InzoPay API Reference

https://api.inzopay.com/v1

export INZOPAY_KEY="ik_live_sk_xxxxxxxxxxxx"

curl https://api.inzopay.com/v1/payment-links \
  -H "Authorization: Bearer $INZOPAY_KEY"

import Inzopay from 'inzopay';

const client = new Inzopay({
  apiKey: process.env.INZOPAY_SECRET_KEY,
  sandbox: process.env.NODE_ENV !== 'production',
});

import inzopay

client = inzopay.Client(
    api_key=os.environ["INZOPAY_SECRET_KEY"],
    sandbox=os.environ.get("ENV") != "production",
)

curl https://api.inzopay.com/v1/payment-links \
  -H "Authorization: Bearer $INZOPAY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"amount":1500,"currency":"USDT","expires_in":1800}'

const link = await client.paymentLinks.create({
  amount:      1500,
  currency:    'USDT',
  title:       'Brand Identity Design',
  methods:     ['USDT-TRC20', 'vodafone_cash'],
  webhook_url: 'https://yoursite.com/webhook',
  redirect_url:'https://yoursite.com/success',
  expires_in:  1800,
  metadata:    { order_id: 'INV-2026-0041' },
});
console.log(link.url);
// → https://pay.inzopay.com/xK2wFq3L9m

link = client.payment_links.create(
    amount=1500, currency="USDT",
    title="Brand Identity Design",
    methods=["USDT-TRC20", "vodafone_cash"],
    webhook_url="https://yoursite.com/webhook",
    expires_in=1800,
    metadata={"order_id": "INV-2026-0041"},
)

{
  "id":          "pl_xK2wFq3L9m",
  "url":         "https://pay.inzopay.com/xK2wFq3L9m",
  "amount":      1500,
  "currency":   "USDT",
  "status":     "active",
  "expires_at": "2026-05-01T15:02:00Z"
}

$payload = file_get_contents('php://input');
$sig     = $_SERVER['HTTP_X_INZOPAY_SIGNATURE'] ?? '';
$secret  = getenv('INZOPAY_WEBHOOK_SECRET');

$parts = [];
parse_str(str_replace(',', '&', $sig), $parts);
$expected = hash_hmac('sha256', ($parts['t'] ?? '') . '.' . $payload, $secret);

if (!hash_equals($expected, $parts['v1'] ?? '')) {
    http_response_code(400); exit('Invalid signature');
}
$event = json_decode($payload, true);
if ($event['type'] === 'payment.paid') fulfill_order($event['data']['metadata']['order_id']);
http_response_code(200);

app.post('/webhook', express.raw({ type: '*/*' }), (req, res) => {
  const sig    = req.headers['x-inzopay-signature'];
  const secret = process.env.INZOPAY_WEBHOOK_SECRET;
  let event;
  try {
    event = Inzopay.webhooks.constructEvent(req.body, sig, secret);
  } catch (err) {
    return res.status(400).send(`Signature error: ${err.message}`);
  }
  if (event.type === 'payment.paid') fulfillOrder(event.data.metadata.order_id);
  res.json({ received: true });
});

@app.route('/webhook', methods=['POST'])
def webhook():
    sig    = request.headers.get('X-Inzopay-Signature')
    secret = os.environ['INZOPAY_WEBHOOK_SECRET']
    try:
        event = inzopay.webhooks.construct_event(request.get_data(), sig, secret)
    except inzopay.SignatureVerificationError:
        return 'Invalid signature', 400
    if event['type'] == 'payment.paid':
        fulfill_order(event['data']['metadata']['order_id'])
    return jsonify(received=True)