Le VPN launches x402: buy a VPN pass inside an HTTP request - no account, and AI agents welcome

HTTP status code 402 is “Payment Required”. It has been reserved in the spec since the 1990s, waiting for a payment system that could actually live inside a web request. Almost nothing has ever used it. As of today, we do: x402.le-vpn.com is live, and Le VPN is the first major VPN provider to ship a working x402 integration.

What it sells is deliberately simple: a VPN pass. You request one, your wallet pays a few dollars in USDC, and the same HTTP response hands back a time-boxed WireGuard credential. No account, no email, no checkout page, no card. When the pass expires, the server removes the peer on its own. There is nothing to cancel because there was never a subscription.

How a Purchase Actually Works

The whole purchase happens inside one web request. You ask for a pass, the server replies “402 Payment Required” with the price, your wallet approves a payment in USDC, and the answer to that same request is your VPN config file. Open it in any WireGuard app and you’re connected. The whole thing takes about as long as a page load plus the payment confirming.

Payments work on three networks at launch - Base, Polygon and Arbitrum - and your wallet uses whichever one it holds USDC on. There are no gas fees to juggle; the payment is a simple signature from your wallet.

Pricing and Locations

A pass costs $1.99 for a day, $6.99 for a week, or $14.99 for 30 days, and each pass covers one server. We’re launching with three locations - France, Germany and the UK - and will expand with more servers and more protocols. Supply at each location is limited, so a server can temporarily sell out.

AI Agents Are Welcome as Customers

Here is the part we find genuinely new. Because the entire flow is plain HTTP plus a wallet signature, there is no step that requires a human. No form to fill, no email to confirm, no CAPTCHA guarding a checkout. An autonomous AI agent with a funded wallet can buy VPN access on its own, through exactly the same door a person walks through with MetaMask.

If you are building agents, point them at x402.le-vpn.com - the 402 challenge is machine-readable and the official x402 SDKs handle the payment step for you.

The Web's Majority Customer Is Now a Machine

This launch is not us betting on a distant future. In June 2026, Cloudflare’s CEO announced that bot traffic had passed human traffic on the web for the first time, with Cloudflare Radar putting automated traffic at roughly 57% of web requests. He had predicted that crossover for the end of 2027. It arrived 18 months early. HUMAN Security’s 2026 State of AI Traffic report tells the same story from its own data: automated traffic grew about eight times faster than human traffic through 2025, with traffic from AI agents and agentic browsers up nearly 8,000%.

And these are workers, not toys. Gartner expects 40% of enterprise applications to include task-specific AI agents by the end of 2026, up from under 5% a year earlier, and projects that 15% of day-to-day work decisions will be made autonomously by 2028. Salesforce, which sells agent tooling and so counts eagerly, says agent deployments on its platform more than doubled in a year, with the average business that runs them operating 13 at once.

So there is now a whole workforce of software employees doing real jobs - price monitoring, ad verification, market research, travel booking, content QA - and almost none of them have what any human doing the same job would get on day one: their own network credentials.

Better Customers Than Humans, With Nowhere to Shop

Here is where the data gets strange, and where our thinking on this launch comes from.

Adobe tracks more than a trillion visits to US retail sites. In the first quarter of 2026 it measured AI-referred traffic up 393% year over year - and by March that traffic was converting 42% better than traffic from humans arriving on their own. One year earlier it converted 38% worse. In twelve months, machine-assisted buyers went from the worst customers on the web to the best, and they now bring 37% more revenue per visit. Gartner predicts AI agents will intermediate more than $15 trillion in B2B spending by 2028. Treat that as a keynote forecast rather than a measurement, but the direction matches everything else in the data.

The payment side is ready too. The x402 protocol we build on was formally launched under the Linux Foundation in April 2026 with 22 backers including Visa, Mastercard, AWS, Google, Cloudflare and Coinbase, and adoption trackers count over 200 million x402 transactions to date. Look closer, though, and analysts note that over 95% of that activity is machines testing the plumbing - actual commercial volume earlier this year was measured in the tens of thousands of dollars a day.

Put those three facts side by side and a hypothesis falls out. Buyers that convert better than humans. A payment standard backed by both major card networks. And almost nothing real for sale on it. The machine economy is not waiting for buyers, and it is not waiting for payment plumbing - it is waiting for shelves. Nearly every checkout on the web still assumes an email address, a CAPTCHA and a card with a person behind it, so the web’s best-converting customer mostly gets turned away at the till. We decided to stock the shelf: a working VPN tunnel is now something a machine can buy end to end, without asking anyone.

Why Every Agent Should Have Its Own VPN Access

Today, an agent that needs an exit point in a specific country usually borrows one. Its operator signs up for a VPN, embeds the account credentials in the deployment, and shares that one login across the whole fleet.

That shared login is exactly the kind of secret that leaks. GitGuardian counted 28.65 million new secrets hardcoded into public GitHub in 2025, a third more than the year before, and found that 64% of the secrets leaked back in 2022 were still valid this January. Leaked keys don’t just happen; they stay live for years. And the machines holding them barely get watched: CyberArk’s survey of security leaders puts machine identities at 82 for every human in the enterprise, while 88% of organizations treat only the human ones as sensitive.

Per-agent passes fix the borrowed-login pattern on four fronts:

• Location, per task. An agent checking French prices, German search results and UK streaming availability needs three different exits, chosen at runtime. With x402 it buys exactly the pass each job needs, when the job starts.
• Its own IP address. An agent working from your home or office connection spends your address's standing: its request volume is what trips the per-IP rate limits and CAPTCHAs that then land on you, and everything it does gets attributed to the address you also live on. On its own exit IP, the agent's traffic is its own - your browsing stays yours, and one busy agent doesn't slow down everyone behind the shared address.
• Blast radius. A subscription credential baked into a hundred deployments unlocks everything when it leaks. A leaked x402 pass is one credential for one server that expires on its own within days, with no account behind it to take over.
• Cost that maps to work. An agent that lives for twenty minutes should not hold a monthly subscription. A $1.99 day pass paid from the agent's own wallet shows up in the operator's books as what it is: a per-job expense, one line per task.

Agents already browse, scrape, book and negotiate on behalf of their operators. Until now, getting one a VPN meant “have your human sign up for something”. Now the answer is an HTTP request.

What "Account-Less" Means for Your Privacy

A regular VPN purchase, even a privacy-friendly one, starts with an email address. An x402 pass starts with a wallet signature. We collect no account, no email and no personal data at purchase; the payment is the signature. As with the rest of the service, we keep connection logs, not activity logs.

The practical safeguards that normally justify accounts still exist, just without the accounts: a network hiccup can’t charge you twice, an unhealthy or sold-out server won’t take your money, and if you lose your config you can download it again with your receipt.

The Shelf Is Open

If you have ever wanted to hand a machine two dollars and get a working tunnel back in the same breath - or you are a machine reading this - that now exists, and it runs on a status code that waited thirty years for its first real job.