API Documentation

Accept crypto payments on your platform with a simple REST API. Multi-chain support, real-time webhooks, 0.4% fees.

Overview

The CryptoSetype API lets you create crypto payment invoices, track their status, and receive webhook notifications when payments are confirmed on-chain. All responses are JSON. All timestamps are Unix milliseconds.

Supported currencies: USDT (TRC-20, ERC-20, BEP-20, Solana), USDC (ERC-20, BEP-20, Solana), BTC, ETH, SOL, BNB, LTC — 12 payment methods across 6 chains.

Base URL

https://crypto.setype.com

All API endpoints are relative to this base URL.

Authentication

Authenticate requests with your store's API key in the X-API-Key header. Your API key is shown once when you create a store — save it securely.

# Every authenticated request must include:
X-API-Key: sk_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6

Errors

All errors return a JSON object with an error field:

{
  "error": "Human-readable error message"
}

Create Payment

{
  "id": "pay_a1b2c3d4e5f6g7h8",
  "payment_url": "https://crypto.setype.com/pay/pay_a1b2c3d4e5f6g7h8",
  "address": "TGGrCNwFuzrJbJPHx4pWm6jfgxz5xVVvvv",
  "amount": 25.00,
  "currency": "USDT",
  "chain": "tron",
  "status": "pending",
  "expires_at": 1712345678000
}

curl -X POST https://crypto.setype.com/api/payments \
  -H "Content-Type: application/json" \
  -H "X-API-Key: sk_your_api_key_here" \
  -d '{
    "amount": 25.00,
    "currency": "USDT",
    "order_id": "order_123",
    "webhook_url": "https://yoursite.com/webhook"
  }'

curl -X POST https://crypto.setype.com/api/payments \
  -H "Content-Type: application/json" \
  -H "X-API-Key: sk_your_api_key_here" \
  -d '{
    "amount": 50.00,
    "currency": "USD",
    "order_id": "order_456"
  }'

curl -X POST https://crypto.setype.com/api/payments \
  -H "Content-Type: application/json" \
  -H "X-API-Key: sk_your_api_key_here" \
  -d '{
    "amount": 0.001,
    "currency": "BTC",
    "order_id": "order_789"
  }'

curl -X POST https://crypto.setype.com/api/payments \
  -H "Content-Type: application/json" \
  -H "X-API-Key: sk_your_api_key_here" \
  -d '{
    "amount": 100.00,
    "currency": "USDT",
    "chain": "ethereum",
    "order_id": "order_erc20"
  }'

Get Payment

{
  "id": "pay_a1b2c3d4e5f6g7h8",
  "order_id": "order_123",
  "address": "TGGrCNwFuzrJbJPHx4pWm6jfgxz5xVVvvv",
  "expected_amount": 25.00,
  "expected_crypto": "USDT",
  "received_amount": 25.00,
  "tx_hash": "abc123def456...",
  "status": "confirmed",
  "expires_at": 1712345678000,
  "confirmed_at": 1712344000000,
  "created_at": 1712343000000
}

List Payments

[
  {
    "id": "pay_a1b2c3d4e5f6g7h8",
    "order_id": "order_123",
    "address": "TGGrCNwFuzrJbJPHx4pWm6jfgxz5xVVvvv",
    "expected_amount": 25.00,
    "expected_crypto": "USDT",
    "received_amount": 25.00,
    "status": "confirmed",
    "created_at": 1712343000000
  }
]

Cancel Payment

{
  "id": "pay_a1b2c3d4e5f6g7h8",
  "status": "cancelled"
}

Payment Status (Public)

{
  "status": "pending",
  "expected_amount": 25.00,
  "expected_crypto": "USDT",
  "chain": "tron",
  "received_amount": null,
  "address": "TGGrCNwFuzrJbJPHx4pWm6jfgxz5xVVvvv",
  "amount_usd": 25.00,
  "expires_at": 1712345678000,
  "success_url": "https://yoursite.com/success",
  "fail_url": "https://yoursite.com/fail"
}

List Enabled Chains

[
  { "chain": "tron",     "ticker": "USDT", "label": "USDT (TRC-20)",  "isToken": false, "freeWallets": 5 },
  { "chain": "bitcoin",  "ticker": "BTC",  "label": "Bitcoin",       "isToken": false, "freeWallets": 5 },
  { "chain": "ethereum", "ticker": "ETH",  "label": "Ethereum",      "isToken": false, "freeWallets": 5 },
  { "chain": "ethereum", "ticker": "USDT", "label": "USDT (ERC-20)",  "isToken": true,  "freeWallets": 5 },
  { "chain": "ethereum", "ticker": "USDC", "label": "USDC (ERC-20)",  "isToken": true,  "freeWallets": 5 },
  { "chain": "bnb",      "ticker": "USDT", "label": "USDT (BEP-20)",  "isToken": true,  "freeWallets": 5 },
  // ... SOL, BNB, LTC, USDC variants
]

Get Payment Chain Options

[
  {
    "chain": "tron",
    "ticker": "USDT",
    "estimatedAmount": 50.00,
    "available": true,
    "freeWallets": 5
  },
  {
    "chain": "bitcoin",
    "ticker": "BTC",
    "estimatedAmount": 0.00058214,
    "available": true,
    "freeWallets": 5
  }
]

Select Chain for Payment

{
  "address": "bc1qzpqrgve9g3sff9ds799f7jx5ktwl0jthp22222",
  "amount": 0.00058214,
  "currency": "BTC",
  "chain": "bitcoin",
  "expires_at": 1712345678000
}

Webhooks

Webhooks notify your server when a payment is confirmed or expires. Set the webhook URL in your store settings or per-payment in the webhook_url field.

Each webhook request is signed with your store's webhook_secret (format: whsec_...), which you receive when creating your store. Verify the signature to confirm authenticity.

Webhook Events

Retry Policy

Webhooks are retried up to 3 times: immediately, after 60 seconds, after 300 seconds. Each attempt has a 10-second timeout. Your server should return 2xx to acknowledge receipt.

Webhook Payload

// POST to your webhook URL
// Headers:
//   Content-Type: application/json
//   X-Signature: <HMAC-SHA256 hex digest>

{
  "event": "payment.confirmed",
  "payment_id": "pay_a1b2c3d4e5f6g7h8",
  "order_id": "order_123",
  "expected_amount": 25.00,
  "received_amount": 25.00,
  "currency": "USDT",
  "tx_hash": "abc123def456...",
  "address": "TGGrCNwFuzrJbJPHx4pWm6jfgxz5xVVvvv",
  "status": "confirmed",
  "metadata": { "user_id": 42 },
  "timestamp": 1712344000
}

Signature Verification

Verify the X-Signature header using HMAC-SHA256 with your webhook_secret as the key and the raw request body as the message.

Node.js Example

const crypto = require('crypto');

function verifyWebhook(rawBody, signature, webhookSecret) {
  const expected = crypto
    .createHmac('sha256', webhookSecret)
    .update(rawBody)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature, 'hex'),
    Buffer.from(expected, 'hex')
  );
}

// Express middleware:
app.post('/webhook', express.raw({ type: 'application/json' }), (req, res) => {
  const signature = req.headers['x-signature'];
  if (!verifyWebhook(req.body, signature, 'whsec_your_secret')) {
    return res.status(401).send('Invalid signature');
  }

  const event = JSON.parse(req.body);
  if (event.event === 'payment.confirmed') {
    // Fulfill the order
    console.log(`Payment ${event.payment_id} confirmed: ${event.received_amount} ${event.currency}`);
  }

  res.sendStatus(200);
});

Python Example

import hmac, hashlib, json
from flask import Flask, request

app = Flask(__name__)

def verify_webhook(raw_body, signature, secret):
    expected = hmac.new(
        secret.encode(), raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(signature, expected)

@app.route('/webhook', methods=['POST'])
def webhook():
    signature = request.headers.get('X-Signature', '')
    if not verify_webhook(request.data, signature, 'whsec_your_secret'):
        return 'Invalid signature', 401

    event = request.json
    if event['event'] == 'payment.confirmed':
        # Fulfill the order
        print(f"Payment {event['payment_id']} confirmed")

    return 'OK', 200

PHP Example

<?php
$rawBody = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_SIGNATURE'] ?? '';
$secret = 'whsec_your_secret';

$expected = hash_hmac('sha256', $rawBody, $secret);

if (!hash_equals($expected, $signature)) {
    http_response_code(401);
    die('Invalid signature');
}

$event = json_decode($rawBody, true);

if ($event['event'] === 'payment.confirmed') {
    // Fulfill the order
    error_log("Payment {$event['payment_id']} confirmed");
}

http_response_code(200);
?>

Check Available Balance

{
  "available": 95.50,
  "withdrawal_fee": 3.00,
  "you_receive": 92.50,
  "min_withdrawal": 10.00
}

Request Withdrawal

{
  "id": "wd_a1b2c3d4e5f6g7h8",
  "status": "pending",
  "amount": 50.00,
  "withdrawal_fee": 3.00,
  "you_receive": 47.00,
  "message": "Withdrawal submitted. Fee: 3.0 USDT. You will receive 47.000000 USDT."
}

Create Store

{
  "id": "str_a1b2c3d4e5f6g7h8",
  "name": "My Store",
  "api_key": "sk_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6",
  "webhook_secret": "whsec_a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6",
  "message": "Store created. Save the API key and webhook secret - they cannot be retrieved later."
}

Update Store

Regenerate API Key

{
  "api_key": "sk_new_api_key_here_48_hex_characters",
  "message": "Save this key - it cannot be retrieved later."
}

Fee Structure

{
  "payment_fee_rate": 0.004,
  "payment_fee_percent": "0.4%",
  "withdrawal_fees": { "USDT": 3.0, "TRX": 2.0 },
  "min_withdrawal": { "USDT": 10.0, "TRX": 20.0 }
}

Payment Statuses

Supported Chains

Integration Flow

Seamless (API-only, no redirects)

For services that want full control of the payment UI:

// 1. Create payment
const res = await fetch('https://crypto.setype.com/api/payments', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-API-Key': 'sk_your_api_key'
  },
  body: JSON.stringify({
    amount: 25.00,
    currency: 'USDT',
    order_id: 'order_123',
    webhook_url: 'https://yoursite.com/webhook'
  })
});
const payment = await res.json();

// 2. Show address + amount to customer in your UI
console.log(payment.address);  // "TGGrCNw..."
console.log(payment.amount);   // 25.00

// 3. Poll for status (or wait for webhook)
const status = await fetch(
  `https://crypto.setype.com/api/payments/${payment.id}/status`
).then(r => r.json());

if (status.status === 'confirmed') {
  // Fulfill the order
}

Hosted Checkout (redirect)

Redirect the customer to our hosted payment page:

// 1. Create payment with success/fail URLs
const payment = await createPayment({
  amount: 25.00,
  currency: 'USD',  // Multi-chain: customer picks coin
  order_id: 'order_123',
  success_url: 'https://yoursite.com/success?order=123',
  fail_url: 'https://yoursite.com/checkout?order=123'
});

// 2. Redirect customer to hosted checkout
window.location.href = payment.payment_url;
// e.g. https://crypto.setype.com/pay/pay_a1b2c3d4e5f6g7h8

// 3. After payment, customer is redirected to success_url
// 4. Verify via webhook (don't trust redirects alone!)