NIP-46 Lab — Remote Signer Testbench

Connection

Establish a session with a bunker

bunker://

nostrconnect://

session

Signer-initiated flow. Paste a bunker:// URI from your remote signer (nsec.app, nsecBunker, Amber, etc.).

Bunker URI Local secret key (hex / nsec) — leave blank to generate Requested permissions (optional) Client metadata (optional · NIP-46 PR #2381)

Sent as a 4th JSON-stringified connect param so the signer can label this session. Unauthenticated — a display hint only.

name

url

image

Client-initiated flow. Generate a nostrconnect:// URI, then paste it into your signer to approve.

App name

App URL

Relays (one per line) Requested permissions

No active session.

Reliability

Auto-reconnect & health monitoring

auto-reconnect dropped relays (exp backoff)

heartbeat ping every 45s

Logs network changes, page visibility, suspension, and bfcache restore. After a long suspension or network change, all relays are re-validated.

Transport encryption

Auto-detected from incoming events · click to override

current: nip44

Relays

Active subscription relays

No relays connected.

Add relay manually

RPC Methods

All NIP-46 commands · click to expand

ping no params · expects "pong"

get_public_key returns user-pubkey (hex)

sign_event signs an unsigned event

Kind

created_at

Content Tags (JSON array of arrays)

nip04_encrypt legacy DM encryption

Recipient pubkey (hex) Plaintext

nip04_decrypt decrypt a NIP-04 ciphertext

Sender pubkey (hex) Ciphertext (base64?iv=base64)

nip44_encrypt modern v2 encryption

Recipient pubkey (hex) Plaintext

nip44_decrypt decrypt a NIP-44 payload

Sender pubkey (hex) Ciphertext (base64)

nip44v3_encrypt v3 — context-bound encryption

Recipient pubkey (hex) Kind Scope (optional) Plaintext

nip44v3_decrypt decrypt a NIP-44 v3 payload

Sender pubkey (hex) Kind Scope (optional) Ciphertext (base64)

nip44v3 self-test run the upstream NIP-44 v3 test vectors locally

Runs the vendored test-vectors.json from nostr-land/nip44v3 against this page's local implementation: key derivation, encrypt, decrypt (including the non-standard padding cases), long messages, padding sizes, and invalid-ciphertext rejection. No connection or keys required.

switch_relays signer returns its preferred relay set

Per spec, clients should call this after connecting. Signer responds with an array of relay URLs (or null).

logout end the session · expects "ack"

Courtesy hint to the signer that the session is over. The signer should ack, then drop the session (a new connect is required to re-establish). The local client-keypair is deleted regardless of whether the request is acknowledged.

raw send arbitrary method · for testing extensions

Method name Params (JSON array of strings)

Event Log

Live wire trace · kind 24133

req res auth err

No events yet. Connect to begin.

Bunker Identity

User keypair · this is the identity you sign for

User secret key (hex / nsec) — leave blank to generate

Bunker Relays

Where the bunker listens for client requests

Bunker is offline.

bunker:// URI

Hand this to a client to connect

Connect secret (optional)

Dial out via nostrconnect://

Paste a client's nostrconnect URI — the bunker will connect

Approvals

Default behaviour for incoming requests

auto-approve all requests (test mode)

When off, every request waits for manual approve / reject below.

Pending approvals

Manual approve / reject when auto-approve is off

No pending requests.

Connected clients

Clients that have completed connect

No clients connected.

Stats

requests: 0
signed: 0
encrypted: 0
decrypted: 0
rejected: 0

Bunker Log

Live wire trace · kind 24133

req res auth err

Bunker idle. Start listening to begin.

Bunker Relay Tester

Does this relay support NIP-46 bunker traffic?

Relay URL

Runs every check needed for NIP-46 traffic to flow: WebSocket reachability, kind 24133 acceptance, #p-tag forwarding for ephemeral events, and a full encrypted client↔bunker round-trip. All checks use ephemeral keypairs.

Quick presets

Verdict

Will NIP-46 work over this relay?

Run the check to evaluate this relay.

Checks

All four are required for bunker traffic

No checks run yet.

Trace

Raw protocol exchange