Built so money cannot drift
The rules Inlet keeps on every payment are written into the code, and tests try to break each one.
The rules
A fresh address every time
Each payment gets its own address, never reused, so one payment can never be mistaken for another.
Keys behind a wall
The keys live in a separate signer process with no public route. The API and checkout never hold them.
Approved wallets only
Money leaves only to payout addresses approved for your account. The signer checks the list itself.
Bigger money waits longer
Small payments clear after a few blocks; anything above $2,000 waits for the network's finality.
Signed once, sent until it lands
Each payout is signed once and the same transaction is rebroadcast until it is confirmed, within daily limits the signer enforces itself.
Surplus goes cold
Only what payouts need stays in the hot wallet. The rest moves to a cold wallet.
Two-factor sign-in
Dashboard sign-in works with an authenticator app, and teams have viewer, developer and owner roles.
Signed webhooks
Every webhook carries an HMAC-SHA256 signature over its raw body, so your server can reject forgeries.
Security questions
Does Inlet hold my money?
Between payment and payout, yes: payments arrive at addresses Inlet controls and count toward your balance. Inlet pays it to your approved wallet automatically at your threshold, or when you withdraw from $10.
Can a browser mark a payment paid?
No. A browser can only ask Inlet to look at the chain again. A payment is paid when the network says so, after the confirmations its amount needs.
What stops a payout going to the wrong address?
Payouts go only to addresses approved for your account, and the signer refuses any other. You cannot change the payout address while a withdrawal is on its way.
Put a QR on your counter.
Join our first merchants. We'll set you up with test keys.