Your miners, in your own tools.

Get started in a minute

1. Sign in, open Account and find API keys. Give the key a name and confirm with your password, plus your authenticator code if you have two-factor on. Tick Allow rentals and changes only if the key needs to rent or change things.

2. Copy the key. It starts wwk_ and is shown only once.

3. Send it with every request:

curl https://wildwatts.io/api/v1/miners \
  -H "Authorization: Bearer wwk_your_key_here"

Treat the key like a password. If it leaks, open Account and Rotate it: you get a new key and the old one stops working immediately. Delete removes it altogether. You can have up to 5 keys, for example one per app.

Endpoints

About the pool safety checks. Before a pool change is queued, WildWatts checks the address, the wallet and that the pool will actually accept your login, so a typo can’t leave your miner idle for the whole rental. skip_safety_checks turns those checks off for that one change. Only use it for a pool you know works: if the pool refuses the miner, it earns nothing until you change it back. Pool addresses and logins must still be plain text (no spaces, quotes or < >).

Rentals and extensions use the same prices, durations and credit balance as the website. Top-ups are made on the website. Model names and durations are the ones /v1/stock lists.

What a miner looks like

{
  "id": 524,
  "name": "Avalon Q 8",
  "model": "Avalon Q",
  "state": "mining",
  "hashrate_ths": 93.1,
  "hashrate_1h_avg_ths": 92.4,
  "hashrate_24h_avg_ths": 92.9,
  "temperature_c": 61.5,
  "shares_accepted": 18422,
  "shares_rejected": 12,
  "best_difficulty": "1.24G",
  "blocks_found": 0,
  "pool": {
    "url": "stratum+tcp://solo.ckpool.org:3333",
    "user": "bc1q...your-address.worker",
    "fallback_url": null,
    "fallback_user": null,
    "change_pending": false
  },
  "rental": {
    "product": "Avalon Q 14 days",
    "started_at": "2026-11-06T01:21:25Z",
    "ends_at": "2026-11-20T01:26:25Z",
    "hours_left": 316.2
  },
  "last_seen": "2026-11-06T15:29:13Z"
}

state is one of mining, starting (just rented, or a pool change on its way), paused or offline.

More examples

Python: print each miner’s hashrate

import requests
KEY = "wwk_your_key_here"
r = requests.get("https://wildwatts.io/api/v1/miners",
                 headers={"Authorization": f"Bearer {KEY}"}, timeout=20)
for m in r.json()["miners"]:
    print(m["name"], m["hashrate_ths"], "TH/s", m["rental"]["hours_left"], "hours left")

Extend a rental by 7 days (read-write key)

curl -X POST https://wildwatts.io/api/v1/miners/524/extend \
  -H "Authorization: Bearer wwk_your_key_here" \
  -H "Content-Type: application/json" -d '{"days": 7}'

Home Assistant (configuration.yaml)

rest:
  - resource: https://wildwatts.io/api/v1/miners
    headers:
      Authorization: "Bearer wwk_your_key_here"
    scan_interval: 120
    sensor:
      - name: "WildWatts hashrate"
        unit_of_measurement: "TH/s"
        value_template: "{{ value_json.miners | sum(attribute='hashrate_ths') | round(2) }}"

Errors and limits

Every error is JSON with a plain-English detail message. Stats refresh about every 30 seconds, so polling more often than that gains nothing.

Questions or ideas for the API? Get in touch.

Webhooks

Rather than asking every few minutes, let WildWatts tell you. Add up to 3 webhooks in Account (under API keys), choose which events each one receives, and we send an HTTPS POST to your address as soon as something happens. You get a signing secret (it starts whsec_) to check each request really came from us.

What we send

POST /your/endpoint
Content-Type: application/json
User-Agent: WildWatts-Webhooks/1.0
X-WildWatts-Event: miner.offline
X-WildWatts-Delivery: 1842
X-WildWatts-Signature: t=1793990000,v1=5f2c...e81a

{
  "id": "evt_9c41d0b2a7e64f1d3b8a0c55",
  "type": "miner.offline",
  "created_at": "2026-11-06T18:02:11Z",
  "data": {
    "miner": {"id": 524, "name": "Avalon Q 8", "model": "Avalon Q"},
    "message": "Avalon Q 8 has stopped reporting."
  }
}

Check the signature, using the raw request body exactly as received:

import hmac, hashlib, time

def is_from_wildwatts(secret, signature_header, raw_body):
    parts = dict(p.split("=", 1) for p in signature_header.split(","))
    t, sent = parts["t"], parts["v1"]
    if abs(time.time() - int(t)) > 300:          # reject old or replayed requests
        return False
    expected = hmac.new(secret.encode(), f"{t}.".encode() + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, sent)

Retries. Answer with any 2xx status within 10 seconds. Anything else is retried after 1 minute, 5 minutes, 30 minutes, 2 hours and 6 hours. If 10 deliveries in a row fail all their retries, the webhook is switched off and we email you; switch it back on in Account once your endpoint is fixed. The same event can occasionally arrive twice, so use id to ignore repeats.

Webhook addresses must use https:// and be reachable on the public internet. Requests are never redirected. Each delivery shows in Account under Deliveries, with the status your endpoint returned.