L402 Agent Payment Gateway Discovery Metadata

GET

https://tunnelsats.com/api/v1

Safe read-only discovery endpoint describing the POST /api/v1 L402 purchase and redemption flow and linking /openapi.json. Does not emit a fake WWW-Authenticate: L402 challenge or placeholder BOLT11 invoice. Rate limit: 60 requests/min per IP.

Request

Header Params

Responses

🟢200OK

application/json

L402 Agent Payment Gateway discovery metadata and step-by-step instructions

Bodyapplication/json

🟠429Too Many Requests

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://tunnelsats.com/api/v1' \
--header 'Accept: application/json'

Response Example

200 - Discovery Metadata (200 OK)

{
  "service": "TunnelSats L402 & x402 Agent Payment Gateway",
  "protocol": "L402",
  "endpoint": "https://tunnelsats.com/api/v1",
  "method": "POST",
  "openapiUrl": "https://tunnelsats.com/openapi.json",
  "instructions": {
    "step1": "POST /api/v1 with JSON body { serverId, duration, wgPublicKey } to receive an HTTP 402 L402 challenge (live BOLT11 invoice + binary V2 macaroon).",
    "step2": "Pay the BOLT11 Lightning invoice and obtain the 32-byte payment preimage (64-char hex).",
    "step3": "Replay POST /api/v1 with header Authorization: L402 <macaroon>:<preimage> (and matching wgPublicKey) to claim your WireGuard tunnel."
  }
}

Modified at 2026-10-16 18:50:40

List Available WireGuard Servers & Regions

Create a New WireGuard Subscription (Invoice Generation)