Kobaru
  1. Transparent Proxy
Kobaru
  • Kobaru.io Gateway API
    • Introduction
      • What is Kobaru?
      • Quick start
      • How x402 works
    • Integration
      • Standard x402 SDK
      • Advanced SDK
      • Transparent proxy integration
      • Direct API integration
    • Core Concepts
      • Available Chains and Assets
      • Payment schemes
      • Security
      • Usage models
    • Guides
      • Pricing your API
      • Going to Production
      • Testing with devnet
      • Bazaar discovery
    • API Reference
      • Error Handling
      • Get Supported Payment Kinds
      • Verify Payment Authorization
      • Settle Payment
    • Discovery
      • List Discovery Resources
    • Transparent Proxy
      • Overview - Transparent Proxy
      • Upstream authentication
      • Troubleshooting
      • Constraints and security
      • Capabilities and routes
      • Domain verification
      • Service setup
    • Schemas
      • SupportedResponse
      • ErrorResponse
      • UnauthorizedResponse
      • RateLimitResponse
      • VerifySuccessResponse
      • VerifyErrorResponse
      • SettleSuccessResponse
      • SettleErrorResponse
      • DiscoveryResourceItem
      • ListDiscoveryResourcesResponse
  1. Transparent Proxy

Service setup

A service represents a single API you want to monetize through the proxy. Each service gets a unique gateway URL that forwards traffic to your backend.

Creating a service#

1.
Go to Services in the Kobaru Console
2.
Click Create Service
3.
Fill in the details:
Name: A descriptive name (e.g., "Weather API")
Type: Select Proxy
Base URL: Our console helps you construct your base URL

Building your base URL#

The console helps you construct a validated base URL from your verified domains:
FieldExampleDescription
Domainexample.comDropdown of your verified domains
SubdomainapiOptional prefix (e.g., api, v2)
Path/v3Optional path suffix
The builder shows a live preview:
https://access.kobaru.io/example/* --> https://api.example.com/v3/*
If you only have one verified domain, it's selected automatically.

How slugs work#

Every service gets a slug - a URL-safe identifier that appears in your gateway URL:
https://access.kobaru.io/{slug}/*
The system generates slugs automatically from your base URL by extracting the core domain name:
Base URLGenerated slug
https://api.example.comexample
https://shop.example.com.brexample
https://api.weather-service.comweather-service
If the generated slug is already taken, the system falls back to the full domain with hyphens (e.g., api-example-com), or appends a counter if needed.
Enterprise customers can choose and design their own custom slugs.
Important: Changing the base URL automatically regenerates the slug. This keeps the slug consistent with the actual target domain.

Base URL requirements#

Your base URL must meet these requirements:
HTTPS only - We accept only HTTPS URLs
Verified domain - The domain must be verified in the Console
Security restrictions - We can block certain domain names for security reasons
For local development, use an HTTPS tunnel like ngrok to expose your local server.
See Constraints and security for complete details.

Managing services#

Editing a service#

1.
Click the edit icon on the service row
2.
Update the name or base URL
3.
Changing the base URL regenerates the slug automatically

Deleting a service#

1.
Click the delete icon
2.
Confirm deletion
You cannot delete a service that has routes depending on it. Delete the routes first.

Activating and deactivating#

Services have an active/inactive status. Inactive services don't process traffic. Toggle the status from the service row to temporarily disable a service without deleting it.

How request forwarding works#

When a request arrives at your gateway URL, the proxy:
1.
Strips the slug prefix from the path
2.
Appends the remaining path to your base URL
3.
Forwards the request with all original headers (except payment headers)
4.
Adds X-Kobaru-Payment-Hash for payment tracking
5.
Returns the response from your backend to the client
Example:
Request:  GET https://access.kobaru.io/weather/forecast?city=London
Forwards: GET https://api.weather-service.com/v3/forecast?city=London
Headers removed before forwarding:
HeaderWhy
Payment-SignatureContains the x402 payment token
AuthorizationStripped to prevent credential leakage to upstream
If you have upstream authentication configured, the proxy injects your API key after removing these headers.

Next steps#

Your service is created but not yet accepting payments. Next, configure upstream authentication (optional) or go straight to setting up capabilities and routes.
Modified at 2026-02-10 21:53:10
Previous
Domain verification
Next
SupportedResponse
Built with