a stellar wallet//with a card machine in it
Your keys never
leave this device.
StellarKey is two things in one app. A self-custody Stellar wallet, where the vault is encrypted in your browser and every signature is shown to you before it happens. And a point of sale, so a shop can take payments straight into that same wallet, with no processor in the middle.
Horizon for the chain · this device for everything else
- AES-256PBKDF2-GCM vault, encrypted here, never uploaded.
- 0Accounts, servers or custodians between you and your money.
- 1Network dependency. Horizon, the public Stellar API.
- 0 %Platform fee at the counter. There is no platform to pay.
the wallet//encrypted on device//hardware ready
A wallet that assumes nothing about you.
No account to create, no email to confirm, nobody to ask for your balance back.
signing
Every signature reviewed before it happens
Destination, amount, memo, fee tier and the exact operations, laid out before anything is signed.
- Trezor signing, so the key never touches a browser
- Multi-sig with co-signers, weights and thresholds
- Batch disperse to many recipients in one transaction
custody posture
The wallet grades its own security
Encryption, auto-lock, recovery state and backup health are scored rather than assumed, so you can see the gap before it matters.
act two//the same wallet, behind a counter
Then it opens a till.
Merchant Mode turns the wallet into a point of sale. Same keys, same device, same account, with a counter on top. Everything below is optional: the wallet works perfectly well without ever switching it on.
how a sale works//four steps//no middle
Nothing sits between the customer and your account.
There is no in between, because there is no one in it. The till watches the public ledger and files the payment against the order itself.
- 01 / ring up
Build the ticket
Keypad or product tiles, with per-line VAT, modifiers and discounts worked out on device.
- 02 / tip
Ask, don’t assume
The customer is offered the tip before the code appears, never added quietly after.
- 03 / charge
Show the code
A SEP-7 request carrying your address, the amount, and a memo unique to this order.
- 04 / settle
It files itself
The till matches the memo off Horizon and marks the order paid, in about five seconds.
and you can check it//without trusting us
Every sale leaves a public receipt.
This is a real settled order. The transaction hash is on the Stellar ledger. Open any explorer and check it yourself. No other card machine can offer that, because their record lives in their database.
| order | #1024 · MC-O-1024 |
| total | € 4.80 · VAT 23 % included |
| received | 22.3755101 XLM |
| payer | GC33 RABA … Z03U 7604 |
| transaction | ef3a 5dd7 … 016a b94f |
| matched by | memo |
| ledger | 4,369,215 |
a genuine settlement on stellar testnet, taken from the receipt screen below
the counter
A till, not a checkout page
The ticket builds on the right while the keypad or the catalogue fills it. Staff are roles on this device, gated by a PIN, and every action is attributed to whoever is on shift.
one qr//one memo
The memo is the reconciliation
That reference ties the payment to this order. Matched from the public ledger, on device, with no webhook to receive and nothing to poll but Horizon.
- Underpaid and overpaid handled explicitly, not silently
- Anything unmatched lands in a tray instead of disappearing
- Charges keep running while the till serves the next customer
proof
A receipt that is also an audit trail
Lines, VAT by rate, the payer’s address, the transaction hash, how it was matched and the ledger it closed in, all on one sheet, ready for whoever asks.
the arithmetic//published rates//live network fee
A card machine charges 1.75 %. Stellar charges 0.00001 XLM.
This is not a discount. It is a different structure. There is no processor taking a percentage, because the payment goes from the customer’s account to yours. What is left is the network’s own fee, which is fixed, tiny, and the same on a €5 coffee as on a €5,000 invoice.
| a year of card fees | rate | you lose |
|---|
rates as published by each provider for in-person payments · stellar fee from the live network, priced at the current XLM rate
records//computed locally//sent nowhere
And keeps the books where you can reach them.
the same strip opens orders, invoices, customers and insights
Orders
Every sale with its payment, its ledger and the memo that matched them.
Takings by hour
Today against what this weekday normally does, so a quiet afternoon reads as quiet.
Catalogue
Products, categories, modifiers, per-item tax rates and stock.
Customers
Built from the addresses that actually paid you. Only the address is ever public.
What stands out
The two or three facts worth acting on, written out rather than left in a chart.
Tax and refunds
VAT by rate over the period, with refunds netted off.
Asset mix
What share of the day arrived in which asset, at the rate it settled.
who it is for
Three people, one app.
- the counterSmall shops taking paymentA café, a market stall, a studio. You want the money and you do not want a third of a percent of every coffee going somewhere else.
- the holderPeople holding their own keysMulti-sig, hardware signing, watch-only accounts and a recovery flow that rehearses itself. The vault never leaves the browser.
- the accountantWhoever does the booksVAT by rate, per-line tax, refunds netted off, and a transaction hash against every figure. Exports without asking anyone’s permission.
limits//stated plainly
What StellarKey will never do.
Each of these was considered and refused, because each one needs a server, and a server is the thing this product will not have. Anything that cannot run on your device is not a feature, it is a promise somebody else has to keep.
- ✕Host a payment pageA link a stranger opens has to be served by someone. There is no one.
- ✕Sync two tillsShared state needs a shared database. One install is one terminal, and says so.
- ✕Chase an invoice on a timerSending email on a schedule means a machine awake when you are not.
- ✕Pay out to a bankThat is an anchor’s job, and an anchor is a custodian by another name.
- ✕Reset your passwordNobody holds a copy. Your recovery phrase is the whole story.
- ✕Know anything about youNo analytics, no telemetry, no account. The trade is real, and it is the point.
the awkward questions
Answered before you ask.
What if the price moves between the code and the payment?
The charge is quoted in your currency and converted at the moment it is raised, then held for the life of the request. If the payment arrives outside a tolerance you set, the till says underpaid or overpaid explicitly rather than rounding it away, and the difference is yours to settle, in cash or with a top-up charge.
What if my customer doesn’t have a Stellar wallet?
Then they cannot pay this way, and you take cash or a card instead. This is not a replacement for every payment method on day one; it is the one that costs you nothing when the customer does have a wallet. Be honest with yourself about your own customers before switching anything off.
Where does my money actually go?
Straight to the Stellar account you nominate, which you hold the keys to. It never passes through an account we control, because there is no account we control. That is also why there is nobody to freeze it, and nobody to ask if something goes wrong.
What happens if I lose the device?
Your funds are on the ledger and recoverable from your recovery phrase on any device. Your records, meaning orders, catalogue and customers, live in that browser’s encrypted storage, so export a backup and keep it somewhere. The app has a guided flow for both, and it will tell you when it thinks you are exposed.
Is this legal for my shop?
Taking payment in a digital asset, and how it is taxed, depends entirely on where you trade. The app gives you per-line VAT, VAT by rate over a period, and a transaction hash against every figure, which is what an accountant will ask for. It does not give you advice. Ask someone qualified where you trade.
What does it cost?
Nothing to us. There is no subscription, no per-transaction fee and no account. You pay Stellar’s network fee, currently 0.00001 XLM per transaction, which at today’s rate is a small fraction of a cent. If we ever charge for something, it will be something other than your takings.
no signup//no custodian//first sale today
Start taking payments in minutes.
Create a vault, open the till, and put a code in front of a customer. Nothing to register, nothing to wait for, and nothing about the shop leaves the device it runs on.
- 01
Create a vault
A password encrypts a new Stellar key in this browser. Write down the recovery phrase.
- 02
Turn on Merchant Mode
Name the shop, set your tax rates and tip presets, and choose which assets you accept.
- 03
Add it to the home screen
It installs as an app from the browser. No store, no review, no waiting.
- 04
Take a payment
Ring one up and show the code. Watch it settle against the order.