How it works

What actually happens, in plain words.

Meerkly is the network behind UnblockingAPI: devices that load public web pages for its customers, using a slice of a connection that was sitting idle anyway. Here is the whole of it, from the moment a customer asks to the moment you get paid — written for anyone, not just for developers.

The short version

From switched on to paid, in five steps.

  1. Run MeerklyOn a phone, a computer or a server you leave on anyway.
  2. Your device joins the networkIt holds one outgoing connection to our gateway and waits. Nothing is opened for anyone to connect in.
  3. A customer asks UnblockingAPIA business sends UnblockingAPI a request for a publicly accessible web page.
  4. An eligible device fetches itIf your connection and location match the request, your device may be the one that loads it.
  5. You earn for the work donePaid per GB your connection actually carries. No request, no pay: earnings follow demand.
Step by step

What happens when your device is asked for something.

  1. A customer asks UnblockingAPI for a page

    Businesses check prices, search results, listings and their own adverts as they appear in other places. From a data-centre connection those public pages often look different or refuse to load, so they ask UnblockingAPI to fetch them from an ordinary connection. The customer talks to UnblockingAPI, never to a device.

  2. The network picks an eligible device

    One that is online and matches the request, and yours is one of many. All that gets sent to the device is the address of the page. No files, no programs, nothing that stays behind. If no request matches a device, it simply waits.

  3. The device fetches it and passes it straight back

    It goes and gets the page the same way your own browser would, and hands it back through us. It does not open it, read it or keep it. Think of a courier carrying a sealed envelope: it goes through your hands, and you never see inside.

  4. You are paid for what went through

    We measure, on our side, what your connection carries for it as it moves — the device is never asked how much it did, so there is nothing to get wrong or argue about. No request, no pay: being online makes a device eligible, and demand decides how often it is picked. Your own browsing is not part of any of this.

What is my connection used for?

Loading public web pages for UnblockingAPI’s customers.

That is the only work Meerkly sends. Nobody buys access to your connection directly, and nobody can reach your device.

Every request comes through UnblockingAPI

Meerkly is the supply side of UnblockingAPI, a service businesses use to load publicly accessible pages (prices, search results, listings) as they appear from an ordinary connection. Its customers send requests to UnblockingAPI, never to you.

Not a proxy for sale

We do not sell raw proxy access, and there is no way to buy your IP address and connect through it. Your device only ever dials out to our gateway. It opens no port, so there is nothing for anyone to connect to.

Public websites only

Your device refuses anything that is not on the public internet, so your router, your printer and the rest of your home network stay out of reach. Email is blocked before a request is ever handed out.

Watched, and acted on

Every request is logged with the customer account behind it. We monitor how the network is used and block abusive activity when we find it. Nobody can vet every web address in advance, so we do not claim to. We keep watch and act instead.

For the technically minded

The same thing, precisely.

Nothing new here — this is the paragraph above with the protocol names left in. Skip it happily if it is not your sort of thing.

One QUIC connection, no open ports

An exit node holds a single outbound QUIC connection to the gateway, however much traffic flows over it. Nothing listens for inbound connections, so it works behind NAT and opens no hole in anyone's network.

Customer access is issued, not sold

The gateway's customer side accepts only credentials we issue, each verified against the dashboard, and those go to UnblockingAPI. There is no self-serve sign-up for proxy access, and no inbound path to an exit at all.

The SDK stores nothing

No config file, no cache and no identity of its own. Whatever the host application does not persist for it, it does not persist. A device id, if there is one, is minted and kept by the host.

SSRF is refused at the exit

The exit resolves the target itself, rejects anything that is not a routable public address — loopback, RFC 1918, link-local, CGNAT, unique-local — and then connects to the address it validated, never re-resolving the name, so DNS rebinding cannot slip through.

Metering is gateway-side and authoritative

The QUIC connection's own counters measure the tunnel leg as it moves — UDP payload plus IP/UDP headers, both directions. A wrapper on the gateway's stream counts the site-side payload, to which a stated 4% header allowance is added. Both are flushed to a durable stream. Nothing that decides money is ever self-reported by a client.

Now you know what it does. See what it pays.

Create an account and point a device at it, or take a publisher id and run the SDK on your own machine first.

$zz