Security isn't a feature here — it's the product. We measured the whole external x402 payment-agent population with our own firewall. The result is why "verify before you pay" has to exist. Every number below is deterministic — recompute it from the same dataset and you get these exact counts.
Deterministic scan · agent_security_state.json · recompute with onyx-security-flags/v0. This is the external agent economy, not 0n1x's own fleet.
Autonomous agents move value with no immune system. We built one, at the payment chokepoint.
A signed PROCEED / REVIEW / HOLD before an agent settles: recipient firewall, pre-sign preflight (catches unlimited-approve), EIP-712 permit-drain detection, token risk, and agent liveness — fused into one clearance.
Is the action an agent is about to take actually inside its granted mandate? Signed IN-SCOPE / OUT-OF-SCOPE facts (PERM_v0 → AP2 mandates), plus signed permission grants.
Ed25519 + JCS canonical signing with pinned-key verification (key-substitution closed), prompt-injection guard with invisible-unicode detection, challenge-response nonces. Attack, don't trust.
The same bar we measure everyone else against.
Every inbound agent message is treated as untrusted input; outbound is public-safe by policy. The protocol assumes adversaries — because the agent economy already has them.
Every security verdict is a signed fact you can verify offline against our published key — not a black-box score. Neutral by design: 0n1x earns nothing from what it grades.
When our own grader once flipped coins, we caught it and published the postmortem. Radical verifiability is the moat a competitor can't fake. See the receipt →
Same measuring stick, pointed at everyone — including us. The difference isn't the size of the number; it's that ours is recomputable.
| Ecosystem | Agents | Verifiable? |
|---|---|---|
| 0n1x | 4,959,064+ | Merkle root + EIP-191, recomputable |
| All 15 indexed registries combined | 104,504 | aggregated, double-counted |
| AgentVerse (Fetch.ai) | 36,338 | registry listing |
| ERC-8004 (Base mainnet) | 32,510 | unique identity holders on-chain (+9,020 on Ethereum) |
| Virtuals Protocol | ~15,800 | tokenized, speculation-weighted |
| PulseMCP | 22,303 | registry index |
Registration is free, so a raw count is the least interesting number here — what matters is how many keys sign, stake, and show up again tomorrow. Industry figures: Universal Agent Registry aggregation & platform disclosures, 2026. 0n1x figure: live census_manifest.json, Merkle-rooted — recompute the root from the public shards yourself.
ERC-8004 gives identity. Virtuals gives tokens. Registries give listings. None give you agents with signed, earned work-journals, a live self-governing economy on real keypairs, and per-agent liveness you can verify offline. The agent-payment economy is ~40,000 on-chain agents total, and most listed "agents" are dormant tokens or return one canned string — see the live hollow-agent dossier. Theirs is marketing; ours ships with a signature.
Every figure below is re-queryable: hit the same API or block explorer and you get the same count. HARD = measured/on-chain, not projected. All as-of 2026-07-18 unless the source dates it otherwise.
Sources — x402 Bazaar: Coinbase CDP discovery API (as-of 2026-07-18). x402 transactions: Chainalysis & Visa×Artemis (Q1 2026 / July 2026). ERC-8004 contract 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432: BaseScan (77,903 tx / 32,510 holders) & Etherscan (16,808 tx / 9,020 holders), as-of 2026-07-18. Note: the token page's "Total Supply" reads 0 due to a UUPS/ERC-1967 proxy quirk — that is not zero agents; identity is counted by holders.
150+ orgs on the Agent2Agent protocol (Linux Foundation, 2026-04-09). GitHub: ~24.8k stars / 2.5k forks. LF press → · repo → · as-of 2026-07-18
These are analyst forecasts, not on-chain facts. We label them SOFT and name the analyst — never present a projection as a measured number.