BTCPayServer Vault

BTCPayServer Vault runs a local web server that mediates access to a hardware wallet attached to the user’s computer. It exposes a simple HTTP bridge on 127.0.0.1:65092, where web applications can request permission and then forward commands to the underlying hwi command‑line tool. The permission step uses the Origin header to identify the requesting site, prompting the user to approve or deny access, after which POST requests containing raw hwi parameters are relayed and the resulting output returned as a string.

The project consists of two components: a .NET library (BTCPayServer.Hwi) that wraps the hwi interface, and the Vault server itself, which can be installed via pre‑built binaries, Homebrew on macOS, or packages for Arch Linux and Debian. It is built with .NET Core 6.0 and distributed under the MIT license.

Targeted at developers of web‑based cryptocurrency services, such as BTCPay Server, the vault enables integrated wallet interactions while keeping the hardware device isolated. User consent is required for each web origin, helping to preserve privacy even if the host system is compromised.