---
title: "AP2 x402 Cart Correlation"
method: POST
path: "/v1/tools/correlate_ap2_cartmandate_x402"
tags: ["compliance_control", "ap2", "x402", "cartmandate", "correlation", "keccak256", "mcp:correlate_ap2_cartmandate_x402"]
---

# AP2 x402 Cart Correlation

`POST /v1/tools/correlate_ap2_cartmandate_x402`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/correlate_ap2_cartmandate_x402`
- Auth: none declared

Correlates a built AP2 CartMandate (cart_root, cart_items, merchant) against an x402_spend_evidence pack: does the cart total (sum of quantity*unit_price per currency) match the x402 authorization's value, does the CartMandate's merchant map to the authorization's recipient address, and does the CartMandate's own hash-chain independently re-verify against the supplied cart_items (never trusted as a self-reported flag). Output vocabulary is CORRELATION_STATUS (CORRELATED / NOT_CORRELATED / INDETERMINATE) -- this is a plausibility check over two independently-produced artifacts, never a cryptographic binding. Google has not shipped an AP2-compatible x402 extension; no field or code path here implies one exists. Zero network calls; never a facilitator, proxy, gateway, or settlement relay.

**Tool URL:** https://ainumbers.co/chaingraph/art-596-ap2-x402-cart-correlation.html

## Request body

- object
  - `cart_root` string
  - `cart_items` unknown[]
    - unknown
  - `merchant` string
  - `token_decimals` integer
  - `x402_spend_evidence` object

## Response `200`

Successful tool execution result

- object
  - `correlation_status` 'CORRELATED' | 'NOT_CORRELATED' | 'INDETERMINATE'
  - `cart_total_matches_authorization_value` boolean, nullable
  - `cart_total_atomic` string, nullable: The cart total in the token's atomic units, as a decimal integer string (null when the cart spans more than one currency, or the inputs were malformed).
  - `authorization_value_atomic` string, nullable: The authorization's own `value` in atomic units, as a decimal integer string (null when `value` is absent or not a non-negative integer).
  - `merchant_matches_authorization_to` boolean, nullable
  - `cart_chain_intact` boolean
  - `disclosure` string
  - `reasons` string[]

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)