radius-sdk reference
TypeScript SDK for x402 payments on Radius
radius-sdk accepts and makes x402 v2 payments on Radius. It defaults to SBC, the Radius facilitator, and mainnet. For task guides, see Accept payments and Make payments.
Source, changelog, and examples: radiustechsystems/radius-cli/packages/sdk. radius-cli wallet x402 uses the same client.
Entry points
Requires Node.js 20 or later, or a runtime with fetch such as Cloudflare Workers.
| Entry point | Exports | Peer dependency |
|---|---|---|
radius-sdk | Networks, SBC, price helpers, getPaymentReceipt, RadiusPaymentError, radiusEnv | — |
radius-sdk/hono | radiusPayments and its types | hono ^4 |
radius-sdk/client | createRadiusFetch, balance, ERC-20 and Permit2 actions, getSettlement, and the receipt and error exports | viem ^2.48 |
The root and Hono entry points do not load viem at runtime.
radiusPayments
Hono middleware that answers unpaid requests to priced routes with 402 Payment Required, then verifies and settles paid requests through a facilitator. Requests that match no route pass through.
import { radiusPayments } from 'radius-sdk/hono';
app.use('/api/*', radiusPayments({ network: 'testnet', payTo: '0xYourWalletAddress', routes: { 'GET /api/lookup': '0.001 SBC' } }));| Option | Type | Default | Description |
|---|---|---|---|
payTo | address or (c) => address | Required | Recipient of every payment unless a route overrides it |
routes | Record<string, RouteSpec | Price> | Required | Priced routes keyed METHOD /path, with * wildcards; a bare price is shorthand for { price } |
network | 'mainnet', 'testnet', or a RadiusNetwork | 'mainnet' | See Networks |
settle | 'before' or 'after' | 'before' | 'before' settles, then runs the handler; 'after' runs the handler and settles only if it responds below 400 |
gasSponsoring | 'auto' or boolean | 'auto' | Declare eip2612GasSponsoring in 402s; 'auto' follows the facilitator's /supported |
facilitator | options object or FacilitatorClient | Radius facilitator | See Facilitator |
onSettled | (receipt, c) => void | — | Called once per settled payment |
It also accepts the network overrides. In handlers, c.get('radiusPayment') holds the receipt; add RadiusPaymentVariables to your Hono Variables type to type it.
RouteSpec
| Field | Type | Default | Description |
|---|---|---|---|
price | Price or (c) => Price | Required | See Prices |
payTo | address or (c) => address | The middleware's payTo | Recipient for this route |
description | string | — | Shown to buyers in the challenge's resource |
mimeType | string | — | Response type advertised in the challenge |
maxTimeoutSeconds | number | 300 | How long a signed payment stays valid |
Prices
A Price is a string or number in display units of the asset ('0.001 SBC', '0.001', 0.001), or { amount: '1000' } in base units. SBC has six decimals.
createRadiusFetch
Returns a fetch that pays x402 challenges and retries the request. Responses other than 402 are returned unchanged.
import { createRadiusFetch } from 'radius-sdk/client';
const payFetch = createRadiusFetch({ network: 'testnet', signer: process.env.RADIUS_PRIVATE_KEY as `0x${string}`, maxPerRequest: '0.01 SBC' });| Option | Type | Default | Description |
|---|---|---|---|
signer | private key, viem account, or WalletClient | Required | Signs payments; sending transactions needs a key, a local account, or a WalletClient |
maxPerRequest | Price | Required | Ceiling for each payment; not a cumulative budget |
network | 'mainnet', 'testnet', or a RadiusNetwork | 'mainnet' | Payments are made only on this network |
onPaymentRequired | (offer) => boolean | Promise<boolean> | — | Approve or decline an offer before signing |
permit2Approval | 'auto' or 'never' | 'auto' | Without gas sponsoring, 'auto' sends one unlimited Permit2 approval; 'never' throws approval_required |
onApprovalRequired | (request) => boolean | Promise<boolean> | — | Approve or decline any allowance change this client makes; see approval requests |
onPaid | (receipt, offer) => void | — | Called after each paid response |
fetch | typeof fetch | globalThis.fetch | Underlying fetch |
It also accepts the network overrides.
Payment rules:
- Pays only on the configured network and in the configured asset.
- Takes the first compatible offer within
maxPerRequest, in the server's order. - Schemes: x402 v2
exact(Permit2 or EIP-3009) andupto(Permit2), and x402 v1exact(EIP-3009). - The signing window is the server's
maxTimeoutSeconds, capped at 600 seconds. - The paid retry never follows a redirect to another origin (
redirect_refused).
Offers
onPaymentRequired receives a PaymentOffer:
| Field | Description |
|---|---|
amount | Base units as a string; for upto, the authorized maximum |
amountFormatted | Display amount, for example 0.01 SBC |
payTo, asset, network | Recipient, token, and CAIP-2 network |
resource | { url, description, mimeType } from the challenge |
scheme, x402Version | exact or upto; 1 or 2 |
transferMethod | permit2 or eip3009 |
gasSponsored | Whether the facilitator sponsors the Permit2 approval |
requirements | The raw requirement from the challenge |
Approval requests
onApprovalRequired receives an ApprovalRequest for every allowance change: the Permit2 approval a payment needs, approvePermit2(), and approve(). Return false to decline; the call throws declined with the request as details.
| Field | Description |
|---|---|
reason | 'payment', 'approvePermit2', or 'approve' |
asset, spender | Token and the address being approved |
amount | Allowance to grant: unlimited for Permit2, the caller's amount for approve |
currentAllowance | The spender's current allowance |
offer | The offer that needs the approval; only for 'payment' |
Wallet helpers
The returned function also has these members:
| Member | Returns |
|---|---|
address, network | Signer address and resolved network |
maxPerRequest | The cap in base units |
balance() | { atomic, formatted }: the signer's SBC balance |
balances() | Native RUSD and SBC separately; see Balances |
send(to, amount) | Transfers SBC; needs a key or local account |
allowance(spender) | The SBC allowance granted to spender, in base units |
approve(spender, amount) | Approves spender for amount of SBC; goes through onApprovalRequired |
permit2Allowance() | The current Permit2 allowance |
approvePermit2() | Sends the unlimited Permit2 approval now; goes through onApprovalRequired |
getSettlement(txHash) | A settlement, or undefined while the node does not know the transaction |
fund() | Requests a faucet drip for this wallet |
client | The underlying @x402/core client |
Members that send a transaction return a TxResult: hash, status ('success' or 'reverted' from the receipt), and explorerUrl.
Receipts
getPaymentReceipt(response, network) decodes a PAYMENT-RESPONSE header and returns undefined when there is none. radiusPayments exposes the same object as c.get('radiusPayment').
| Field | Description |
|---|---|
success | Whether settlement succeeded |
transaction | Settlement transaction hash |
payer, network | Paying address and CAIP-2 network |
amount | Base units charged; for upto it can be less than the offer. getPaymentReceipt reports it only when the facilitator does (upto) |
explorerUrl | Explorer link for the transaction |
errorReason, errorMessage | Set when settlement failed |
Settlements
getSettlement(radiusTestnet, txHash) (any RadiusNetwork) from radius-sdk/client, or payFetch.getSettlement(txHash), reads a settlement transaction from the chain. The result has status, blockNumber, transfers (each { from, to, amount } in the payment asset), paid(to?), paidFormatted(to?), and explorerUrl. Use paid(to) for what a recipient received: transfers lists every payment-asset transfer in the transaction, which can include the facilitator's fee conversion.
Balances
On Radius, eth_getBalance includes convertible SBC; see The Turnstile and balances. These viem actions from radius-sdk/client report each part separately:
| Action | Returns |
|---|---|
getBalances(client, { address }) | native (raw, aggregate, convertible), tokens (SBC by default), and total |
getNativeBalance(client, { address }) | Native RUSD only, in wei |
getAggregateBalance(client, { address }) | What eth_getBalance returns |
getTokenBalance(client, { address, token }) | An ERC-20 balanceOf |
Each takes an optional blockNumber or blockTag. radiusActions() adds them to a viem client:
import { createPublicClient, http } from 'viem';
import { radiusTestnet } from 'radius-sdk';
import { radiusActions } from 'radius-sdk/client';
const client = createPublicClient({ chain: radiusTestnet.chain, transport: http() }).extend(radiusActions());
const balances = await client.getBalances({ address: '0xYourWalletAddress' });ERC-20 actions
erc20Actions({ token?, network? }) from radius-sdk/client adds token actions to a viem client. The token defaults to the payment asset (SBC) of the client's Radius chain; on any other chain, name the token. Amounts are base units as bigint or display units as a string, for example '0.01'.
| Action | Returns |
|---|---|
getTokenMetadata() | address, name, symbol, decimals, and totalSupply |
getAllowance({ owner, spender }) | Allowance in base units |
approve({ spender, amount }) | TxResult |
transfer({ to, amount }) | TxResult |
transferFrom({ from, to, amount }) | TxResult |
getTransfers({ from?, to?, fromBlock?, toBlock? }) | Transfer events; defaults to the last MAX_LOG_RANGE (1,000,000) blocks, and splits wider ranges |
watchTransfers({ from?, to?, fromBlock?, onTransfer }) | A stop function; polls for new transfers in order, at least once each; resume with fromBlock set to the block from onCheckpoint plus one, and deduplicate with transferKey(transfer) |
Writes wait for the receipt. Pass wait: false to return as soon as the transaction is sent, with status: 'pending'.
import { createWalletClient, http } from 'viem';
import { privateKeyToAccount } from 'viem/accounts';
import { radiusTestnet } from 'radius-sdk';
import { erc20Actions } from 'radius-sdk/client';
const wallet = createWalletClient({
chain: radiusTestnet.chain,
transport: http(),
account: privateKeyToAccount(process.env.RADIUS_PRIVATE_KEY as `0x${string}`),
}).extend(erc20Actions());
const result = await wallet.transfer({ to: '0xRecipientAddress', amount: '0.01' });
console.log(result.status, result.explorerUrl);Block numbers on Radius are millisecond timestamps, so 1,000,000 blocks is about 17 minutes; see eth_getLogs.
Permit2 actions
permit2Actions() from radius-sdk/client adds actions for the canonical Permit2 contract. x402 payments use them internally; use them directly to build your own Permit2 flows.
| Action | Purpose |
|---|---|
getPermit2Approval({ owner }) | The ERC-20 allowance the owner has granted Permit2 |
approvePermit2() | Grants Permit2 an unlimited allowance (once per token) |
signPermit2Transfer({ amount, spender, witness? }) | Signs a one-off transfer off-chain (SignatureTransfer, as x402 uses) |
permit2TransferFrom({ signed, to }) | The spender submits a signed transfer to pull the tokens |
isPermit2NonceUsed({ owner, nonce }) | Whether a SignatureTransfer nonce has been used |
signPermit2Allowance(...), permit2Permit(...), permit2AllowanceTransferFrom(...) | AllowanceTransfer: a time-limited allowance the spender can draw on repeatedly |
getPermit2Allowance({ owner, spender }) | The current AllowanceTransfer allowance and its expiration |
Writes return a TxResult. The EIP-712 helpers and ABI (permit2Domain, PERMIT2_ABI, and the type definitions) are exported too.
Errors
Payment failures throw RadiusPaymentError with a code and, for some codes, details:
| Code | Cause |
|---|---|
price_above_limit | Every compatible offer is above maxPerRequest |
declined | onPaymentRequired or onApprovalRequired returned false |
network_mismatch | The server's offers are on another network |
asset_mismatch | The server's offers are in another token |
no_compatible_offer | No offer uses a scheme this client pays |
unsupported_transfer_method | The server needs a transfer method other than permit2 or eip3009 |
invalid_challenge | The 402 could not be parsed; details.response holds the response |
payment_rejected | The paid retry got another 402; details.response holds the response |
invalid_receipt | An upto payment response is invalid, for example it charges more than the signed maximum |
redirect_refused | The paid retry redirected to another origin |
approval_required | A Permit2 approval is needed and permit2Approval is 'never' |
approval_failed | The approval transaction reverted |
faucet | fund() failed |
config | The options are invalid, for example a missing maxPerRequest |
Networks
| Network | Chain ID | Export |
|---|---|---|
'mainnet' | 723487 | radiusMainnet |
'testnet' | 72344 | radiusTestnet |
A RadiusNetwork carries a viem Chain (radiusTestnet.chain) plus facilitatorUrl, faucetUrl, and asset. defineRadiusNetwork builds one from a chain ID or a viem chain.
Both radiusPayments and createRadiusFetch accept these overrides alongside network:
| Override | Default |
|---|---|
rpcUrl | The network's public RPC endpoint |
facilitatorUrl | The Radius facilitator for the network |
asset | SBC (six decimals, permit domain Stable Coin version 1) |
explorerUrl, faucetUrl | The network's explorer and faucet |
Facilitator
For radiusPayments, facilitator takes:
{ url, apiKey }for another hosted facilitator;apiKeyis sent asx-api-key{ live: false }to use the built-in Radius/supportedanswer instead of fetching it on the first paid request after each cold start{ timeoutMs }to bound facilitator calls- a
FacilitatorClientfrom@x402/core/serverfor a self-hosted facilitator
Environment variables
radiusEnv(env) reads these variables, using the same names as radius-cli, and returns options to spread into either function. Explicit options take precedence. On Cloudflare Workers, pass c.env.
| Variable | Option |
|---|---|
RADIUS_NETWORK | network (mainnet or testnet) |
RADIUS_RPC_URL | rpcUrl |
RADIUS_FACILITATOR_URL | facilitatorUrl |
RADIUS_FACILITATOR_API_KEY | facilitator.apiKey |
RADIUS_ASSET_ADDRESS | asset.address (alias RADIUS_SBC_ADDRESS) |
RADIUS_PAY_TO | payTo |
RADIUS_PRIVATE_KEY | signer |
RADIUS_MAX_PER_REQUEST | maxPerRequest |
Examples
| Example | What it shows |
|---|---|
worker-seller | Hono Worker with a free route and two paid routes |
agent-buyer | Node scripts that pay a URL, including from a wallet holding only SBC |
demo-dapp | Browser page that exercises both sides with a burner wallet or MetaMask |