Live on mainnet · Groth16 verified
Smart, private payments on on Solana
Sender anonymity by default. On-chain verification of Groth16 proofs. Gasless UX via relayers. Optional ElGamal for amount privacy.
* No wallet→merchant linkage on-chain; proofs verified by program.
ShadowPay
Private X402 payments
Relayer-mediated settlement breaks wallet→merchant linkage. Groth16 proofs verified on-chain with deterministic PDA escrow. Gasless UX via relayers. Optional ElGamal for amount privacy.
Challenge
Challenge: 402-style request
Merchant issues a ShadowPay 402 challenge with amount, memo, and expiry. Customer only signs the intent—not a transaction.
ShadowID
Anonymous identity layer
Merkle commitments with per-service pseudonyms. RLN-style rate limits + nullifiers for abuse control.
Pseudonym
shadow-0000-00d9
requests remaining: 3/3 epoch
ShadowMSG
Encrypted on-chain messaging
End-to-end encryption with on-chain commitments. RLN anti-spam. Receipts and agent coordination without exposing user identity.
ShadowPath
ZK relayer & shielding
1,000,000-deep Merkle anonymity set · Client-side Groth16 proof generation · Multi-hop relayers · Programmable exits
Built for developers
Progressive disclosure keeps implementation fast. Choose the API reference or step through the quickstart checklist.
Access every route via our OpenAPI spec with versioned schemas. Deterministic proof verification ensures the same program execution across relayers.
Verified & integrated with