TapClank Developer Documentation

Programmatically orchestrate 100/100 OEM-certified ARM64 Android 15 cloud phones, zero-CDP local WebKit browsers, and Cloudflare R2 cold-storage snapshots via REST (https://api.tapclank.com), Rust CLI (lark), or 36 native MCP tools.

Authentication, Scoped API Keys & VA Group RBAC

Every request to https://api.tapclank.com/v1/* authenticates via either a 30-day HMAC-SHA256 session JWT (Authorization: Bearer <jwt>) or a SHA-256 hashed workspace key (X-API-Key: tc_live_...). Workspace members carry one of four roles: owner, admin, manager, or operator (restricted strictly to allowed_groups — unauthorized group access returns HTTP 403 FORBIDDEN_GROUP_ACCESS).

# 1. Generate a scoped tc_live_* API key (or copy from /app Console -> Team & Security)
curl -s -X POST https://api.tapclank.com/v1/auth/api-keys \
  -H "Authorization: Bearer $JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"Claude-MCP-Agent","scopes":["read","operator","admin"]}'

# 2. Authenticate any REST endpoint via X-API-Key (or Authorization: Bearer tc_live_...)
curl -s https://api.tapclank.com/v1/analytics/overview \
  -H "X-API-Key: tc_live_98f2c1a4e7b0..."

Claude Desktop & Cursor MCP Configuration

TapClank ships a built-in Model Context Protocol server over stdio (lark mcp / tapclank mcp) exposing 36 tools across local stealth browsers, cloud phones, R2 hibernation, dynamic proxy geo-alignment, and competitor profile imports.

{
  "mcpServers": {
    "tapclank": {
      "command": "lark",
      "args": ["mcp"],
      "env": {
        "TAPCLANK_API_URL": "https://api.tapclank.com",
        "TAPCLANK_API_KEY": "tc_live_YOUR_SCOPED_API_KEY"
      }
    }
  }
}

{
  "mcpServers": {
    "tapclank-studio": {
      "command": "/usr/local/bin/tapclank",
      "args": ["mcp"],
      "env": {
        "TAPCLANK_API_URL": "https://api.tapclank.com",
        "TAPCLANK_API_KEY": "tc_live_YOUR_SCOPED_API_KEY",
        "LARK_NODE_URL": "http://127.0.0.1:8200"
      }
    }
  }
}

Complete MCP Tool Catalog (All 42 Native Tools)

Includes the full local browser & cloud phone suite plus the 10 Phase 11 Cloudflare R2, Proxy Geo Re-Alignment, Distributed VA Lock, Competitor Importer, and Cron Scheduler tools.

Cloudflare R2 Hibernate, Wake, Checkpoint & Gold-Master Clone API

TapClank decouples stored phone capacity from active NVMe drives. Hibernating a phone writes its portable state bundle to tapclank-storage (snapshots/<org_id>/<phone_id>/<snap_id>.json) with SHA-256 verification and sets storage_tier = "cold_r2".

# 1. Create a flagship Pixel 9 Pro Cloud Phone in Europe/Berlin
curl -s -X POST https://api.tapclank.com/v1/phones \
  -H "X-API-Key: $TC_KEY" -H "Content-Type: application/json" \
  -d '{"name":"DE-TT-GoldMaster","brand":"Google","model":"Pixel 9 Pro","timezone":"Europe/Berlin"}'

# 2. Offload stopped phone to Cloudflare R2 ($0.00 egress, frees local ARM64 NVMe)
curl -s -X POST https://api.tapclank.com/v1/phones/ph_01/hibernate \
  -H "X-API-Key: $TC_KEY" -H "Content-Type: application/json" \
  -d '{"name":"Post-Warmup R2 Cold Vault"}'
# -> { "ok": true, "storage_tier": "cold_r2", "r2_key": "snapshots/org_.../ph_01/snap_....json" }

# 3. Clone Gold Master into a fresh account phone (synthesizes distinct Luhn IMEI, Android ID & MAC!)
curl -s -X POST https://api.tapclank.com/v1/phones/ph_01/clone \
  -H "X-API-Key: $TC_KEY" -H "Content-Type: application/json" \
  -d '{"name":"DE-TT-Clone-02","proxy_url":"socks5://user:pass@de.proxy.io:1080"}'

# 4. Wake cold_r2 phone onto healthiest ARM64 node with SHA-256 bundle verification
curl -s -X POST https://api.tapclank.com/v1/phones/ph_01/wake \
  -H "X-API-Key: $TC_KEY" -H "Content-Type: application/json" \
  -d '{"auto_start":true}'

Local Antidetect Browsers, 409 VA Lock & R2 Cookie Sync

Before launching a local deeplite WebKit container, acquire an atomic distributed lock via POST /v1/browsers/:id/lock. If another VA already holds the profile, Cloudflare D1 returns HTTP 409 PROFILE_LOCKED, preventing concurrent SQLite/IndexedDB session corruption.

Sleep-Wake-Hibernate Cloudflare Cron RPA Scheduler

Cloudflare Cron Triggers (* * * * *) evaluate due scheduled_workflows every minute: automatically waking cold_r2 phones, executing any of the 63 server-side RPA templates, recording the workflow_runs receipt, and hibernating the phone back to R2 when auto_hibernate: true.

# Schedule a Cloudflare Cron "Sleep -> Wake -> Run RPA -> Auto-Hibernate R2" job
curl -s -X POST https://api.tapclank.com/v1/schedules \
  -H "X-API-Key: $TC_KEY" -H "Content-Type: application/json" \
  -d '{
    "phone_id": "ph_01",
    "template_slug": "multi-platform-video",
    "cron_expr": "0 */6 * * *",
    "auto_hibernate": true,
    "params": {
      "video": "media://asset_01",
      "tiktok-title": "Built with TapClank 100/100 #ai #automation",
      "youtube-title": "Zero-Egress Cloud Phones Explained #shorts"
    }
  }'

# Trigger immediate execution and inspect run receipt
curl -s -X POST https://api.tapclank.com/v1/schedules/sched_01/run-now -H "X-API-Key: $TC_KEY"

Edge Proxy Geo-Exit Resolver & R2 Media / APK Vault

Manage SOCKS5/HTTP proxy pools (/v1/proxies), resolve exact carrier MCC/MNC + residential Wi-Fi SSIDs across 28+ regions (POST /v1/proxies/resolve-geo), and stage MP4 videos, APKs, or GAL flows in Cloudflare R2 (/v1/media) with zero-egress HMAC-signed node pull URLs (/v1/media/:id/download?token=...).

1-Click Competitor Profile Importer

Send { "source": "geelark" | "adspower" | "multilogin" | "morelogin" | "gologin", "profiles": [...] } to POST /v1/import/profiles to batch-provision cloud phones and antidetect browser profiles with normalized proxies and R2 cookie state.

Billing Ledger, Subscriptions, Webhooks & 30% Lifetime Affiliate API

Per-minute phone sessions bill 500 millicents/min ($0.005/min) via PhoneSessionDO alarms, capped at 95,000 millicents/day ($0.95/day UTC). Referrers earn 30% (3000 bps) lifetime recurring credit on every referred top-up or webhook event.

TapClank Rust CLI (lark / tapclank)

# Cloud Phone & R2 Cold Lifecycle
lark phone list
lark phone create --name "US-NY-01" --timezone "America/New_York" --proxy "socks5://127.0.0.1:1080"
lark phone start ph_01
lark phone audit ph_01                      # 100/100 OEM Telemetry Report
lark phone align-proxy ph_01 --timezone "Asia/Tokyo" --proxy "socks5://jp.proxy:1080"
lark phone snapshot ph_01 --name "Pre-Campaign"
lark phone hibernate ph_01                  # Offloads to Cloudflare R2 (cold_r2)
lark phone wake ph_01                       # Hydrates onto healthy ARM64 node
lark phone clone ph_01 --name "US-NY-Clone" # Fresh Luhn IMEI + MAC + Serial

# 1-Click Competitor Migration & MCP Server
lark import --source geelark --file ./geelark_export.json
lark mcp                                    # Starts 36-tool JSON-RPC stdio MCP server

Netcup / Ampere ARM64 Bare-Metal Node Bootstrap

Run bootstrap-netcup-node.sh on any Ubuntu 24.04 ARM64 server to configure binder_linux, pre-create direct character /dev/binder* nodes (mknod), install dual-mode LXC / private-cgroup Docker, and register lark-node with https://api.tapclank.com.

# 1. Provision Ubuntu 24.04 LTS ARM64 (Netcup VPS 8000 ARM G12.5 / Ampere Altra / RK3588S)
curl -fsSL https://tapclank.com/bootstrap-node.sh | sudo \
  LARK_CLOUD_URL="https://api.tapclank.com" \
  LARK_NODE_ID="eu-nbg-arm-01" \
  LARK_NODE_SECRET="your_hmac_node_secret" \
  CONTAINER_RUNTIME="lxc" \
  bash

# 2. Build neutralized Android 15 OEM base image (patches *redroid*.so -> *qcom*.so)
sudo ./deeplark/scripts/build-phone-image.sh android-oem:15-arm64