ArkAPI.dev Fund
Project notes

ArkAPI changelog

Recent changes across ArkAPI, Bark payment plumbing, billing, and the little arcade corner we keep using to test the edges of the stack. Newest updates appear first.

October 25, 2026

Website Security Check API

  • Released a passive, agent-ready scanner for one public website per call at 5 sats.
  • Added PHP and Apache version disclosure, php2shell patch assessment, common browser security headers, and recommendations in structured JSON.
  • Added WordPress detection and official core update assessment when the site discloses a WordPress version.
  • Added optional ai_analysis: true for a prioritized interpretation based only on normalized scanner facts, excluding raw page text and target-controlled banners.
  • The scanner uses bounded requests, revalidates redirects against SSRF, and sends no exploit payloads.
October 22, 2026

Bark 0.8 and paid-flow validation

  • Updated Ark-backed wallet compatibility to the stable Bark 0.8 release.
  • Completed a funded end-to-end check that created and funded a session and successfully completed a paid API call.
  • Public endpoints, Bearer and Ark-402 access, and published pricing remain unchanged.
October 11, 2026

Payment intelligence and faster onboarding

  • Released a read-only Bitcoin payment intelligence API for Ark, BIP-321, BOLT11, BOLT12, LNURL, Lightning addresses, Silent Payments, and on-chain addresses.
  • Added cryptographic BOLT11 verification, exact satoshi arithmetic, network and amount mismatch checks, deterministic route recommendations, and Tor-only optional live lookups.
  • Changed the homepage journey to begin with a working free security API and a copy-ready curl command instead of requiring funding first.
  • Added a 50-sat starter session, enough for ten standard 5-sat calls, while preserving Ark, Lightning, Bearer, and Ark-402 access.
  • Expanded OpenAPI, agent manifests, llms.txt, the ArkAPI skill, sitemap discovery, and public use-case documentation.
September 23, 2026

One-hour post-quantum report cache

  • Cached completed reports by normalized hostname for one hour to make repeated checks faster and reduce duplicate TLS probes.
  • Added cache hit or miss status, report age, expiry time, and the original scan time to API responses and documentation.
  • Coalesced simultaneous checks for the same hostname while keeping the cache bounded.
  • Kept the existing daily allowance, pricing, billing, and rate-limit behavior unchanged for cached reports.
September 23, 2026

Free caller IP utility

  • Added GET /api/my-ip as a free, accountless endpoint that returns the IPv4 or IPv6 address observed by ArkAPI.
  • Added compact JSON output by default and plain-text output with ?format=text for curl and shell workflows.
  • Published the endpoint through the live catalog, OpenAPI, MCP discovery, agent manifest, skill, and documentation.
September 22, 2026

Post-quantum TLS readiness checker

  • Added a live RFC 10024 X25519MLKEM768 check with a direct readiness verdict, A–F grade, transparent 100-point breakdown, evidence, and remediation guidance.
  • Separated hybrid TLS key establishment from certificate authentication, ordinary TLS 1.3, and classical X25519 client compatibility.
  • Included 10 successful checks per identity each UTC day without an account; funded Bearer and Ark-402 callers can continue at 5 sats per successful call.
  • Added strict request parsing that rejects duplicate keys, unknown fields, trailing JSON, oversized bodies, injection characters, and private or reserved network targets before allowance or billing.
  • Published browser, OpenAPI, live catalog, MCP, Tor, and I2P discovery paths with examples that use reserved example domains.
  • Tightened the browser checker so the domain form and core result fit much higher on the page while detailed evidence remains available below.
  • Standardized the ArkAPI header, footer, lightning wordmark, and navigation across the public website.
September 22, 2026

Partner VPN and eSIM services

  • Added a live VPN and travel eSIM catalog powered by NadaNada, with clear partner, fulfillment, and support disclosures.
  • Added Tor checkout handoffs with Lightning-only payment guidance.
  • Published a remote MCP endpoint with read-only catalog tools for agents across clearnet, Tor, and I2P.
  • Refreshed the homepage navigation, grouped footer, partner-services card, and rotating Bitcoin, sats, Tor, privacy, and security messages.
September 22, 2026

ArkAPI client v0.1.5: exact included-call accounting

  • Reconciled conservative local spend reservations with the final service receipt after successful Bearer and Ark-402 calls.
  • Included Ark-402 calls that return a 0-sat receipt now increase the successful-call count without incorrectly adding 5 sats to local spend.
  • Added a no-payment regression fixture and passed the complete client test suite on native AMD64 and ARM64 builders.
  • Published signed, immutable artifacts with updated checksums, SBOMs, source archives, and build provenance.
September 22, 2026

ArkAPI client v0.1.4: better MCP Chat results

  • Made arkapi_chat_completions return the assistant's answer as normal MCP text while retaining the complete OpenAI response in structuredContent.
  • Added structured billing receipts for Chat, including the actual cost and available included-call, Ark credit, and top-up information when supplied by the selected authentication path.
  • Defined Chat as a completed, non-streaming MCP tool and added clear guidance to use the direct OpenAI-compatible endpoint when live SSE streaming is required.
  • Added an actionable discovery error when an MCP host is pointed at chat.arkapi.dev instead of the main arkapi.dev catalog.
  • Published signed, immutable AMD64 and ARM64 artifacts with checksums, SBOMs, source archives, and build provenance.
  • Rebuilt the main ArkAPI page around no-account access, Chat, aggregate live usage statistics, and a shorter path to funding or documentation.
  • Added privacy-safe 24-hour charts for credited funding by Ark or Lightning and API traffic by clearnet, Tor, or I2P, without exposing addresses, tokens, prompts, or user-level activity.
September 21, 2026

ArkAPI Chat: OpenAI-compatible inference paid in sats

  • Launched an OpenAI-compatible chat API and browser interface with the stable arkapi-code-fast model alias.
  • Added funded Bearer sessions and body-bound Ark-402 authorization, with three successful included calls per UTC day and a flat 5-sat price afterward.
  • Added JSON, streaming SSE, function/tool calls, native Tor access, Python and OpenCode examples, and machine-readable agent discovery.
  • Migrated the stable model alias to a faster production inference backend while preserving Bearer, Ark-402, SDK, streaming, and Tor compatibility.
  • ArkAPI does not log prompt or completion content or store conversation history; the provider does not use inputs or outputs for training.
  • Improved small-budget reliability with answer-first inference and added exact zero-cost Ark-402 receipts for included calls.
  • Raised the web interface and API to an 8,192-token output allowance and added a clear continuation control when a response genuinely reaches that limit.
  • Added a versioned browser client, complete-answer prompting, and early-stop detection so incomplete sentences, tables, and code blocks offer an explicit continuation.
  • Added safe, polished Markdown presentation for headings, lists, tables, quotations, links, and code while preserving the original response for copying.
  • Made payment recognition automatic for both first-time funding and later top-ups, with a live balance update as soon as the funding event confirms.
  • Extended funded Bearer sessions to a rolling 30-day inactivity window and made the browser clear stale balance and allowance data whenever a session is no longer valid.
  • Added streaming usage events, a direct onion web interface, and same-origin discovery links on Ark-402 payment challenges.
  • Made the Tor status badge switch to a pulsing Tor active indicator only on the native onion interface.
  • Improved public discovery with a canonical Bitcoin AI inference guide, machine-readable pricing and FAQ metadata, and prominent links from the homepage and documentation.
September 21, 2026

ArkAPI client v0.1.3: portable MCP chat discovery

  • Normalized discovered MCP tool names to portable letters, numbers, underscores, and hyphens.
  • Exposed OpenAI-compatible chat as arkapi_chat_completions with an explicit mapping to /v1/chat/completions.
  • Preserved all existing tool names and added collision detection plus regression coverage for the chat mapping.
  • Published signed, immutable AMD64 and ARM64 artifacts with checksums, SBOMs, source archives, and build provenance.
September 20, 2026

ArkAPI client v0.1.2: conservative uncertain-billing accounting

  • Corrected local spend accounting so an ambiguous Ark-402 failure retains the API-cost reservation even when automatic top-ups are disabled.
  • Definitive no-credit failures still release their reservation, preserving budget for requests known not to have been billed.
  • Added no-payment regression fixtures for both outcomes and passed the full client test suite on native AMD64 and ARM64 builders.
  • Published signed, immutable artifacts with updated checksums, SBOMs, source archives, and build provenance.
September 20, 2026

ArkAPI client v0.1.1: native Tor proxy support

  • Added native SOCKS5 and socks5h support to the bundled Ark-402 helper, including proxy-side hostname resolution for Tor.
  • Added explicit ARK402_PROXY and --proxy configuration while retaining standard proxy-environment support.
  • Added a release regression test that verifies hostnames are sent to the SOCKS proxy and applied it to both native architecture builds.
  • Hermes Agent validation confirmed 31 MCP tools over the onion service, signed GET and POST calls with local Bark signing, reusable credit after an upgrade and restart, and no direct-network fallback when Tor was stopped.
  • Corrected the official onion configuration to set HTTP_PROXY for its http:// origin in addition to the HTTPS and Ark-402 helper proxy settings.
  • Published signed, immutable AMD64 and ARM64 artifacts with updated checksums, SBOMs, source archives, and build provenance.
September 20, 2026

Signed, versioned client releases

  • Published immutable versioned downloads for the ArkAPI client and Ark-402 helper on Linux AMD64 and ARM64.
  • Added Ed25519-signed SHA-256 checksums, a pinned public-key fingerprint, CycloneDX SBOMs, minimal source archives, and machine-readable build provenance.
  • Built and executed each architecture on a matching native host and added a release gate for fixable high and critical dependency findings.
  • Updated the client installation guide with signature and artifact verification steps.
September 20, 2026

Ark payment reconciliation and domain-report grading

  • Improved Ark funding reconciliation across current Bark wallet-history formats and expanded regression coverage for paired transfer records.
  • Updated domain-report header grades so informational modern-browser and generic server metadata are treated neutrally.
  • Verified the changes with separate-wallet mainnet funding, a paid Domain Intel request, the funded Signet canary, and a clean high/critical image scan.
September 19, 2026

Official ArkAPI client and MCP tools

  • Released first-party Linux AMD64 and ARM64 clients for API discovery, funded sessions, balance checks, paid calls, and local usage accounting.
  • Added a built-in MCP stdio server that creates typed tools from the live catalog and OpenAPI schemas.
  • Added Bearer and Ark-402 authentication with conservative per-call, daily API, per-top-up, and daily top-up limits; automatic Ark-402 payment remains opt-in.
  • Published matching Ark-402 helpers and SHA-256 checksums for all downloads.
  • Clarified the documentation that live funding uses real Bitcoin mainnet sats and aligned the refund and wallet guidance with current behavior.
September 19, 2026

Broader agent and SDK compatibility

  • Improved public API and discovery compatibility for autonomous agents and standard Python, JavaScript, and Go HTTP clients.
  • Made OpenAPI, LLM guidance, agent skills, health and catalog resources, and payment-required API responses consistently reachable from automated workflows.
  • Verified the documented API and discovery flow across representative client signatures while retaining existing service safeguards and usage controls.
  • Improved bounded caching for public assets and machine-readable discovery while keeping API, payment, and dynamic responses uncached.
  • Tightened browser content restrictions and expanded production health validation after service deployments.
September 11, 2026

Bark 0.7.1 rollout

  • Upgraded every managed ArkAPI Bark client to the verified Bark 0.7.1 release on both Bitcoin mainnet and Signet.
  • The upstream release expands wallet address discovery and fixes VTXO recovery, delegated-refresh locking, and duplicate received-VTXO persistence.
  • Validated the release against copied wallet data before deployment, preserved wallet balances, and passed the ArkAPI test suite and live health checks.
September 7, 2026

Funding reliability and accounting safeguards

  • Reduced Ark wallet load by sharing cached history, excluding expired sessions, and refreshing full history only when balances change or a bounded fallback expires.
  • Improved Lightning settlement handling with a short grace window and a stored-invoice fallback for interrupted status lookups.
  • Hardened credit accounting against duplicate self-transfers, nonpositive amounts, integer overflow, expired-session debits, and transient address-allocation failures.
  • Added bounded service-log rotation and daily monitoring for abnormal funding-ledger activity.
September 6, 2026

Bark 0.7.0 and platform hardening

  • Upgraded the platform from Bark 0.6.2 to the verified Bark 0.7.0 release after testing isolated copies of each wallet.
  • Rebuilt payment and utility services with updated dependencies, non-root runtime users, tighter container permissions, and bounded logs.
  • Remediated all fixable high and critical findings reported by the deployment scanner and added recurring vulnerability scans.
  • Added hourly public-service monitoring, a weekly funded Signet canary, and a privacy-minimized daily operations report.
August 23, 2026

I2P access for ArkAPI

  • Published a persistent I2P B32 destination for ArkAPI, with a clearnet setup guide for users and AI agents.
  • Deployed a pinned i2pd 2.61.0 container with a read-only filesystem, dropped Linux capabilities, private service keys, loopback-only application tunnels, and non-transit operation.
  • Added I2P-aware service URLs, privacy-minimized Apache logs, and transport discovery across OpenAPI, the well-known manifest, LLM text files, sitemap, and agent skill.
  • Added a lightweight watchdog that verifies the local backend and B32 destination, requiring three consecutive failures and enforcing a 30-minute recovery cooldown.
  • Verified ArkAPI end to end through the local I2P HTTP proxy after deployment.
August 22, 2026

Shitcoin Blaster reduced to 5 sats

  • Reduced Shitcoin Blaster from 10 sats to 5 sats per play on Bitcoin mainnet.
  • Centralized the browser payment amount in one runtime constant and aligned the payment modal, in-game prompts, games index, and structured pricing metadata.
August 22, 2026

ArkAPI agent skill

  • Published a first-party ArkAPI SKILL.md for Hermes, OpenClaw, Codex, and other skill-aware agents.
  • Documented safe endpoint discovery, mainnet session funding, bearer-token handling, flat 5-sat billing, bounded retries, ambiguous-response handling, and Tor v3 usage.
  • Added skill discovery to the homepage, documentation, Tor guide, OpenAPI, well-known manifest, LLM text files, robots metadata, and sitemap.
August 22, 2026

Flat 5-sat API pricing

  • Standardized every ArkAPI endpoint at a flat 5 sats per successful call, including AI chat, image generation, screenshots, domain intelligence, and security tools.
  • Aligned live billing, the API catalog, OpenAPI, agent manifests, LLM discovery files, endpoint pages, examples, and source documentation.
  • Corrected legacy price mismatches such as DNS being advertised at 3 sats while charging 5; validation, authentication, and failed-work responses remain unbilled.
June 13, 2026

ArkAPI.dev Platform Mainnet Launch

  • Migrated the entire ArkAPI.dev platform (API gateway, dashboard, billing services, and documentation) to Bitcoin mainnet, enabling real-sat pay-per-call billing.
  • Migrated the official ArkAPI Telegram bot to Bitcoin mainnet, enabling users to fund private query sessions directly via Lightning and Ark.
  • Originally launched a 10-sat mainnet payment gate for Shitcoin Blaster, settling payments directly into the platform's master wallet; current pricing is listed in the newest entry above.
  • Implemented play-ticket consumption logic to clear funded game tokens from memory upon starting a game, enforcing one play per payment.
June 7, 2026

Arcade polish and game feedback

  • Improved Shitcoin Blaster so every powerup now shows a clear on-screen callout when collected, including shield, rapid fire, triple shot, pierce rounds, sat bomb, lightning, and extra life.
  • Added a Contact link to the arcade game footer area and cleaned up footer spacing so navigation pills no longer overlap on desktop or mobile.
  • Kept the ZEC Orchard Leak mechanic and faint coin-fragment effects fast and readable during live play.
June 6, 2026

Bark 0.2.2 and API refresh

  • Upgraded the ArkAPI Bark stack to Bark 0.2.2 and verified the payment-backed API flow after the rollout.
  • Improved the AI Chat API with a newer model path, faster responses, and cleaner handling for current AI provider responses.
  • Ran a fresh pass across the public API catalog, including AI, Bitcoin, domain, security, utility, and search endpoints.
  • Added Zcash/ZEC to Shitcoin Blaster with the official Zcash mark, faint mini-coin hit fragments, and a new "ZEC Orchard Leak" mechanic that spawns temporary counterfeit ghost coins.
May 3, 2026

Block Breaker added

  • Added Block Breaker, a Bitcoin-inspired Breakout arcade demo with block-wall mining, hashrate boosts, multi-ball drops, and mobile controls.
  • Added Block Breaker to the ArkAPI Games index alongside Shitcoin Blaster and Mempool Runner.
  • Improved Block Breaker with smoother paddle movement, pause support, extra-life and difficulty-drop powerups, better status callouts, and larger mobile touch controls.
  • Added a Lightning powerup to Block Breaker that chains through nearby blocks with a bolt trail and bonus breaks.
  • Added an earlier Difficulty Adjustment boss level with a moving weak point, repair pulses, hostile fee spikes, and stronger Lightning damage.
  • Moved the Difficulty Adjustment boss to the top of the board and shifted boss-stage bricks lower for a more natural Breakout layout.
April 26, 2026

Mempool Runner graphics refresh

  • Refreshed Mempool Runner graphics with a layered mempool backdrop, animated lanes, polished sats, pickups, fee spikes, and a livelier Bitcoin runner ship.
April 25, 2026

Game updates

  • Added dedicated changelog links to Shitcoin Blaster and Mempool Runner.
  • Added Extra Life power-ups to both arcade games.
  • Added a Fee Freeze pickup to Mempool Runner for a brief break from rising fee pressure.
  • Added eCash/XEC as a new Shitcoin Blaster altcoin enemy using the official eCash brand icon.
  • Added compact Bitcoin Well referral pills beside the Strike tip links on game pages.
April 24, 2026

Bark 0.1.3 rollout

  • Upgraded the ArkAPI Bark stack to 0.1.3.
  • Enabled private Ark server access token support for the ArkAPI deployment.
  • Added support for canceling pending Lightning receives in the payment flow.
  • Stress-tested cheap API calls, receive creation, receive status reads, and cancel behavior.