Testnet Gateway

Status: paid-canary-proven Alpha.10 deployment on kaspa:testnet-10.

The hosted gateway is a public integration target for implementers exercising the Kaspa x402 wire flow against a real server. It is not a wallet, custodian, mainnet service, or availability commitment.

The current Worker uses kaspa-exact-v2 with the default standard-native profile and also supports batch-settlement. The optional additive exact profile is implemented but is advertised only when a current KIP-10 head is available.

Historical gateway evidence remains available in the immutable release snapshots. This page describes only the active alpha.

Base URL

https://demo.kaspa-x402.org

Endpoints

HEAD follows the same payment behavior as GET without a response body. OPTIONS returns the CORS preflight response.

Additive-head administration is operator-only:

These routes require a bearer token stored as a Worker secret.

Current Payment Terms

The gateway uses:

• network: "kaspa:testnet-10";
• asset: "KAS";
• accepted finality;
• exact price 20000000 sompi;
• batch voucher charge 500 sompi;
• batch minimum deposit 20000000 sompi;
• batch claim reserve 10000000 sompi;
• batch refund horizon of current virtual DAA plus at most 36000;
• minimum server refund safety lead of 1000 DAA score.

Kaspa has no universal 10000000 sompi consensus dust floor. KIP-9 storage mass depends on the complete transaction shape. The reference Worker uses 10000000 sompi as a conservative application policy for on-chain outputs, including the advertised batch successor reserve.

The deployed Worker emits batch offers with binding kaspa-escrow-v2, template kaspa-x402-escrow-v2, and a 10000000 sompi claim reserve. Its exact offers carry binding kaspa-exact-v2 and an explicit profile:

• standard-native needs no merchant head inventory;
• additive spends the advertised KIP-10 head and recreates a same-script successor increased by exactly the advertised amount.

An unpaid additive offer reads the current head but does not reserve, retire, or consume it. A successful settlement atomically claims the advertised outpoint and advances the durable lineage. Stale competing clients receive a fresh 402 for the current head.

Additive Head Operations

Register head records with:

KASPA_X402_DEMO_ADMIN_TOKEN=<token> \
  npm run demo:exact-heads -- register --file heads.json

Check availability with:

KASPA_X402_DEMO_ADMIN_TOKEN=<token> npm run demo:exact-heads -- stats

If a known external transaction advanced a head, reconcile it with the complete ordered accepted lineage:

KASPA_X402_DEMO_ADMIN_TOKEN=<token> \
  npm run demo:exact-heads -- reconcile \
  --head-id <head-id> \
  --transactions <first-txid>,<next-txid>

Each transaction must spend the preceding outpoint, preserve the same script and output index, satisfy the KIP-10 threshold, and end at the current unspent head. A same-address output without that lineage is never adopted.

Verification And Chain Evidence

The Worker uses https://api-tn10.kaspa.org for read-side evidence:

• /info/blockdag for network and virtual DAA health;
• /addresses/{address}/utxos for accepted UTXO evidence;
• /transactions/{transaction_id} and /transactions/acceptance for accepted finality;
• derived escrow-address UTXOs for batch funding.

Exact transaction artifacts are submitted through configured public TN10 PNN/WSS endpoints. The REST submit fallback must not be cited as KIP-10 broadcast evidence because it does not preserve the v1 compute-budget field.

The gateway fails closed when it cannot establish chain health, transaction validity, accepted finality, or required durable state. Protected content is not produced for unsupported schemes or unverifiable payments.

Durable State

Gateway state is held in a SQLite-backed Cloudflare Durable Object. It records:

• exact transaction replay claims;
• reusable additive heads and atomic successor advancement;
• payment-identifier response cache entries;
• batch channel state and settlement commitments;
• request locks, rate counters, metrics, and the latest canary report.

No private keys or wallet seeds are stored. This is a demo deployment pattern, not a production sharding or custody recommendation.

Browser And CORS Use

The public deployment allows browser calls from https://kaspa-x402.org and exposes PAYMENT-REQUIRED and PAYMENT-RESPONSE. Paid retries may send PAYMENT-SIGNATURE.

PAYMENT-SIGNATURE is bearer settlement evidence for this trust domain. Send it only over TLS to the intended gateway and do not publish or log unused payment headers or transaction material.

Current Alpha.10 Evidence

The 2026-08-10 deployment completed funded exact and batch runs:

• Worker version c57eb755-e169-4a00-ac4a-5e035371cad1, built from commit 78f2ada and using fresh demo-gateway-alpha.10 state;
• /supported advertised kaspa-exact-v2 and kaspa-escrow-v2;
• unpaid /exact returned a valid 20000000 sompi offer without inventory;
• transaction id 8876bcd3a97592d6f5a2583c60994b1f5425067a3db23077851d47fe91bb2ffb;
• paid request returned HTTP 200 at accepted finality;
• identical retry returned the same settlement;
• cross-resource reuse returned HTTP 409 with invalid_transaction_state;
• batch channel 4920563a8f4ff59bd8fc6422f0e939a639e234f4117c4abbfabeda3ad5b07afb opened with a deposit-voucher on stable covenant ID e83c52704998c7a72b24e93dad918ba16d9554ffb605ed8d29fb3276b1e1dcee;
• voucher-only reuse returned HTTP 200 on the same channel and covenant ID;
• replaying the stale deposit voucher returned corrective HTTP 402; and
• the scheduled canary passed TN10 REST, release-snapshot, schema, docs, offer, and unsupported-scheme checks.

The Alpha.10 source, package, specification, vector, and live-proof gates were completed before deployment. The evidence above is from the released source and public npm package version.

Testnet Funding

Testers need their own kaspa:testnet-10 wallet or SDK flow. The public faucet is:

https://faucet-tn10.kaspanet.io/

Deployment, rollback, disable, canary, and incident procedures are in the demo operations runbook. Full transaction evidence is in the live testnet report.

Source: /docs/testnet-gateway.md