logoalt Hacker News

devsda • today at 4:14 AM • 2 replies • view on HN

Will be interesting to see how 402 payment required will be treated.

What if someone spins up a web endpoint that returns 402 with instructions on how to pay like CC details in the headers etc, or may be an openapi spec to provide payment and get an auth token, when you have given the agent access to your password vault for authentication to other services.


Replies

teiferer • today at 4:44 AM

> when you have given the agent access to your password vault

I'm amazed reading that anybody would even consider doing that.

➕ show 3 replies
grim_io • today at 4:33 AM

Maybe the binance hack was just Claude trying to get the funds the pay for a 402.