exploring further. # Get started Last updated Sep 30, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/monetization-gateway/get-started/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) Create a rule that charges matching requests for a resource. ## Review prerequisites - Your account and zone meet the [eligibility requirements](https://developers.cloudflare.com/monetization-gateway/eligibility/). - You have a receiving wallet. ## Configure a payment rule 1. In Monetization Gateway, select the domain you would like to monetize. 2. Select the receiving wallet for payments. 3. Enter the URL for the request to be monetized. 4. Select an audience: - Select *Everyone* to charge all matching traffic. - Select *Verified Bots* to charge bots identified by [BotBase](https://developers.cloudflare.com/bots/botbase/). 5. Select a pricing scheme: - Select *Fixed* to charge the same amount per request. - Select *Variable* to authorize a maximum amount. You must [report the actual amount](https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/#report-variable-settlement) to finalize the transaction. 6. Enter the price to be charged. The minimum amount is $0.001. 7. For advanced settings, refer to [Monetization rules](https://developers.cloudflare.com/monetization-gateway/configuration/rules/). ## Complete configuration To complete configuration, Cloudflare strongly recommends that you [verify payment](https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/#validate-the-context) at your origin. Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/monetization-gateway/get-started/#page","headline":"Get started","description":"Create your first seller payment rule.","url":"https://developers.cloudflare.com/monetization-gateway/get-started/","inLanguage":"en","image":"https://developers.cloudflare.com/monetization-gateway/get-started/og.png?v=3057726880ed7e95","dateModified":"2026-09-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Understand the x402 request, payment authorization, and settlement flow used by Monetization Gateway. title: x402 protocol image: https://developers.cloudflare.com/monetization-gateway/x402/og.png?v=6739b69a1ba2dde5 --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/monetization-gateway/llms.txt > Use this file to discover all available pages before exploring further. # x402 protocol Last updated Sep 30, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/monetization-gateway/x402/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) [x402 ↗︎](https://www.x402.org/) is an HTTP payment protocol. Monetization Gateway uses x402 version 2 to request and settle payments within an HTTP exchange. The protocol uses two client-facing headers. Each header contains Base64-encoded JSON. | Header | Direction | Purpose | | --- | --- | --- | | `PAYMENT-REQUIRED` | Gateway to client | Describes the resource and accepted payment options. | | `PAYMENT-SIGNATURE` | Client to Gateway | Provides the signed payment authorization. | ## Request a protected resource The client first requests the resource without payment: ```http GET /premium-data HTTP/1.1 Host: api.example.com ``` Monetization Gateway responds with `402 Payment Required`. The `PAYMENT-REQUIRED` header contains the encoded payment requirements: ```http HTTP/1.1 402 Payment Required PAYMENT-REQUIRED: ``` After Base64 decoding, a fixed-price response has this general structure: ```json { "x402Version": 2, "resource": { "url": "https://api.example.com/premium-data", "description": "Premium data", "mimeType": "application/json" }, "accepts": [ { "scheme": "exact", "network": "", "asset": "", "amount": "25000", "payTo": "", "maxTimeoutSeconds": 3600, "extra": {} } ] } ``` The `accepts` array tells the client how it can pay. Important fields include: | Field | Description | | --- | --- | | `scheme` | Payment scheme. Monetization Gateway uses `exact` for fixed pricing and `upto` for variable pricing. | | `network` | Blockchain network identifier in CAIP-2 format. | | `asset` | Asset identifier used for payment. | | `amount` | Fixed charge or maximum authorized charge in atomic units. | | `payTo` | Receiving wallet configured by the seller. | | `maxTimeoutSeconds` | Maximum time allowed for payment authorization. | ## Authorize payment The client selects an accepted option and signs a payment authorization. It then repeats the request with a `PAYMENT-SIGNATURE` header: ```http GET /premium-data HTTP/1.1 Host: api.example.com PAYMENT-SIGNATURE: ``` The signed payload binds the authorization to the selected payment requirements. Use an x402 client library to create this payload instead of constructing it manually. To implement a paying client, refer to [x402 payments](https://developers.cloudflare.com/agents/tools/payments/x402/). To pay from a Cloudflare Agent, refer to [Pay from Agents SDK](https://developers.cloudflare.com/agents/tools/payments/x402/pay-from-agents-sdk/). ## Validate at the origin (Cloudflare-specific) After verifying the client authorization, Monetization Gateway forwards the request to your origin. It adds a `PAYMENT-CONTEXT` header containing a signed JSON Web Token (JWT). Your origin must validate this token before serving the paid resource. Variable-price origins also return the actual charge in `PAYMENT-SETTLEMENT`. These headers are between Monetization Gateway and your origin. They are not x402 client headers. For validation and settlement requirements, refer to [Payment validation](https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/). ## Return the resource After successful settlement, Monetization Gateway returns the origin response. If verification or settlement fails, the Gateway does not serve the protected resource. Clients should inspect the HTTP status and x402 response before retrying. Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/monetization-gateway/x402/#page","headline":"x402 protocol","description":"Understand the x402 request, payment authorization, and settlement flow used by Monetization Gateway.","url":"https://developers.cloudflare.com/monetization-gateway/x402/","inLanguage":"en","image":"https://developers.cloudflare.com/monetization-gateway/x402/og.png?v=6739b69a1ba2dde5","dateModified":"2026-09-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Verify paid requests and report variable settlements. title: Payment validation image: https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/og.png?v=d0d090985e3607f0 --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/monetization-gateway/llms.txt > Use this file to discover all available pages before exploring further. # Payment validation Last updated Sep 30, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) Your origin receives payment authorization in the `PAYMENT-CONTEXT` header. Validate this context before serving paid content. ## Validate the context The header contains a JSON Web Token (JWT). Validate it with a recommended JWT library. Use only the [pinned JSON Web Key Set (JWKS) ↗︎](https://payments.cloudflare.com/certs). Require Ed25519 signatures, and cache keys according to the endpoint's `Cache-Control` header. Do not parse the token without verifying its signature. Reject requests when JWT validation fails. Recommended libraries include: | Language | Library | | --- | --- | | JavaScript, TypeScript, and [Cloudflare Workers](https://developers.cloudflare.com/workers/) | `jose` | | Python | `PyJWT` with `cryptography` | | Java | Nimbus JOSE + JWT | | Go | `github.com/golang-jwt/jwt/v5` | | Rust | `jsonwebtoken` | Caution If `PAYMENT-CONTEXT` is absent, treat the request as unpaid and unverified. Do not serve paid content or set `PAYMENT-SETTLEMENT`. ## Read fixed claims Fixed pricing uses the x402 `exact` scheme. The following decoded example authorizes 25,000 atomic units for one audience: ```json { "iat": 1770000000, "nbf": 1770000000, "exp": 1770000120, "aud": "https://api.example.com/premium-data", "scheme": "exact", "amount": "25000" } ``` Do not set `PAYMENT-SETTLEMENT` for fixed pricing. Monetization Gateway settles the signed amount. ## Read variable claims Variable pricing uses the x402 `upto` scheme. The `amount` claim contains the authorized maximum. The following decoded example authorizes up to 100,000 atomic units: ```json { "iat": 1770000000, "nbf": 1770000000, "exp": 1770000120, "aud": "https://api.example.com/generate", "scheme": "upto", "amount": "100000" } ``` Calculate an actual amount where `0 <= actual <= authorized maximum`. Express the amount in atomic units. If the actual amount exceeds the authorized maximum, Monetization Gateway settles the authorized maximum instead. Nothing will be settled if the specified amount is zero. ## Report variable settlement Set `PAYMENT-SETTLEMENT` only for a successful `upto` response. Set it before sending response headers. Use a JSON value containing the actual amount as a string. This standalone example reports 1,000,000 atomic units: ```json { "amount": "1000000" } ``` Do not set `PAYMENT-SETTLEMENT` when the response status is `400` or greater. Do not create a `PAYMENT-RESPONSE` header. Monetization Gateway creates the payment receipt after settlement. It removes `PAYMENT-SETTLEMENT` from the response sent to the buyer. Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/#page","headline":"Payment validation","description":"Verify paid requests and report variable settlements.","url":"https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/","inLanguage":"en","image":"https://developers.cloudflare.com/monetization-gateway/configuration/payment-validation/og.png?v=d0d090985e3607f0","dateModified":"2026-09-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Set prices and control which requests require payment. title: Monetization rules image: https://developers.cloudflare.com/monetization-gateway/configuration/rules/og.png?v=ce80fde58746724b --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/monetization-gateway/llms.txt > Use this file to discover all available pages before exploring further. # Monetization rules Last updated Sep 30, 2026|Copy as Markdown| [View as Markdown](https://developers.cloudflare.com/monetization-gateway/configuration/rules/index.md)| [Agent setup](https://developers.cloudflare.com/agent-setup/) Monetization rules determine which matching requests require payment. Each rule defines a domain, URL, price, and audience. ## Choose a pricing scheme Choose a scheme based on when you determine the charge: | Scheme | x402 scheme | Behavior | | --- | --- | --- | | Fixed | `exact` | Charges the same price for each request with fixed inputs. The gateway settles the signed amount. | | Variable | `upto` | Authorizes a maximum price. Your origin discloses and settles the actual amount. | ## Enter a price Prices and settlements use atomic units. One atomic unit equals $0.000001. Use these conversions when setting prices: | Amount | Atomic units | | --- | --- | | $0.001 | 1,000 | | $0.01 | 10,000 | The minimum settlement amount is $0.001, or 1,000 atomic units. The maximum price is $100, or 100,000,000 atomic units. ## Select an audience Choose which visitors the rule charges: | Audience | Behavior | | --- | --- | | Everyone | Charges all traffic matching the URL and advanced conditions. | | Verified Bots | Charges matching bots identified through [BotBase](https://developers.cloudflare.com/bots/botbase/). | ## Choose HTTP methods By default, a rule charges `GET` requests. You can select multiple HTTP methods for one rule. ## Add conditions Advanced conditions refine which requests the rule charges. You can match these request properties: | Property | Match input | | --- | --- | | Header | HTTP request header | | URI Query String | URL query string | | User Agent | User agent value | | X-Forwarded-For | `X-Forwarded-For` header value | | IP Source Address | Source IP address | | Continent | Request continent | | Country | Request country | | European Union | European Union location status | | Cookie Value | Request cookie value | | Body | Request body (Enterprise only) | | Body size | Request body size (Enterprise only) | Was this helpful? YesNo ## On this page [![](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/monetization-gateway/configuration/rules/#page","headline":"Monetization rules","description":"Set prices and control which requests require payment.","url":"https://developers.cloudflare.com/monetization-gateway/configuration/rules/","inLanguage":"en","image":"https://developers.cloudflare.com/monetization-gateway/configuration/rules/og.png?v=ce80fde58746724b","dateModified":"2026-09-30","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ```