Overview
CryptoGateway exposes a powerful Merchant API designed for simplicity and reliability. You can create payment orders, query their status, and manage your integration seamlessly.
Authentication
Authenticate your requests by including your secret API key in the x-api-key header.
curl -X GET "https://coinfat.com/api/v1/networks" \
-H "x-api-key: YOUR_API_KEY"
Never share your API keys in client-side code (browsers, mobile apps). Keep them secure on your backend.
Networks API
/api/v1/networks
{
"success": true,
"networks": [
{
"id": 1,
"name": "Ethereum",
"symbol": "ETH",
"is_active": true,
"tokens": [
{
"id": 1,
"name": "USDT",
"symbol": "USDT",
"is_native": false,
"is_stablecoin": false,
"contract_address": "0xdac17f958d2ee523a2206206994597c13d831ec7"
}
]
}
]
}
Merchant API
/api/v1/orders
curl -X POST "https://coinfat.com/api/v1/orders" \
-H "content-type: application/json" \
-H "x-api-key: YOUR_KEY" \
-d '{
"amount": 49,
"title": "Premium Plan",
"metadata": { "user_id": "123" }
}'
/api/v1/orders/:id
{
"id": "ORD_12345",
"status": "pending",
"amount": 49,
"currency": "USDT",
"payment_url": "https://...",
"created_at": "2026-01-09T12:00:00Z"
}
API Explorer
Test endpoints directly from your browser.
Configuration
/api/v1/orders
// Waiting for request...
Webhooks
Listen for events on your server to update order statuses in real-time.
Headers
- X-Signature HMAC-SHA256 hex signature of the payload.
- Content-Type application/json
const crypto = require("crypto");
function verify(rawBody, secret, signature) {
const hash = crypto
.createHmac("sha256", secret)
.update(rawBody)
.digest("hex");
return crypto.timingSafeEqual(
Buffer.from(hash, "hex"),
Buffer.from(signature, "hex")
);
}