SPEARMINT SPMTC

Spearmint/Developer docs/Onboarding

Developer documentation · Spearmint Mining

Onboarding workflow

There is no sign-up form. A miner's Spearmint address is the whole of their identity to the pool: it is what the hardware logs in with, what the dashboard is keyed by, and where rewards are paid. This page sets out that model and the one optional registration that sits beside it.

Pre-launch · pool not open
  1. Step 0 · your keys

    Get a Spearmint address in your own wallet or node

    Generate it in Spearmint Core or any wallet that supports the spmtc bech32 format. You hold the private key. The pool never sees it and never asks.

  2. Step 1 · connect

    Point hardware at the pool

    URL stratum+ssl://pool.spearmintcoin.com:3334 (or stratum+tcp://…:3333). Username <your address>.<workername>. Password x — it is ignored.

  3. Step 2 · see it

    Shares appear on the dashboard by address

    Open /network/ and enter the address. Within a minute of the first valid share, hashrate and worker statistics are shown. No login.

  4. Step 3 · optional

    Register an email for notifications

    Sign a message with the address to prove you control it. No password, no personal data beyond the email. Detail in section 04.

  5. Step 4 · paid

    Payouts arrive automatically

    Daily at 00:00 UTC, any mature pending mining reward of 1 SPMTC or more is sent to the address the shares were mined under. Nothing to request.

01 Why no accounts

Minimum infrastructure

Mining needs an address, not a profile

The pool has to know where to send a reward and how to group shares. An address does both. Names, passwords, and identity documents would add nothing to the mining and a great deal to the risk.

Nothing to phish

No credential to steal

There is no password reset flow to attack and no session to hijack. The only secret in the system is the miner's own private key, which lives in the miner's own wallet.

Nothing to custody

No account, so nothing held "in" it

Without an account there is no place for value to sit on the miner's behalf. Pending mining reward is an allocation against blocks, paid out on schedule, not a stored amount in a container the miner "owns".

If accounts are ever introduced for some operational reason, they are mining-dashboard accounts — a saved view of addresses — and never a financial account or a wallet. That change goes through regulatory change control first.

02 Sanctions screening at connection

Because the operator is a U.S. person, a proportionate sanctions programme applies to the service. At onboarding it looks like this:

  • Country gate. Connections to the website, the stats API, and both Stratum ports from IP addresses geolocated to a comprehensively sanctioned jurisdiction are refused, with a plain message and a link to the Sanctions Policy. The decision and the country code are logged; the IP address is not retained.
  • Address screening. Every payout address is checked against digital-currency addresses on the OFAC SDN list before its first payout and before each run.
  • Terms by use. Connecting a worker constitutes acceptance of the Terms of Service, which include a representation that the miner is not a sanctioned or prohibited person. Because there is no sign-up form, there is no checkbox; the Terms and this fact are stated on the mining page beside the connection details.
  • No identity collection. The service does not collect names and therefore does not perform name screening. That is a consequence of the design, not an omission.
Flagged for counsel Whether acceptance-by-use is sufficient for the sanctions representation, which jurisdictions the country gate must cover, and whether address screening against SDN-listed addresses is adequate given the absence of identity data, are listed in issues for legal review.

03 What "changing your payout address" means here

Nothing. There is no setting to change. To be paid at a different address, mine with that address in the worker login from now on. Shares submitted under the old address stay allocated to the old address and are paid to the old address, including by the inactive sweep if you stop using it.

This removes the most dangerous feature a pool can have: a control that lets someone — the miner, an attacker who got their email, or an operator — redirect rewards that were mined under one address to another. Rewards go where the work said they go, and that is enforced by the absence of any other option.

STOP — legal review required before implementation A "change payout address" or "consolidate addresses" feature would let value move between addresses on the operator's say-so rather than on the basis of work done. That is a step toward the operator transmitting value at a user's direction. It is deliberately not built and must not be added without a new legal review.

04 Notification-registration controls

The one optional registration is for email notifications (worker offline, block found, payout sent). Its controls:

  • Signed message proves control. The form shows a message to sign with the payout address, in the format spearmint-mining-notify:<email>:<unix timestamp>. The signature is verified against the address; timestamps older than 15 minutes are rejected.
  • Email confirmation. A link is sent to the email; the registration is inactive until it is clicked.
  • 24-hour delay. Changing or removing a registered email takes effect 24 hours after confirmation, and a notice is sent to both the old and new addresses during the delay.
  • Everything logged. Each registration, change, and removal is recorded with the signed message that authorised it.
  • No password. There is nothing to reset. Control of the address is the only credential.
  • Permanent warning. Every form on the site carries: "Spearmint Mining will never ask for your private key or recovery phrase." The signing step is done in the miner's own wallet software; the site never receives a key.
# example message to sign (in your own wallet, e.g. signmessage) spearmint-mining-notify:miner@example.com:1789300000

05 Dashboard access

  • The dashboard is public read by payout address. Anyone who knows an address can see its hashrate, shares, pending mining reward, and payout history — the same information that is derivable from the chain and the pool's published block list.
  • There is no login and nothing behind one. Registered emails are never shown on the dashboard.
  • An optional bookmark token can be generated so the address is not visible in the URL bar. It is a convenience for shared screens, not authentication: it grants nothing that the address itself does not.
← Developer docs Dashboard wireframe Mining page