Payments built for casinos and forex.

curl -X GET "https://app.tsarapay.com/resource" \
  -H "API-KEY: YOUR_API_KEY"

API-KEY: 0d8d8e89a6cdcd

{ "errorCode": 50003, "errorMessage": "amount required" }

{
  "errorCode": 0,
  "redirectUrl": "https://app.tsarapay.com/widget/sale/create/?token=cyR0YnNOe...",
  "html": "<a href='https://app.tsarapay.com/widget/sale/create/?token=cyR0YnNOe...'></a>"
}

{
  "errorCode": 0,
  "redirectUrl": "https://app.tsarapay.com/widget/sale/create/?token=cyR0YnNOe...",
  "html": "<a href='https://app.tsarapay.com/widget/sale/create/?token=cyR0YnNOe...'></a>"
}

{
  "errorCode": 0,
  "redirectUrl": "https://app.tsarapay.com/widget/sale/create/?token=cyR0YnNOe...",
  "html": "<a href='https://app.tsarapay.com/widget/sale/create/?token=cyR0YnNOe...'></a>"
}

{
  "errorCode": 0,
  "invoice": { "id": "1689", "devise": "USD", "amount": "4", "status": "invoice:created" }
}

{
  "errorCode": 0,
  "merchant_id": "1",
  "invoice_id": "1689",
  "data": {
    "status": "invoice:paid",
    "id": 1736,
    "devise": "USD",
    "amount": 5,
    "description": "Payment of the invoice has been made successfully",
    "callbackJson": null,
    "fiat_amount": 409.71,
    "fiat_currency": "INR",
    "totalAmount": 4,
    "totalCurrency": "USDC",
    "datetime": "2023-04-12 19:09:48"
  }
}

// Install php-curl-class: composer require php-curl-class/php-curl-class
require __DIR__ . '/vendor/autoload.php';
use Curl\Curl;

$API_KEY = ''; // Your API-KEY (issued by TsaraPay)

$url = 'https://app.tsarapay.com/api/client-invoice-info/get/';
$data = [ 'id' => 185 ];

$curl = new Curl();
$curl->setHeader('Content-Type', 'application/json');
$curl->setHeader('API-KEY', $API_KEY);
$curl->post($url, $data);

if ($curl->error) {
    echo 'Error: ' . $curl->errorMessage;
} else if ($curl->response->errorCode == 0) {
    var_dump($curl->response); // invoice info payload
} else {
    var_dump($curl->response); // { errorCode, errorMessage }
}

{
  "errorCode": 0,
  "status": "PAID",
  "from": "2023-06-01",
  "to": "2023-06-19",
  "page": 2,
  "order": "DESC",
  "list": [
    {
      "id": "1932",
      "email": "buyer@gmail.com",
      "status": "PAID",
      "amount": "1.00",
      "symbol": "USD",
      "create_date": "2023-06-15 10:39:34",
      "status_date": "2023-06-15 10:40:38",
      "tx_hash": "0xda4fd344e6310738db73dabdb42a213a38f14d2379b13c27fe86f8452002d4c5",
      "exchange_currency_symbol": "USDC",
      "paid_amount": "1.00",
      "merchant_amount": "0.900",
      "fee_amount": "0.100",
      "ip": "102.117.124.254",
      "country": "United Arab Emirates",
      "success_url": null,
      "pending_url": null,
      "cancel_url": null
    }
  ],
  "total": "51"
}

// composer require php-curl-class/php-curl-class
require __DIR__ . '/vendor/autoload.php';
use Curl\Curl;

$API_KEY = ''; // Your API-KEY
$url = 'https://app.tsarapay.com/api/invoices/history/';

$data = [
  'status' => 'PAID',
  'from'   => '2023-06-01',
  'to'     => '2023-06-19',
  'order'  => 'ASC',
  'page'   => 2,
];

$curl = new Curl();
$curl->setHeader('Content-Type', 'application/json');
$curl->setHeader('API-KEY', $API_KEY);
$curl->post($url, $data);

if ($curl->error) {
    echo 'Error: ' . $curl->errorMessage;
} else {
    var_dump($curl->response);
}

// composer require php-curl-class/php-curl-class
require __DIR__ . '/vendor/autoload.php';
use Curl\Curl;

$API_KEY = ''; // Your API-KEY (issued by TsaraPay)

// Invoice creation endpoint (IP-restricted call)
$url = 'https://app.tsarapay.com/api/btn-create-invoice/get/';

$data = [
  'email'  => 'buyer' . date('His') . '@example.com',
  'amount' => 1,
  'devise' => 'USD',
];

$curl = new Curl();
$curl->setHeader('Content-Type', 'application/json');
$curl->setHeader('API-KEY', $API_KEY);
$curl->post($url, $data);

if ($curl->error) {
    echo 'Error: ' . $curl->errorMessage . "\n";
} else if ($curl->response->errorCode == 0) {
    echo 'redirectUrl: ' . $curl->response->redirectUrl . "\n";
    echo 'html: ' . $curl->response->html . "\n";
} else {
    echo $curl->response->errorMessage . "\n";
}

{
  "status": "invoice:paid",
  "devise": "USD",
  "amount": "1500.00",
  "id": "15515",
  "description": "Invoice paid",
  "callbackJson": "{\"txId\":\"qktr12eqzg\",\"status\":\"sfrt\"}"
}

{
  "status": "invoice:failed",
  "description": "An error occurred",
  "id": "15515",
  "callbackJson": "{\"txId\":\"qktr12eqzg\",\"status\":\"sfrt\"}"
}

// ---- Read POST parameters
$id           = intval($_POST['id']);
$status       = $_POST['status'];
$devise       = $_POST['devise'];
$amount       = floatval($_POST['amount']);
$description  = $_POST['description'];
$callbackJson = $_POST['callbackJson'];

// ---- Read the signature header
$signatureKey = 'X-Signature';
$headers = [];
if (function_exists('apache_request_headers')) {
    $headers = apache_request_headers();
} else {
    foreach ($_SERVER as $key => $value) {
        if (substr($key, 0, 5) == "HTTP_") {
            $key = str_replace(" ", "-",
                ucwords(strtolower(str_replace('_', ' ', substr($key, 5)))));
            $headers[$key] = $value;
        }
    }
}
$signature = $headers[$signatureKey];

// ---- Recompute the HMAC-SHA256 hash with YOUR API key
$hashData = hash_hmac('sha256',
    json_encode([
        'id'     => $id,
        'amount' => $amount,
        'devise' => $devise,
        'status' => $status,
    ]),
    $YOUR_API_KEY // the API-KEY TsaraPay issued to you
);

// ---- Compare
if (hash_equals($hashData, $signature)) {
    // OK — trusted. Insert / update your records.
} else {
    // KO — reject the notification.
}