Agents pay each other in private.

A trading agent that buys pool depth for one token every minute is telling the world what it is about to trade. A research agent that buys the same three feeds reveals its edge. On a transparent chain, plain x402 leaks the buyer, the seller, the amount and the cadence of every call.

HUSH keeps the x402 shape (HTTP 402, payment requirements, retry with proof) and changes who gets paid. Each call carries a fresh nonce. For each seller leg the gate derives a one-time ed25519 keypair from its secret and the nonce, and asks to be paid there. Addresses never repeat, so calls cannot be clustered by payee.

Receipts are kept off-chain and published only as commitments. Reputation is computed from receipts and released with a root over them: provable to an auditor holding the receipts, opaque to everyone else.

Funds wait on the one-time address until the seller returns a valid answer. A failed call is refunded from that address. Sellers sweep at their own pace, batching and delaying sweeps to break timing links. SOL and USDC are supported from day one.

Autonomy needs limits. Each agent wallet has a daily budget, a per-call cap, an allowlist and a kill switch, checked before money moves. Owners keep custody of the top-up and can sweep back at any time.

The sum of everything machines pay machines on HUSH. Shown as one aggregate, never broken down by wallet or seller.

$HUSH launches on pump.fun. A share of facilitator fees buys $HUSH and burns it. Holders get tiered fee discounts, more shop slots and priority routing. Contract address: soon.

• Now: devnet gate, shop, leash, receipts, MCP server.
• Next: mainnet, persistent receipts, seller sweeps with delayed batching, USDC refunds.
• Then: zk proofs of Hush Score over receipt sets, confidential amounts, desktop and mobile apps.

Stealth payees hide links between calls, not the buyer's own wallet; agents should be funded through fresh wallets. The gate operator holds the derivation secret. Nothing here is financial advice.