EU-operated router plane · prepaid credits · public API

Expose private services without opening inbound ports.

Kepeink gives your device an outbound agent, a public HTTPS hostname, and byte-metered routing credit. It is built for small operators, prototypes, and agents that need a stable endpoint without a VPN ceremony.

tunnel setup
$ routerctl tunnel create demo
created demo.kepeink.dev
$ kepeink-agent --token $KEPEINK_TOKEN
route https://demo.kepeink.dev -> http://127.0.0.1:8080
meter bytes in + out against workspace credit

Router-plane primitives, not dashboard theatre.

The browser console is a thin client over the same documented endpoints used by automation. Route state is pushed to edges; usage is metered at the edge; public abuse intake is part of the control plane.

Outbound first

No inbound firewall rule

The agent connects out from your machine. Kepeink terminates public TLS and forwards requests over that authenticated tunnel.

Byte metered

Credit is traffic, not seats

Credits are prepaid GiB windows. Billing follows bytes in plus bytes out, so automation and human traffic use the same ledger.

API native

Built for agents and scripts

Machine tokens, OpenAPI docs, and CLI workflows are first-class. The UI does not get private endpoints unavailable to you.

Prepaid credits.

Each product maps directly to the billing catalog. No hidden seat count, no metered card surprise after the entitlement window expires.

Smoke test

$1 one time

1 GiB credit for first tunnel checks, webhook tests, or a short-lived demo.

  • 1 GiB
  • 365-day window
  • No renewal

Starter

$8 / 30 days

25 GiB for a prototype, internal tool, or low-volume public callback endpoint.

  • 25 GiB
  • 30-day window
  • Workspace credit

Builder

$10 / 30 days

50 GiB for daily development tunnels and small production services.

  • 50 GiB
  • 30-day window
  • Best default

Annual

$100 / year

500 GiB for stable projects that need a long entitlement window and fewer billing touches.

  • 500 GiB
  • 365-day window
  • Prepaid

Install from the same commands shown in-console.

Create a token in the management console, then run the matching installer for the machine that will host your origin service.

Linux / Darwinagent install
curl -fsSL https://cdn.kepeink.hu/install.sh | sudo sh -s -- <token>
Windowsagent install
powershell -NoProfile -ExecutionPolicy Bypass -Command "Invoke-WebRequest -UseBasicParsing https://cdn.kepeink.hu/install.ps1 -OutFile $env:TEMP\kepeink-install.ps1; & $env:TEMP\kepeink-install.ps1 -Token <token>"
Operator imprint placeholder: the production legal pages are served from manage.kepeink.hu/legal/tos and manage.kepeink.hu/legal/privacy. Before public launch, replace this placeholder with the operator's full business name, postal address, registration/tax identifiers if applicable, and a durable support address.