Fast
Bitcoin
transfers

Peer to peer fast bitcoin payments.

Transfer bitcoin free and fast - online or fully offline. No central server. No channels. No hops. No routing. No account. Self custody always.

It works on Bitcoin today. No changes. No BIPs. No hacks. It just works.

2On-chain transactions
per instrument lifetime
$0Fee per off-chain transfer
<5sTransfer time,
online or offline
Transfers between
creation & redemption

How it works

As simple as passing a message in class.

A Kagikai instrument is a Bitcoin UTXO you can hand to someone - whether you're online or off. Two keys change hands. No broadcast. No fee.

Create

Your device generates keys B and C locally - only the public keys go to the creator. The creator builds a Taproot address, funds it once, and is permanently locked out. You hold the spending threshold from day one.

Transfer - online or offline

Keys B and C are NaCl-sealed to the recipient's public key. Delivered via QR, NFC, HTTPS, or deep link online - or QR code and manual confirmation with zero internet. Done in under five seconds.

Cryptographic receipt

The receiver signs a nonce with Key B and publishes the proof to Nostr. The sender verifies it - and only then deletes their copy. The transfer is irreversible. No server. No intermediary.

Privacy with P2TR & MuSig2

Keys B and C aggregate via MuSig2 into a single Taproot keypair. Settlement is a standard 64-byte Schnorr signature - indistinguishable on-chain from any ordinary Bitcoin payment.

Sweep when ready

The final holder broadcasts a single sweep transaction to any address they control. Only the second on-chain event in the instrument's entire lifetime - regardless of how many transfers happened in between.

Hardware security

Keys live in the device's secure hardware enclave - Android Keystore (AES-256-GCM, hardware security chip; on StrongBox devices keys are designed to never leave the Titan M2) and iOS Secure Enclave (keys are generated and stored inside the Secure Enclave and are designed to be non-extractable under normal operating conditions). No cloud. No server. No custody.


Your keys, your coin.

Every prior Bitcoin instrument keeps the creator in the spending path. You trust them not to use their key.

Kagikai inverts the threshold and puts control in the hands of the holder. In a 2-of-3 scheme the holder holds both Key B and Key C - that's the full spending threshold. The creator holds only Key A - one key, below the threshold of two, which is then securely deleted before the instrument is funded. The creator is designed to be unable to spend - the threshold requirement is enforced by every Bitcoin node on the network.

spend = f(Key B, Key C)
The creator's key (A) is deleted before funding and cannot meet the spending threshold
Creator Key A 1 of 3 keys cannot spend ✗ below threshold 1 < 2 Holder Key B holder key Key C holder key can spend ✓ 2 of 3 = threshold 2-of-3 MuSig2 Spend requires 2 · creator holds 1 · holder holds 2

Connectivity

Works online.
Works offline.

The same instrument works across all connectivity situations. There's no special mode to switch into - Kagikai adapts to whatever transport is available.

Online transfers

When connected, payments flow via HTTPS, QR code scan, NFC tap, or app deep link. Verification hits the live mempool for instant confirmation.

HTTPS QR Code NFC Deep Link

Fully offline transfers

No signal? Instruments transfer over QR code and verify in app or against a cached local bounded UTXO snapshot. Zero bytes of internet required.

QR code Local bounded UTXO cache

Denominations

Stacking sats by the thousands

Kagikai instruments are created at set satoshi values. You don't transfer a single instrument and get change back - you carry the right mix.

Think in denominations, not decimals.

A 10,000 sat instrument is a 10,000 sat instrument. It doesn't split. It doesn't make change. When you hand it over, the full amount moves to the new holder - instantly, with no fee.

The user generates a ladder of denominations, and holders combine instruments to hit the right amount. If you don't have a combination that works, you can always sweep back into the funding wallet (bitcoin tx fee applies) and create a new set of smaller or larger instrument combinations to achieve the right amount.

When interacting with a merchant, the merchant keeps a change float so you don't have to sweep to reorganize - they return the difference as smaller instruments.

Example: paying 35,000 sats
Holder holds: 20,000 + 10,000 + 5,000 sat instruments
Hands over three instruments. Done. No change. No fee.

*As the price of bitcoin increases, smaller denominations can be added to later updates to keep pace with the decline of fiat value. At this time 1,000 sats is the smallest economically viable unit for sweeping individually as on-chain tx fees will consume much of the instrument's value. The use of MuSig2 for batched multi-instrument sweeps makes the tx fee more economically viable.

Full 1-2-5 denomination ladder 1,000 sat micro-payments 1k sat 2,000 sat micro-payments 2k sat 5,000 sat small transfers 5k sat 10,000 sat everyday transfers 10k sat 20,000 sat standard transfers 20k sat 50,000 sat large transfers 50k sat 100,000 sat large transfers 100k sat 200,000 sat high-value transfers 200k sat

Protocol comparison

How Kagikai fits alongside
Lightning and Ark

Three complementary protocols, each designed for a different job.

Property
Kagikai MBI
Lightning
Ark
Fee per transferCost of moving value off-chain
No fee*
~1–1000 ppm
ASP fee
Internet at paymentConnectivity required
Optional
Required
Required (OOR)
Account or channel setup
None
Channel + liquidity
None
Creator can spend post-creationCustodial risk
Prevented by design
N/A
OOR: server trust
Settlement on-chain privacy
P2TR - undetectable
Off-chain
Shared UTXO
Arbitrary payment amounts
Denominated
Any amount
Any amount
Server dependency post-creation
None
Node online
ASP for rounds
Bitcoin protocol changes needed
None required
None required
None required
Delay for direct initial funding
1 confirmation
1 confirmation
1 confirmation
Kagikai advantages
  • Zero setup - no channels, no liquidity, works from first install
  • Fully offline option - QR code payments with local bounded UTXO verification.
  • Zero routing fees at any volume - no ppm accumulation across hops
  • No LSP - no node to go offline, no fees to negotiate
Lightning advantages
  • Any satoshi amount - no pre-minting or denomination management
  • Seamless change - amounts flexible at payment time
  • Mature ecosystem with years of production deployment
  • Rich programmable payments - LNURL, invoices, HTLCs
Kagikai advantages
  • No server post-creation - Ark OOR payments require ASP cosigning; Kagikai needs nothing after funding
  • Truly offline - Ark OOR requires internet to the ASP; Kagikai works without any connectivity
  • Zero trust model - Ark OOR carries server collusion risk; Kagikai's trust is enforced by arithmetic
  • No VTXO expiry - Ark VTXOs must refresh or be claimed; Kagikai UTXOs hold indefinitely
  • Immediate transfers - no round waiting; done the moment keys are exchanged
Ark advantages
  • Arbitrary amounts natively - no denomination ladder required
  • Native change-making - no pre-minted change or atomic PSBTs needed
  • Connector outputs enable more sophisticated multi-party coordination

Complementary, not competing

Lightning handles arbitrary-amount routed payments. Ark handles no-setup receiving with a server. Kagikai handles peer to peer Bitcoin transfers, offline payments, and zero-fee instrument handover - the denominated instrument use case the protocol has always supported.

See use cases →

Use cases

Anywhere bitcoin needs to move

Online or offline - Kagikai instruments work anywhere.

Online or offline retail

Tap-to-pay at the counter, web checkout, or a market stall with no signal. The same QR or NFC workflow works in every environment.

Digital Bitcoin gifting

Send bitcoin as a pre-funded instrument at fixed denominations. Fast delivery and free transfer - ideal for gifts, tips, and rewards.

Peer-to-peer value transfer

An instrument that has changed hands 47 times carries exactly the same value as one that changed hands once. Unlimited hops, zero cumulative fee.

Low-connectivity regions

Peer payments in areas with poor mobile signal. Verification runs against a cached UTXO snapshot - no internet required.

Merchant web checkout

MBI-PRP supports HTTPS, NFC, QR, and deep link transports. No account or prior arrangement needed - works in any existing checkout stack.


Merchant infrastructure

KMS — Kagikai Merchant Server

Accept bitcoin at the counter with zero payment processing fees. No middleman. No monthly subscription. No percentage cut. Every sat goes straight to you.

Your server · Your keys · Your bitcoin

KMS runs on your own hardware — a spare laptop, a mini PC behind the counter, or a VPS you control. No sign-up with a payment processor. No custody risk. Funds land directly in your wallet, not someone else's account.

Your merchant key is encrypted at rest with AES-256-GCM and only lives in memory while KMS is running. No cloud. No third-party access. You hold the keys at all times.


Read the whitepaper

Full technical specification: threshold inversion, buyer-generated key protocol, bounded UTXO set, MBI-PRP payment protocol, adversarial security analysis, MuSig2 and Taproot implementation, and applications to transferable value instruments.

Protocol
MBI-PRP | P2TR | MuSig2
Encryption
secp256k1 · ECDSA · NaCl · AES-256-GCM
Receipt layer
Nostr public relay | QR code

Join the beta

Be among the first to test Kagikai. Sign up and we'll reach out when the beta is ready.

Portrait of Asensio

Asensio (aka Keys)

Developer

Longtime Bitcoiner and open source advocate with a career spanning design, full stack development, and leading digital teams. A Linux user since the early days, with deep roots in the open internet and the cypherpunk tradition of building tools that put users in control.

Kagikai does not collect user data, does not require an account, and holds no Bitcoin on anyone's behalf. The core cryptographic method has been published as a formal research paper and tested with real transactions on the Bitcoin mainnet.

Press & media enquiries

For interviews, commentary, or coverage of Kagikai and the MBI protocol, reach out directly. Happy to provide technical background, demo access, or high-resolution assets.

Contact
dev @ kagikai dot app
Email media enquiry

Note: Kagikai is a cryptographic protocol for transferring control of Bitcoin UTXOs. It does not constitute a payment service, money transmission system, or financial product. Businesses and merchants integrating Kagikai-based instruments into commercial operations may have independent obligations under applicable AML, KYC, consumer protection, and payment services laws in their jurisdiction. Users and operators are responsible for ensuring compliance with all local regulations. Nothing on this page constitutes financial, legal, or regulatory advice.

鍵音ひびく
扉の影集う
会の朝霧