~/services
2. service definitions

The full catalog, specs first.

Four service groups on one paid API: compute, network intelligence, domains, and anonymous egress. Daily or per-request pricing, crypto-native payment, and enough implementation detail to know what you are actually buying.

contents
2.1 compute

Footprints from quick test box to heavier workload.

All plans share the same provisioning flow and network defaults — only compute and storage change between tiers. Specs and prices are read live from the API catalog, so this table cannot drift from what gets provisioned.
1C-1G-10G
$0.20 /day
  • vCPU1
  • RAM1 GB
  • Disk10 GB
  • NetworkIPv6+NAT64
≈ $6.00 / month ≈ $73.00 / year
Select 1C-1G-10G
2C-4G-20G
$0.60 /day
  • vCPU2
  • RAM4 GB
  • Disk20 GB
  • NetworkIPv6+NAT64
≈ $18.00 / month ≈ $219.00 / year
Select 2C-4G-20G
4C-4G-40G
$0.80 /day
  • vCPU4
  • RAM4 GB
  • Disk40 GB
  • NetworkIPv6+NAT64
≈ $24.00 / month ≈ $292.00 / year
Select 4C-4G-40G
2.1.1 operational details

What actually ships with each machine.

01

Access

Full SSH root via your ed25519 or RSA public key. No shared hosting abstractions.

02

Firewall

SSH, HTTP, HTTPS open by default. SMTP blocked outbound to keep abuse handling sane.

03

Networking

Global IPv6 with NAT64/DNS64 available for IPv4 destinations that still need reaching.

04

DNS

Auto subdomain on deploy.hyrule.host or register a custom domain during checkout.

05

Network API

Paid direct and Tor HTTP requests for agents, with private-address targets blocked.

06

Lifecycle

1–365 day runtimes. Extend at any time; expired VMs keep a 24-hour grace.

07

Provisioning

Most builds finish in ~60 seconds. The status page updates as the VM comes online.

2.2 network intelligence

Diagnostic evidence, per request.

The same lookups a network engineer runs — DNS, BGP, RDAP/WHOIS, TLS, mail, ports, NAT, VoIP — sold per request over x402. Answers come from AS215932's own routing tables, public collectors, and live probes: structured evidence, not summaries. See §agents for the payment flow.
endpointwhat it answersprice
POST /v1/bgp/lookup Inputs: subject type, subject value, datasets, views, sources, time, and more. Returns: request id, subject, resolved, results, assertions, sources, and more. $0.005–$0.01/req
POST /v1/dns/blocklists/check Inputs: domain. Returns: request id, input domain, normalized domain, verdict, categories, checked source count, and more. $0.003/req
POST /v1/dns/filtering/check Inputs: domain. Returns: request id, input domain, normalized domain, vantage, overall, blocked profile count, and more. $0.01/req
POST /v1/dns/lookup Inputs: name, type, resolver, dnssec, trace, timeout ms. Returns: request id, question, answers, authority, additional, rcode, and more. $0.001/req
POST /v1/dns/propagation Inputs: name, type, expected, resolvers, authoritative, timeout ms. Returns: request id, status, summary, target, findings, sources, and more. $0.001/req
POST /v1/ip/lookup Inputs: address, views, max age seconds. Returns: request id, address, geo, network, reverse dns, rdap, and more. $0.003/req
POST /v1/mx/jobs Inputs: profile, target, checks, options. Returns: job id, job access token, status, target, profile, status url, and more. $0.03/req
POST /v1/mx/check Inputs: tool, target, command, options. Returns: request id, tool, target, status, summary, findings, and more. $0.005/req
POST /v1/mx/bounce/parse Inputs: message, context. Returns: status, classification, smtp status, remote mta, probable causes, recommended actions, and more. $0.005/req
POST /v1/nat/port-forward/check Inputs: target, port, protocol, profile, vantage, timeout ms, and more. Returns: request id, status, summary, target, findings, sources, and more. $0.005/req
POST /v1/ports/check Inputs: target, port, protocol, profile, vantage, timeout ms, and more. Returns: request id, status, summary, target, findings, sources, and more. $0.003/req
POST /v1/rdap/lookup Inputs: subject type, subject value, include raw, max age seconds. Returns: request id, subject, registry, bootstrap url, parsed, raw, and more. $0.003/req
POST /v1/whois/lookup Inputs: subject type, subject value, include raw, max age seconds. Returns: request id, subject, registry, server, parsed, raw, and more. $0.005/req
POST /v1/tunnel/create Inputs: hours, allowlist cidrs. Returns: tunnel id, token, endpoint host, ssh port, public port, ssh command, and more. from $0.05/req
POST /v1/voip/check Inputs: target, checks, sip port, timeout ms, include raw. Returns: request id, status, summary, target, findings, sources, and more. $0.01/req
POST /v1/web/tls/deep Inputs: host, port, scan profile, checks, include raw. Returns: request id, status, summary, target, findings, sources, and more. $0.10/req
POST /v1/web/check Inputs: target, checks, vantages, timeout ms, include raw. Returns: request id, status, summary, target, findings, sources, and more. $0.005/req
Table 2. Enabled network-intelligence endpoints — discovery prices live from OpenAPI
2.3 domains & dns

Names for the things you deploy.

Every VM gets a free subdomain automatically. Registration of your own domain is not part of the launch catalog yet; it appears here as soon as the enabled OpenAPI catalog advertises a payable domain operation.
a.Auto subdomain — <id>.deploy.hyrule.host, AAAA to your VMfree
b.Domain registration, transfer, and renewal — not currently confirmed by the enabled OpenAPI catalognot yet launched
DNS zone + record management on registered domainswith registration
Table 3. Domains & DNS — registration is deferred from the launch catalog
2.4 network proxy

Anonymous egress, settled on delivery.

Paid direct and Tor HTTP requests for agents, with private-address targets blocked — plus I2P and Yggdrasil routes. Payment settles only after the response is delivered: a relay timeout or upstream error is never charged.
routepathprice
direct AS215932 egress, IPv6-first — POST /v1/network/request $0.01/request
tor via the Tor network — POST /v1/network/request $0.05/request
i2p via the Invisible Internet Project — POST /v1/network/request $0.05/request
yggdrasil via the Yggdrasil overlay mesh — POST /v1/network/request $0.03/request
Table 4. Proxy routes — prices live from GET /v1/pricing
2.1.2 operating systems

Available base images.

The default image is preselected during checkout. Any listed template can be used; cloud-init is supported on all of them.
default

Debian 13 (Trixie)

debian-13

ready

Pick a plan and launch it.

You only need an SSH key, a duration, and a wallet for an enabled payment rail. Everything else on this page is one Payment-Signature header away.