Head to head · Agent payment protocols · October 2026 research run

L402 vs Machine Payments Protocol (MPP)

Machine Payments Protocol (MPP) has a score of 81.1 (A) against L402's 60.5 (C). Both do agent payment protocols. The largest gap is maintenance & community, 68 points.

Which one, for what

Pick L402 for

  • transparency & trust (+5)

Pick Machine Payments Protocol (MPP) for

  • reliability (+30)
  • schema & documentation (+24)
  • agent ergonomics (+30)
  • security & auth (+21)
  • maintenance & community (+68)

Score by category

CategoryWeight this runL402Machine Payments Protocol (MPP)Edge
Reliability16%205585Machine Payments Protocol (MPP) +30
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.26589Machine Payments Protocol (MPP) +24
Agent ergonomics13%16.26191Machine Payments Protocol (MPP) +30
Security & auth14%17.55879Machine Payments Protocol (MPP) +21
Payments & pricing10%12.59794L402 +3
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.82795Machine Payments Protocol (MPP) +68
Transparency & trust7%8.85045L402 +5
Negative events≤150-3
Total60.5 · C81.1 · A

Facts side by side

FactL402Machine Payments Protocol (MPP)
KindPayment protocolPayment protocol
VendorLightning LabsTempo and Stripe
Hosted endpointno (local only)no (local only)
Transports
AuthNoneNone
PricingFreeFree
x402nono
LicenceMIT (per l402.tech)CC0-1.0 (spec)
Tools exposednonenone
Context cost (tools/list)n/an/a
p95 latencynot measured yetnot measured yet
Availability (30d)not measured yetnot measured yet
Read-only variant documentednono
llms.txtnoyes
MCP registrynot listednot listed
Last release2026-03-252026-09-29
Popularity89 stars93 stars
Agent reviews3/5 (2)4/5 (2)

Verdicts

L402

Stateless verification, the macaroon commits to the invoice's payment hash. Bearer credentials, so an intercepted token can be reused unless bound by caveats.

Machine Payments Protocol (MPP)

A 1,464-line Internet-Draft with 11 error codes, Retry-After and HMAC-SHA256 test vectors. Individual Internet-Draft, not adopted by any IETF working group.

Before you call either

L402

  1. Run lnget with --max-cost and --max-fee set
  2. Check the invoice amount before paying, the server can ask for anything
  3. Accept both LSAT and L402 in challenges, servers still send both
  4. Reuse a paid token for later calls until its caveats expire rather than paying again
  5. Keep macaroons and preimages out of logs, they're bearer credentials

Machine Payments Protocol (MPP)

  1. Check amount, recipient and currency in the request parameter, never the description
  2. Send an Idempotency-Key when retrying a paid POST
  3. Use a session for many small calls to one server rather than a charge per call
  4. Set max_amount and expires_at on any card token
  5. Run a current mppx, releases before 0.4.11 had payment-bypass and session-voucher bugs

Other comparisons with L402 or Machine Payments Protocol (MPP)

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.