Sign API requests and verify callbacks. Provide the collection destination.
Interactive, non-production walkthrough
See the complete Merchant API flow before writing code.
Walk through Ed25519 authentication, a USDT-TRC20 deposit order, signed callbacks, status recovery, and an asynchronous withdrawal.
Monitor deposits, sweep funds, apply controls, sign, and broadcast withdrawals.
End-to-end flow
One deterministic integration journey
Ready · 0 of 7
-
01
AuthenticatemTLS + Ed25519
-
02
Create orderReceive one-time address
-
03
Deposit callbackVerify raw body
-
04
Query orderRecover source of truth
-
05
Create withdrawalSubmit intent only
-
06
Status callbacksTrack every transition
-
07
Query withdrawalConfirm solidified result
{
"network_activity": false,
"browser_storage": false,
"secret_inputs": false
}
Callback receiver
Verify first. Deduplicate second. Commit before 2xx.
-
1
Read exact bytes
Do not parse and re-serialize before verification.
-
2
Check time + Ed25519
Reject stale, malformed, or untrusted signatures.
-
3
Deduplicate atomically
Use X-Webhook-Id under a database unique constraint.
-
4
Apply and acknowledge
Commit the business update, then return any 2xx.
Run the walkthrough to see signed event occurrences.
Implementation shapes
Use server-side credentials in your own environment.
These snippets are displayed only; nothing is executed by this page.