Tunnels, proxies, and stable IPs. No accounts. No API keys.

$ consensus tunnel http localhost:3000

✓ Tunnel online
  https://amber-otter.tunnel.canister.software → localhost:3000
  

An HTTP tunnel puts a local port or device on a public HTTPS URL in seconds — the same job as an ngrok or Cloudflare tunnel, without the account. No signup, monitor every request in real time.

import { ProxyClient, createPaymentFetch } from '@canister-software/consensus-cli'

const proxy = ProxyClient(await createPaymentFetch(), {
  node_region: 'east-us',
  cache_ttl:   60,
  limit_usd:   0.05,   // stands down to direct fetch when hit
})

// routed through a node: deduplicated and cached
const res = await proxy.fetch('https://external.com')

Wrap fetch() once and every outbound call routes through the Consensus proxy: protected, deduplicated, and cached. Works as a forward proxy for outbound calls and a reverse proxy in front of your own services. Existing route handlers stay untouched.

$ consensus ip list --region east-us
NODE ID        DOMAIN                                    REGION    SCORE
a3f1c94b2e07   a3f1c94b2e07.consensus.canister.software  east-us   96

$ consensus ip lease a3f1c94b2e07
✓ Leased: a3f1c94b2e07.consensus.canister.software (traffic pinned)

Lease a verified, performant node and pin every tunnel, proxy, and WebSocket to one static IP address. Whitelist the IP once with an upstream API, reconnect automatically, and stop fighting dynamic firewalls.

import { SocketClient } from '@canister-software/consensus-cli'

const client = SocketClient(fetchWithPayment)

// prepay a bounded, metered session
const auth = await client.requestToken({
  model: 'hybrid', minutes: 60, megabytes: 500,
})

const session = await client.connect(auth)
session.on('message', (m) => console.log('recv', m))

Prepay time, data, or both with a single x402 payment. Each persistent WebSocket session is metered by the protocol and closed cleanly once the budget runs out. No accounts, no state.

Pure application-level routing with a Cache.

Two ways to wire into a codebase. Import the SDK and call ProxyClient or SocketClient as middleware directly in application code, or hand the protocol native handlers through dependency injection. Both paths run at the application level and never decrypt HTTPS, so existing request logic and TLS stay exactly as written.

Nothing to sign up for and no keys to rotate. Configuration lives in local profiles on the machine. Create named profiles, customize defaults and spend limits per project, and switch between them instantly, with nothing held on a remote server.

Every node earns its place. Before serving any traffic a node passes an encrypted performance test, and only nodes that stay connected and healthy remain in rotation. Traffic between the runtime and each node travels over encrypted channels, so data in transit stays protected across every hop.