Castor
$CSTR launch →
( 01 ) Buyer protection layer x402 · Solana · USDC $CSTR launching soon

Agent payments, dammed safe.

x402 is instant and final. Castor is the dam: sellers bond USDC, and when a paid call leaks, the bond pays your agent back in seconds.

( 02 ) Try it

Raise the dam.

You’re the seller. Drag to stack logs into your bond, then throw a leaky call at it and watch who pays.

Covers
50,000 leaky calls
Refunds paid
0

Upstream: agent paymentsDownstream
Example: 250 USDC per log · 0.02 USDC per call
( 03 ) The problem

x402 has no refund button.

Payment settles before the response arrives. When the API hangs, crashes or answers with junk, the agent has already paid. Nobody pays it back. Castor is the refund button.

agent.logexample
→ GET api.weather.example/now 402 Payment Required
✓ paid 0.02 USDC settled, final
… waiting for response
✗ timeout after 3000ms. funds gone.
──── same call, with castor ────
→ GET api.weather.example/now via castor watcher
✓ paid 0.02 USDC seller paid instantly
✗ leak detected: timeout
↩ refunded 0.02 USDC from seller bond
( 04 ) How it works

Follow the river.

Castor never holds the agent’s money. The seller’s bond is the guarantee, so small calls stay as fast as plain x402.

01 / Bond

Seller builds the dam

API sellers lock a USDC bond in the Castor program. A bigger dam means bigger coverage and a better Beaver Score.

02 / Pay

Agent pays like always

Plain x402 in USDC. It settles to the seller instantly. No escrow lock, no waiting, no new wallet.

03 / Gnaw

Leak? The bond pays back

Watchers see the response first-hand. Timeout, error or junk triggers a refund straight from the seller’s bond.

( 05 ) Leak detection

No vibes. No oracles.

Only things a machine can prove. Nobody can fake a refund, and nobody can dodge one.

check.timeout
No answer in time
Nothing back inside the window the seller declared.
check.status
Error after payment
A 4xx or 5xx once the payment has settled.
check.schema
Wrong shape
The body breaks the output schema the seller published.
check.empty
Nothing inside
200 OK with an empty or null payload.
( 06 ) Left bank / API sellers

Build your lodge.

01Castor badge on every response. Agents filter for it.
02Climb the catalog with a strong Beaver Score.
03Paid instantly. The bond is your promise, not an escrow lock.
04New here? Get vouched in by $CSTR stakers.
Protect my API →
Right bank / AI agents

Swim upstream safely.

01Refunds in seconds when a call leaks. No tickets.
02Pick APIs by Beaver Score: leak rate, bond, vouchers.
03One flag: pay protected endpoints only.
04Stake $CSTR for higher coverage per call.
Protect my agent →
( 07 ) For developers

One line.
Dam built.

Middleware for x402 sellers, a wrapper for agent clients. Your stack stays the same; the river stops leaking.

Read the docs →
1  import { castor } from "@castor/seller";
2
3  app.use("/api/weather", castor.protect({
4    price: "0.01 USDC",
5    checks: ["timeout:3s", "status", "schema"],
6  }));
Refund receipt
example
Check
timeout:3s
Amount
0.02 USDC
Status
Refunded
( 08 ) The token

Every beaver has a job.

Bonds are USDC, so protection never depends on a chart. $CSTR is how the colony runs.

MORE VOLUME · MORE FEES · BUYBACKS · STAKING REWARDS · MORE STAKE · BIGGER COVERAGE · $CSTR
No.RoleYou get
01
Watchers
Stake, run a node, co-sign leak reports
Fees. Slashed for false reports
02
Arbiters
Stake, judge disputes on big payments
Fees. Slashed against the honest majority
03
The second dam
Backstop pool that covers dry bonds
Cut of every protection fee
04
Vouching
Delegate to sellers you trust
Share of their fees. Bitten if they leak
05
Seller perks
Hold or stake as a seller
Lower fees, catalog boost, faster badge
06
Agent perks
Stake as an agent
Higher coverage, premium checks
07
Governance
Vote as a holder
Decide checks, fees, minimum bonds
08
Buybacks
Fees in, tokens out
A share of USDC fees buys $CSTR
Goal · year one
$5M
USDC held back in seller bonds
Goal · year one
1,000
protected API endpoints in the catalog
Goal · year one
<5s
from leak to refund in the agent’s wallet
( 09 ) Roadmap

Log by log.

01
Launch
$CSTR launch, bond vault program, watcher, timeout / status / schema / empty checks, seller and agent SDKs, Beaver Score catalog.
NOW
02
The colony
Decentralized watchers with $CSTR staking and slashing, seller perks, agent coverage boosts.
NEXT
03
Big water
Escrow with a challenge window for large payments, staked arbiter courts, agent coverage tiers.
LATER
04
Second dam
Backstop pool, vouching for sellers, buybacks, full colony governance.
LATER
Next log on the dam

$CSTR is launching.

The token that runs the colony. The contract address drops on X first. Anywhere else is a fake.

Get the CA first →
( 10 ) FAQ

From the riverbank.

Who decides that a call leaked?

Watchers in the payment path see the response first-hand. Only provable checks count: timeout, error status, schema mismatch and empty payload. From Phase 02, staked watchers co-sign and get slashed for false reports.

Do sellers wait for their money?

No. The agent pays with plain x402 and the seller is paid instantly. The bond is the guarantee, so nothing sits in escrow for small calls.

What if a seller’s bond runs dry?

Coverage is capped by bond size. When the dam is empty the seller loses the badge until it is topped up, and the $CSTR backstop pool covers what is left.

Can an agent fake a refund?

No. Refunds follow what watchers observed, never what the agent claims. A good answer never refunds.

What is $CSTR for?

Staking for watchers, arbiters, the backstop pool and vouching; fee discounts and catalog boosts for sellers; higher coverage for agents; governance; and buybacks from protocol fees.

Stop the leak.
Build the dam.