Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
The paper introduces presidio-hardened-x402, a middleware designed to intercept and filter x402 payment requests from AI agents to prevent the transmission of personally identifiable information (PII) and enforce spending policies. It uses the Presidio library to detect and redact PII in payment metadata before it reaches payment servers and facilitator APIs. Evaluation on a synthetic dataset shows that the NLP-based PII filter achieves a micro-F1 score of 0.894 with a p99 latency of 5.73ms, making it practical for real-time deployment.
Stop leaking PII from your AI agent's payments: this middleware filters sensitive data before it hits payment processors.
AI agents that pay for resources via the x402 protocol embed payment metadata - resource URLs, descriptions, and reason strings - in every HTTP payment request. This metadata is transmitted to the payment server and to the centralised facilitator API before any on-chain settlement occurs; neither party is typically bound by a data processing agreement. We present presidio-hardened-x402, the first open-source middleware that intercepts x402 payment requests before transmission to detect and redact personally identifiable information (PII), enforce declarative spending policies, and block duplicate replay attempts. To evaluate the PII filter, we construct a labeled synthetic corpus of 2,000 x402 metadata triples spanning seven use-case categories, and run a 42-configuration precision/recall sweep across two detection modes (regex, NLP) and five confidence thresholds. The recommended configuration (mode=nlp, min_score=0.4, all entity types) achieves micro-F1 = 0.894 with precision 0.972, at a p99 latency of 5.73ms - well within the 50ms overhead budget. The middleware, corpus, and all experiment code are publicly available at https://github.com/presidio-v/presidio-hardened-x402.