Bitcoin alert and monitoring tools: price, mempool, watchtowers

A serious Bitcoin setup is not just about a well-organised wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → and a safely-stored seed phrase×Seed phraseSequence of 12 or 24 words (usually in English) that encodes your master key. Universal wallet backup : with these words, you can restore your funds on any compatible software.See in the lexicon →. It also requires a layer of discreet but constant monitoring. Being warned when price touches a zone that changes your decisions (DCA×DCA (Dollar Cost Averaging)Buying a small fixed amount at regular intervals (for example 100 EUR a week), regardless of price. Smooths the average purchase cost and neutralises timing bias.See in the lexicon →, partial exit), when mempool×MempoolWaiting area where Bitcoin transactions sit before being included in a block. The fuller the mempool, the higher the fees required.See in the lexicon → fees are at 1 sat/vB×sat/vB (satoshi per vbyte)Standard unit for expressing the Bitcoin fee rate. A typical transaction is 100 to 250 vB. At 5 sat/vB it costs 500 to 1,250 sats.See in the lexicon → and it is time to consolidate, or when your Lightning node×NodeComputer that runs the Bitcoin software and takes part in the network by validating blocks and transactions. A « full node » keeps a complete copy of the blockchain.See in the lexicon → loses a channel overnight, are pieces of information with direct operational value.

The classic trap remains the same as for tracking : mainstream centralised services requiring an account with email plus the list of your addresses or alerts, and reselling that data. Good hygiene, as everywhere in self-custody×Self-custodyModel in which you hold your own private keys. Your bitcoins depend on no third party. This is Bitcoin's founding promise.See in the lexicon →, is to prefer self-hosted tools, public APIs without authentication, or neutral services that do not link the alert to your identity.

This article reviews the four useful tool families in 2026 : price alerts, mempool and fee alerts, Lightning watchtowers (a critical special case for security), full-stack node monitoring with Prometheus and Grafana. And it ends with practical trade-offs between self-hosted and third-party services.

Price alerts : self-hosted and neutral services

A price alert is useful for two distinct purposes. For disciplined DCA×DCA (Dollar Cost Averaging)Buying a small fixed amount at regular intervals (for example 100 EUR a week), regardless of price. Smooths the average purchase cost and neutralises timing bias.See in the lexicon → : trigger an off-plan additional purchase when the price touches a level that historically marked a local bottom (for example 35 % below the 200-day moving average). For partial exit : be warned when nearing a price target defined cold, without staying glued to the screen.

Self-hosted solutions. A simple Python or shell script polling a public API×API (Application Programming Interface)Interface that lets one program query another program or service. mempool.space exposes a public API for querying the chain.See in the lexicon → (coingecko.com/api/v3/simple/price/bitcoin, kraken.com REST, or directly a watch-only×Watch-onlyMode in which a wallet observes balances and address history without holding the private key. Used to monitor a cold vault from a less secure device.See in the lexicon → xpub×xpub (extended public key)Extended public key. Lets a read-only wallet see addresses and balances without being able to sign. Used for tracking and observation.See in the lexicon → via local electrs to avoid depending on an external service) and sending a Telegram/Pushover/email/ntfy.sh notification when the threshold is crossed. Fifteen lines of code, zero tracker account, perfectly sovereign. Variants : classic crontab, or ready-to-use Docker×DockerTechnology that packages an application and its dependencies into an isolated container that can be started with one command on any system.See in the lexicon → container (for example alertmanager configured on Prometheus).

Neutral services. mempool.space×mempool.spaceReference open-source Bitcoin explorer in 2026. Visualisation of blocks, fees and the mempool. Launched by Wiz and the mempool.space team.See in the lexicon → natively offers price alerts (since 2024) without account creation, triggered via webhook or anonymous on-site display. Bitcoin Magazine alerts (Twitter @BitcoinMagAlerts) publicly broadcasts round-threshold crossings. For mobile notifications, the mempool.space app launched late 2024 lets you configure local alerts without a third-party server. None of these channels asks for Bitcoin addresses or wealth information.

Mempool and fee alerts : consolidation timing

The Bitcoin fee market is volatile : at 1 sat/vB×sat/vB (satoshi per vbyte)Standard unit for expressing the Bitcoin fee rate. A typical transaction is 100 to 250 vB. At 5 sat/vB it costs 500 to 1,250 sats.See in the lexicon → on average quiet, over 200 sat/vB at activity peaks (ordinals×Ordinals (inscriptions)Protocol (2023) that numbers each satoshi and allows inscribing data (images, text) directly on-chain via Tapscript. At the origin of the debate on block space usage.See in the lexicon →, halving×HalvingScheduled event every 210,000 blocks (roughly every 4 years) that cuts the miner reward in half. This mechanism makes Bitcoin issuance decline towards the total cap of 21 million.See in the lexicon →, panic). A good practice for those holding several fragmented UTXOs is to wait for a quiet period to consolidate into a single large transaction that will then save fees on every spend. Still, one must be warned of quiet windows.

mempool.space×mempool.spaceReference open-source Bitcoin explorer in 2026. Visualisation of blocks, fees and the mempool. Launched by Wiz and the mempool.space team.See in the lexicon → exposes the live fee histogram on its public API×API (Application Programming Interface)Interface that lets one program query another program or service. mempool.space exposes a public API for querying the chain.See in the lexicon → (mempool.space/api/v1/fees/mempool×MempoolWaiting area where Bitcoin transactions sit before being included in a block. The fuller the mempool, the higher the fees required.See in the lexicon →-blocks). A simple script can poll this API every 5 minutes, compare to defined thresholds (for example 1-2 sat/vB for consolidation×Consolidation (UTXO batching)Merging several small UTXOs into one during a low-fee period, to avoid paying dearly when spending them later. A common wallet management practice.See in the lexicon →, 10-15 for urgent spend), and send a notification when the low threshold is reached. An interesting variant : cross with time of day (UTC weekend nights are historically the quietest windows).

For Lightning payments, equivalent alerts concern channel liquidity : being warned when an inbound channel depletes (not enough inbound liquidity×Inbound liquidityCapacity of a Lightning channel to receive payments. To get paid 100,000 sats, you need at least 100,000 sats of inbound liquidity available.See in the lexicon →) or when a channel becomes unbalanced. Tools : RTL and ThunderHub expose these metrics in their dashboard, and allow configuring webhooks to Discord/Telegram when a threshold is crossed.

Lightning watchtowers : critical offline security

Watchtowers are a special case of monitoring tool, because they do not warn the user, they act on their behalf. On Lightning, a paying channel closing with an older state (intentional or by bug) can be challenged during the to-self-delay (typically 1 to 2 weeks). If you are online and watching your node×NodeComputer that runs the Bitcoin software and takes part in the network by validating blocks and transactions. A « full node » keeps a complete copy of the blockchain.See in the lexicon →, you see the fraudulent close and challenge via a justice transaction. If you are offline or your node fails, you lose the funds. A watchtower×WatchtowerService that monitors your Lightning node while you are offline and broadcasts a defence transaction if someone tries to close a channel with a fraudulent state.See in the lexicon → watches on your behalf and triggers the justice transaction.

Three standard implementations in 2026. LND watchtower-client (natively integrated to LND since version 0.7) : configure one or more third-party (or self-hosted) watchtowers, send encrypted breach hints on every channel update. Eye of Satoshi×Satoshi (sat)The smallest unit of bitcoin. 1 BTC = 100 million satoshis. Named after the creator. In 2026, talking in sats becomes common as the price of one BTC rises.See in the lexicon → (EoS, Rust open source×Open sourceSoftware whose source code is public and modifiable by anyone. A fundamental auditability guarantee in Bitcoin.See in the lexicon →, launched by Sergi Delgado in 2020) : a high-performance self-hostable watchtower, independent of the Lightning implementation. Sentinel : equivalent on the Core Lightning side. Cost for the client : a few sats per channel update, negligible.

Good practice. Configure at least two independent watchtowers (defence in depth : if one is down, the other watches). At least one self-hosted on a server separate from the main node (otherwise both fall together). Check monthly that watchtowers properly receive your breach hints (LND : lncli wtclient stats). For those pushing more than 0.5 BTC in channels, this is a non-negotiable security layer.

Node monitoring : Prometheus, Grafana, RTL, ThunderHub

For those running a Bitcoin and/or Lightning node×NodeComputer that runs the Bitcoin software and takes part in the network by validating blocks and transactions. A « full node » keeps a complete copy of the blockchain.See in the lexicon → at home (Umbrel×UmbrelEquivalent distribution for mini-PCs or Raspberry Pi, with a polished web interface and an app store (BTCPay, mempool.space, Sparrow Server, and so on).See in the lexicon →, Start9×Start9 (StartOS)Umbrel alternative focused on sovereignty and privacy. More technically demanding, more rigorous on privacy.See in the lexicon →, RaspiBlitz×RaspiBlitzReady-made software distribution that turns a Raspberry Pi into a Bitcoin and Lightning node. A pioneer of the genre, with an active German-speaking community.See in the lexicon →, or bare setup), full-stack monitoring becomes useful as soon as you go beyond curiosity. Four minimum metrics : CPU/memory/disk usage, Bitcoin Core×Bitcoin CoreReference implementation of the Bitcoin software, written in C++ and maintained by an open-source community. This is the software that most nodes run.See in the lexicon → sync lag (block height vs network), number of connected peers (peer drop = network issue), for Lightning channel×Lightning channel2-of-2 multisig between two participants that lets them exchange sats off-chain as many times as they like, until they close the channel and publish the final balance on Bitcoin.See in the lexicon → health (uptime, balance ratio, failed payments).

Standard stack : Prometheus for metric collection, Grafana for visualisation and alerts. Bitcoin Core exposes a Prometheus exporter via bitcoind-exporter (open source×Open sourceSoftware whose source code is public and modifiable by anyone. A fundamental auditability guarantee in Bitcoin.See in the lexicon →, model standard Prometheus mod). LND natively exposes /metrics in Prometheus format. For Core Lightning, the cln-grpc-bridge or clnprom plugin exposes the same info. Typical configuration : a Prometheus container, a Grafana container, alertmanager for notifications, everything in 200-line Docker Compose×Docker ComposeTool that orchestrates several linked Docker containers (for example Bitcoin Core + electrs + BTCPay) through a YAML file.See in the lexicon →.

Ready-to-use Lightning dashboards. Ride The Lightning (RTL, open source, multi-implementation LND/CLN/Eclair) : full web interface with channel graphs, payments, fees earned, peer management. ThunderHub (open source, mainly LND focus) : visually more modern alternative, with a custom dashboard and path analysis. Both are one-click installable on Umbrel or Start9. They do not replace Prometheus but are complementary for daily use.

Watch-only xpub and vault address alerts

Typical case : you keep a multisig×Multisig (multi-signature)Configuration where a transaction must be signed by several independent keys to be valid (for example 2 of 3). Reduces the risk that a single key theft causes loss of funds.See in the lexicon → cold vault×VaultCustody setup for long-term storage, often multisig, kept offline and touched rarely.See in the lexicon → (cold storage×Cold storageStoring bitcoins on an offline wallet that is not connected to the Internet. Maximum security for amounts you are not spending.See in the lexicon → you never touch), and you want to be warned immediately if a transaction goes out of that vault. Either because it is you, and it is a reassuring confirmation. Or because it is not you, and it is a critical compromise alert. In both cases, the information is worth the detour.

Recommended self-hosted method. Load the watch-only×Watch-onlyMode in which a wallet observes balances and address history without holding the private key. Used to monitor a cold vault from a less secure device.See in the lexicon → xpub×xpub (extended public key)Extended public key. Lets a read-only wallet see addresses and balances without being able to sign. Used for tracking and observation.See in the lexicon → of the vault into Sparrow or Specter locally, configure a notification on new transactions (Sparrow Settings → Server → Notifications). Sparrow polls your personal electrs every 30 seconds, and triggers an OS system notification as soon as a new transaction is detected. No address is sent outside your machine.

Method via self-hosted mempool.space×mempool.spaceReference open-source Bitcoin explorer in 2026. Visualisation of blocks, fees and the mempool. Launched by Wiz and the mempool.space team.See in the lexicon → with Goggles. Goggles (covered in the portfolio tracking article) supports xpub alerts : each received or sent transaction triggers a webhook or a configurable notification. If you self-host mempool.space on Umbrel×UmbrelEquivalent distribution for mini-PCs or Raspberry Pi, with a polished web interface and an app store (BTCPay, mempool.space, Sparrow Server, and so on).See in the lexicon → or Start9×Start9 (StartOS)Umbrel alternative focused on sovereignty and privacy. More technically demanding, more rigorous on privacy.See in the lexicon →, Goggles as a bonus gives you an alert layer while keeping the xpub strictly local. For the paranoid (in the noble sense) : watch the vault via two independent tools (Sparrow plus Goggles) to avoid depending on a single piece of software.

Trade-offs self-hosted vs third-party services

Self-hosted has three structural advantages. Zero data leak (no third-party service knows that you watch the price at 35 000 EUR, or that you have a multisig×Multisig (multi-signature)Configuration where a transaction must be signed by several independent keys to be valid (for example 2 of 3). Reduces the risk that a single key theft causes loss of funds.See in the lexicon → wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → at such address). Zero service dependency (your alert does not depend on the health of a startup that can shut down or change its terms). Marginal operational cost once the setup is in place : your Umbrel×UmbrelEquivalent distribution for mini-PCs or Raspberry Pi, with a polished web interface and an app store (BTCPay, mempool.space, Sparrow Server, and so on).See in the lexicon → or Start9×Start9 (StartOS)Umbrel alternative focused on sovereignty and privacy. More technically demanding, more rigorous on privacy.See in the lexicon → already runs Bitcoin Core×Bitcoin CoreReference implementation of the Bitcoin software, written in C++ and maintained by an open-source community. This is the software that most nodes run.See in the lexicon → and Lightning, adding Prometheus/Grafana or an alert script fits in a few dozen megabytes.

Self-hosted also has three costs. Initial setup : you must master docker×DockerTechnology that packages an application and its dependencies into an isolated container that can be started with one command on any system.See in the lexicon →-compose and a bit of YAML for Prometheus, know how to read a Grafana dashboard. Maintenance : monthly container updates, TLS cert monitoring if you expose outside LAN. Single point of failure : if your self-hosted setup falls (dead disk, prolonged power outage), the alerts no longer run. Mitigation : host critical alerts (notably watchtower×WatchtowerService that monitors your Lightning node while you are offline and broadcasts a defence transaction if someone tries to close a channel with a fraudulent state.See in the lexicon →) on a separate VPS×VPS (Virtual Private Server)Virtual server rented from a hosting provider (Hetzner, DigitalOcean, OVH), accessed via SSH. Typical price 5 to 30 EUR per month.See in the lexicon →.

Practical 2026 synthesis. Minimal setup for a serious Bitcoiner×BitcoinerPerson interested in Bitcoin, who holds some and adheres more or less to its values (individual sovereignty, sound money, decentralisation).See in the lexicon → : price alerts via Python script plus ntfy.sh (sovereign and free), Bitcoin Core monitoring via Umbrel/Start9 built-in dashboards, Lightning watchtowers via two independent services (LND watchtower-client plus self-hosted EoS). Advanced setup : add Prometheus plus Grafana with LND/CLN dashboards, mempool×MempoolWaiting area where Bitcoin transactions sit before being included in a block. The fuller the mempool, the higher the fees required.See in the lexicon → alerts on defined thresholds, xpub×xpub (extended public key)Extended public key. Lets a read-only wallet see addresses and balances without being able to sign. Used for tracking and observation.See in the lexicon → alerts via Sparrow notifications plus Goggles. Total annual cost : 0 EUR if existing infra, around 60 EUR/year if you add a small redundancy VPS.