Using Subscriptions

A subscription URL is the one link that always serves your latest VPN config. Paste it into Clash, sing-box, or Surge and they auto-update when the operator pushes changes. For the WireGuard app, use the per-format config or QR code instead.

Your subscription URL is a credential, treat it like a password. Anyone with it can use your VPN.

What a subscription URL looks like

https://your-portal/api/v1/sub/{your-token}

The portal always serves the best available node automatically (load + health + region-aware). You don’t need to pick a region manually unless you want to.

Using it with rule-based clients

Paste the subscription URL into your client’s subscription settings. The client pulls a fresh config on a regular interval, so node changes and capacity adjustments reach you without manual work.

Common client subscription entry points:

Clash / mihomo . Profiles → import URL.
sing-box . Outbounds → subscription or urltest group.
Surge . Profiles → download profile from URL.

Rotating your subscription URL

If your URL leaks or you simply want a fresh one:

Go to Console → Settings (or the rotate button).
Click Rotate subscription URL.
The old URL stops working immediately.
Update the URL in every client that uses it.

Rotating does not change your WireGuard keys, only the subscription token changes. Your existing peer connection continues to work.

Multi-device usage

The same subscription URL works on any number of devices, up to your plan’s device limit. To check the limit and current usage:

Console → Devices lists distinct source IPs seen using your config over a rolling window, with a “last seen” timestamp.
WireGuard does not natively track “devices”, the panel approximates by counting distinct source endpoints. NAT or shared networks may affect the count.

To add a device on a new phone or laptop, just import the config there. To remove one, disconnect it from the client; the count drops within a few minutes.

Switching nodes manually (advanced)

The subscription URL auto-selects the best node. To force a specific node, append ?node_id=<id> to the URL, your operator can give you the node IDs.

What happens when your subscription expires

Your WireGuard peer is suspended, traffic stops flowing.
Your config and data are retained, nothing is deleted.
The Console shows a renewal prompt.

To renew, go to Console → Renew and complete payment. The account reactivates immediately, no re-download needed. If your plan doesn’t have self-service billing enabled, contact the operator and they’ll extend the subscription from the admin panel.

If you exceed your data quota, the same suspension applies until quota is added.

Troubleshooting

Problem	Solution
Can’t connect after registration	Wait 10-30 seconds for the peer to propagate. If persistent, ask the operator to check node status.
Config import fails	Confirm you’re using the matching format. `.conf` is for the WireGuard app only.
QR code won’t scan	Use a WireGuard-compatible app to scan, generic QR scanners won’t accept the `wireguard://` URI.
“Panel unreachable” in Console	The portal is temporarily down. Your existing tunnel may still work, toggle it off and on.
Too many devices	Disconnect an unused device, or ask the operator to raise your device limit.
Slow speeds	Try a different node (if your operator has multiple). The operator can also adjust per-account bandwidth.

Security notes

Your subscription URL is your credential. Treat it like a password.
Rotating invalidates the old URL instantly.
The operator cannot see your traffic. They manage the infrastructure but cannot decrypt your data.
Your private key never leaves the server. It is generated server-side and encrypted at rest. The config file contains the key, protect it accordingly.