As Bitcoin adoption expands globally, so too does the demand for smoother integration between wallets and payment infrastructure. For businesses and merchants using invoicing systems like BTCPay Server, one of the most common pain points remains the same: how do you set up a secure, non-custodial invoicing system that supports Bitcoin on-chain, Liquid, and Lightning without requiring deep technical knowledge or risky operational compromises?

Enter the SamRock Protocol, a new standard developed by JAN3 and the BTCPay Server team that bridges the gap between wallets and invoicing systems, while keeping users in full control of their funds. SamRock enables a clean, secure handshake between mobile wallets like AQUA and commerce solutions like BTCPay Server, without ever exposing private keys or requiring merchants to find and upload an XPUB.

SamRock is more than just a BTCPay Server plugin. It’s a flexible, extensible foundation for sovereign Bitcoin commerce.

The Problem SamRock Solves

Traditionally, invoicing systems like BTCPay Server either run hot wallets or require access to an external wallet’s XPUB. Hosting a hot wallet means storing private keys on the server, a custodial risk, so most users prefer to use an external wallet. This typically involves manually extracting XPUBs, configuring derivation paths, and, in the case of Liquid, handling blinding keys. It’s error-prone, technically complex, and intimidating for less experienced users, especially when multiple networks like Bitcoin and Liquid are involved.

Lightning adds even more complexity, requiring a full node with proper channel management, liquidity balancing, backups, and 24/7 uptime, an operational burden for most merchants.

SamRock removes these barriers by enabling:

• A secure, automated connection between wallet and server, transferring necessary public key data, including Liquid’s blinding keys, with a simple QR code scan.
• Non-custodial Lightning support via Liquid-based submarine swaps using Boltz, eliminating the need to run or manage a Lightning node.

The result is a dramatically simpler, safer setup for accepting Bitcoin, Liquid, and Lightning payments, all without giving up self-custody control.

How SamRock Works

The first implementation is the Aqua.BTCPayPlugin, which enables a seamless connection between AQUA and BTCPay in just a few steps:

1. Install the SamRock plugin in BTCPay Server. 
2. Click on the “SamRock Protocol” Button in the left navigation bar on the BTCPay Server dashboard.
3. After clicking the button, select which payment methods to accept:
   • Bitcoin (on-chain)
   • Liquid
   • Lightning
4. BTCPay Server generates a QR code containing a temporary setup link.
5. Create a new wallet for the store (you can have multiple wallets within the AQUA app).
6. Scan the QR with AQUA wallet, which securely sends back the required public data.
7. The BTCPay Server plugin configures the store with this information without ever storing or seeing private keys.
8. Receive payments in BTCPay Server and see them in your AQUA wallet.

Use Cases

SamRock’s flexibility enables a wide range of practical applications for Bitcoin businesses. For example, a company can let staff issue invoices, track payments, and manage reporting through BTCPay Server while the wallet itself stays securely in the owner’s custody. It also streamlines accounting and compliance by keeping clean, auditable records without exposing sensitive wallet data or depending on custodial services.

Why It Matters

SamRock isn’t just a convenience feature, it’s a foundational upgrade to Bitcoin commerce. It eliminates key management risks on the server side, simplifies the onboarding process for merchants, and opens the door to multi-rail payment support that just works.

The most important aspect is that anyone can self-host BTCPay Server and receive payments from a mobile wallet without custodial risk or running a Lightning node.

What’s Next?

The roadmap for SamRock is already expanding:

• Support for Liquid assets like USDt is on the horizon.
• Additional wallet integrations are in the pipeline, starting with Bull Bitcoin and Zaprite.
• An effort is underway to formalize the SamRock Protocol as an open standard that other wallets and platforms can implement.

Final Thoughts

At its core, the SamRock Protocol is about making Bitcoin commerce infrastructure safer, simpler, and more interoperable without sacrificing sovereignty. It reflects the design philosophy shared by both Samson Mow and Rockstar Dev: to empower users, sidestep custodians, and make the best use of Bitcoin’s layered architecture.

SamRock separates the wallet from the server, making it easy to run BTCPay Server instances without compromising custody. It eliminates the complexities of Lightning while enabling any wallet, like the Blockstream app or Bull Bitcoin, to connect and generate invoices seamlessly. It’s a major step forward. Users can now collect payments 24/7 through hosted infrastructure while keeping custody of their own keys, even in cold storage.

Stay tuned as this new protocol rolls out across BTCPay Server and beyond. If you’re accepting Bitcoin payments, SamRock might be the missing link you’ve been waiting for.