# UFO VPN

> A minimalist, zero-logs VPN with retro web charm. Anonymous account numbers, Bitcoin on-chain payments, Xray-based protocols.

UFO VPN keeps the least possible data: no email, no tracking, no activity logs. Accounts are identified only by a randomly generated account number, and plans are paid in Bitcoin.

## Pages

- [Home](/): Plans and pricing, server locations, FAQ, privacy policy and terms.

## Agent API (autonomous purchase)

Machine clients can buy a plan end-to-end without a browser. No signup, no email, no API key.

- OpenAPI 3.1 spec: [/api/public/v1/openapi.json](/api/public/v1/openapi.json)
- `GET /api/public/v1/plans` — plan ids, USD prices, accepted payment methods.
- `POST /api/public/v1/orders` with `{"planId": "1m"}` — creates an anonymous account and a
  single-use Bitcoin invoice. Response contains `accountNumber` (the only credential, store it),
  `orderId`, `token`, and `payment` (address, exact `amountSats`, BIP21 `uri`, `expiresAt`).
- `GET /api/public/v1/orders/{orderId}?token=...` — payment status and, once the plan is active,
  the VPN `config.link` (Xray/VLESS URI) and a QR image URL. Poll every 30 seconds.

Rules for agents: send the exact `amountSats` to the returned address before `expiresAt`, on the
returned `network`, and never reuse an address across orders. Prices and durations are decided
server-side from `planId` only.

## Example

```bash
curl -s -X POST https://ufovpn.xyz/api/public/v1/orders \
  -H 'Content-Type: application/json' -d '{"planId":"1m"}'
```