How to Accept Crypto Payments: Integration Guide

• $ Is there a sandbox or test environment?

  > No. PayKilla does not currently offer a sandbox, but our team can guide you through the testing process step by step on request.

• $ How do I sign a crypto payment API request?

  > Every request to the crypto payment API is authenticated with an HMAC-SHA256 signature rather than a bearer token. Authentication values are passed as the timestamp, recvWindow (recommended: 5000 ms), and signature query parameters.

  > For POST requests, sign only timestamp + recvWindow; the JSON body is not included in the signature.

  > For GET requests, sign all query parameters, including timestamp and recvWindow.

  const timestamp = Date.now()
  const recvWindow = 5000
  const signature = sign(
    qs.stringify({
      timestamp,
      recvWindow,
    }),
    secret,
  )
  
  const { data } = await client.post(
    "endpoint",
    {
      type: "FIAT_BASED",
      purpose: "Order 1001",
      currency: "USD",
      totalPrice: "10",
      paymentCurrencies: ["USDTTRC"],
    },
    {
      params: {
        timestamp,
        recvWindow,
        signature,
      },
    },
  )

  const timestamp = Date.now()
  const recvWindow = 5000
  const signature = sign(qs.stringify({ timestamp, recvWindow }), secret)
  
  const { data } = await client.post("endpoint", {
    type: "FIAT_BASED",
    purpose: "Order 1001",
    currency: "USD",
    totalPrice: "10",
    paymentCurrencies: ["USDTTRC"],
  }, { params: { timestamp, recvWindow, signature } })

  > Payment currencies must be network-qualified tickers such as USDTTRC or USDTETH. A bare USDT ticker is invalid. Retrieve the current list directly from the API; see PayKilla Docs — Integration for the exact endpoint.

• $ Which webhook events are available?

  > PayKilla documents 13 events across five categories. Each event is assigned a HIGH, MEDIUM or LOW priority.

  > Key events:

  Payment: PAYMENT_COMPLETED, PAYMENT_FAILED, PAYMENT_PENDING, PAYMENT_PARTIAL, PAYMENT_OVERPAID, PAYMENT_UNDERPAID

  Invoice: INVOICE_CREATED, INVOICE_EXPIRED, INVOICE_PAID

  Balance & Withdrawal: BALANCE_UPDATED, DEPOSIT_RECEIVED, WITHDRAWAL_INITIATED, WITHDRAWAL_COMPLETED

  > Source: PayKilla Docs — Webhooks.

• $ What is the SLA for API uptime?

  > We target 99.8% uptime across all API endpoints and monitor them continuously. If you need contractual SLA terms for procurement or compliance reviews, contact your account manager.

• $ Is a KYB (business verification) required to get API keys?

  > Yes. Your business completes a one-time KYB check before API keys are issued.

  > See /security/ for details, including registration documents, UBO information, a business model description, and an operating licence for regulated industries.

$