Sovereign Infrastructure
Zero-KYC, edge-native developer tools. No telemetry. No corporate gatekeepers. Automated BTC settlement.
Flagship Bundle
Developer Privacy Suite
All 6 Extensions + 100,000 API Credits + Developer Portal Access. The ultimate sovereign toolkit.
Start Free - 1,000 Credits
No account. No KYC. No credit card. Get instant API access and try the full stack.
Developer Credit Packs
Purchase credits to issue licenses and API keys via the Developer Portal.
Starter Pack
100,000 credits. Good for ~60 extensions.
Builder Pack
300,000 credits. Good for ~180 extensions.
Reseller Pack
4,000,000 credits. For B2B distributors.
Browser Extensions
Flux (Chromium)
User-Agent rotation & fingerprint protection. Spoofs UA, blocks extension detection, WebRTC leak protection.
Flux (Firefox)
User-Agent rotation & fingerprint protection. Spoofs UA, blocks extension detection, WebRTC leak protection.
ExifZero (Chromium)
Metadata/EXIF stripper & steganography defense. Automatically removes hidden EXIF data before upload.
ExifZero (Firefox)
Metadata/EXIF stripper & steganography defense. Automatically removes hidden EXIF data before upload.
Inprompter (Chromium)
Encrypted prompt/context pipeline for AI workflows. Slash command injection, AES-GCM encryption.
Inprompter (Firefox)
Encrypted prompt/context pipeline for AI workflows. Slash command injection, AES-GCM encryption.
📜 Ash Proof API Documentation
Generate immutable, cryptographically verifiable timestamps for any data without exposing the data itself.
Endpoint
POST https://ash-proof.flux-ext-capital401.workers.dev/v1/proof
Headers
Content-Type: application/json
Authorization: Bearer <YOUR_API_KEY>Payload
{
"hash": "3394c7d33aa1b3864851451344ed3c412833c20c3562ca7bb2eded7d33f1541c"
}* Must be a valid 64-character lowercase SHA-256 hex string. We are mathematically blind to the original data.
cURL Example
curl -X POST https://ash-proof.flux-ext-capital401.workers.dev/v1/proof \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ak_your_key_here" \
-d '{"hash": "3394c7d33aa1b3864851451344ed3c412833c20c3562ca7bb2eded7d33f1541c"}'Ash Uptime API
10 Credits / 24-Hour Lease
Sovereign, KYC-free heartbeat monitoring for your nodes and relays. Strict HEAD-only requests, 3s timeout, SSRF-immune. Receive instant, cryptographically signed Nostr alerts when your infrastructure goes dark.
Ash Vault API
5 Credits / Vault
Mathematically blind, burn-after-reading ephemeral secret vault. Client-side encrypted payloads, auto-immolation after 1 read or 24 hours. Zero custodial risk. The sovereign standard for sharing API keys and credentials.
⏱️ Ash Uptime API Documentation
Register your sovereign infrastructure for automated, decentralized heartbeat monitoring.
Register Endpoint
POST https://ash-uptime.flux-ext-capital401.workers.dev/v1/register
Headers
Content-Type: application/json
Authorization: Bearer <YOUR_API_KEY>Payload
{
"target_url": "https://your-nostr-relay.com",
"nostr_pubkey": "your_64_char_hex_pubkey_here"
}* Costs 10 credits. Creates a 24-hour lease. Checks every 5 minutes via HEAD request. Alerts sent via signed Nostr event.
🔐 Ash Vault API Documentation
Create ephemeral, burn-after-reading secret vaults. We are mathematically blind to your data; encryption happens client-side.
1. Create Vault
POST https://ash-vault.flux-ext-capital401.workers.dev/v1/create
// Headers: Authorization: Bearer <YOUR_API_KEY>
// Payload: { "ciphertext": "<your_encrypted_string>" }
// Cost: 5 Credits. Auto-deletes after 1 read or 24 hours.2. Retrieve & Burn
GET https://ash-vault.flux-ext-capital401.workers.dev/v1/retrieve/<UUID>
* No authentication required. The UUID is the key. Returns 410 Gone if already read.
Client-Side Encryption Snippet (Web Crypto API)
// Generate a random 256-bit key and encrypt plaintext locally
async function createVaultPayload(plaintext) {
const key = await crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, true, ['encrypt', 'decrypt']);
const iv = crypto.getRandomValues(new Uint8Array(12));
const enc = new TextEncoder();
const ciphertext = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: iv }, key, enc.encode(plaintext));
// Export key and ciphertext to hex/base64 to send to the API
const exportedKey = await crypto.subtle.exportKey('raw', key);
return {
ciphertext: btoa(String.fromCharCode(...new Uint8Array(ciphertext))),
key: btoa(String.fromCharCode(...new Uint8Array(exportedKey))),
iv: btoa(String.fromCharCode(...iv))
};
}Defend Dataset Integrity
Standard rate-limiting fails against authorized API users training models. Aegis Protocol provides mathematically proven, zero-knowledge edge utilities to protect dataset integrity and test RAG pipeline containment.
ash-babel
Injects Zero-Width Characters and homoglyphs to break LLM tokenizers while remaining human-readable. Deterministic via seed.
Cost: 2 credits / request
ash-chaff
Generates highly realistic, structurally valid, but factually false data (Python libs, medical records) to poison vector databases and detect scraping.
Cost: 5 credits / request
# Local Core (Air-gapped)
git clone https://github.com/ghost-architect/aegis-protocol.git
python3 core/babel.py input.json output.json --seed 8675309 --density 0.2
# Hosted Edge (Zero-Knowledge)
curl -X POST https://ash-babel.flux-ext-capital401.workers.dev/v1/obfuscate \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{"text": "sensitive_data"}'
Zero-Telemetry Browser Extensions
Hardened, open-source browser extensions designed for absolute privacy. No tracking, no KYC, no corporate telemetry.
Sovereign Python & Rust Cores
For operators requiring absolute isolation. These cores run locally, requiring zero network connectivity.
- > Aether Runtime MVP (Ephemeral Execution)
- > Aegis Babel Core (ZWC Obfuscation)
- > Aegis Chaff Core (RAG Poisoning)
- > Sovereign License SDK (Python)
- > Sovereign License SDK (Rust)