Observed arrival · 2026-09-28
Satmeter: API credentials with their own limits
A browser-based L402 demo explores metered API access using Lightning invoices and credentials that encode their own limits.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers exploring accountless API payment and access control
- Worth noticing
- Its browser demo builds and verifies an HMAC-SHA256 macaroon chain, but does not route an actual Lightning payment.
Field notes
The page constructs a signed testnet BOLT-11 invoice in the browser and builds and verifies macaroons using an HMAC-SHA256 chain; it also checks the payment preimage against the invoice’s payment hash. Interactive controls let visitors make calls, narrow a credential to three calls, and test two ways of undoing that restriction. The demo does not contact a Lightning node or route payment, and it retains a call counter keyed by payment hash.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue