ZexaPay API

Automated payment processing — mobile money & crypto smart contracts

ZexaPay provides a RESTful API for automated payment processing. Accept deposits via mobile money (bKash, Nagad, GCash, etc.) with real-time transaction matching, or generate unique crypto payment addresses with smart contract forwarding.

Authentication

All API requests require your API key in the X-API-Key header.

curl -H "X-API-Key: zpay_live_abc123..." \
  https://secure-pay.zexabit.com/api/v1/client/deposit

Base URL

https://secure-pay.zexabit.com/api/v1

Create Deposit Request

Create a pending deposit that will be auto-matched when payment is received.

curl -X POST https://secure-pay.zexabit.com/api/v1/client/deposit \
  -H "X-API-Key: zpay_live_abc123..." \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 1000,
    "externalId": "order_12345",
    "customerName": "John Doe"
  }'

{
  "depositId": "665f1a2b3c4d5e6f7a8b9c0d",
  "amount": 1000,
  "externalId": "order_12345",
  "status": "pending",
  "expiresAt": "2026-04-11T01:30:00.000Z",
  "paymentNumber": "+8801XXXXXXXXX",
  "provider": "bkash"
}

Check Deposit Status

{
  "externalId": "order_12345",
  "status": "matched",
  "amount": 1000,
  "matchedAt": "2026-04-11T01:25:12.000Z",
  "trxID": "ABC123XYZ",
  "senderPhone": "+8801712345678"
}

List Deposits

Generate Crypto Payment Address

Generate a unique payment address for crypto payments. Funds are auto-forwarded to your treasury wallet via smart contracts.

curl -X POST https://secure-pay.zexabit.com/api/v1/dashboard/crypto-wallets/generate-address \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "network": "BEP-20",
    "amount": 10000,
    "reference": "invoice-456"
  }'

{
  "address": "0x3a9f7b2c1d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a",
  "paymentId": "665f1a2b3c4d5e6f7a8b9c0d",
  "network": "BEP-20",
  "tokens": [
    { "symbol": "USDT", "contractAddress": "0x55d3...", "decimals": 18 },
    { "symbol": "USDC", "contractAddress": "0x8AC7...", "decimals": 18 }
  ],
  "amount": 10000,
  "reference": "invoice-456"
}

Check Crypto Payment Status

Supported Networks

List Wallets

Add Wallet

Webhooks

ZexaPay sends webhook notifications to your configured URL when payment events occur.

Configure your webhook URL in the dashboard.

Webhook Payload

POST https://your-app.com/webhook
Headers:
  X-ZexaPay-Signature: sha256=abc123...
  X-ZexaPay-Event: deposit.matched
  Content-Type: application/json

{
  "event": "deposit.matched",
  "depositId": "665f1a2b...",
  "externalId": "order_12345",
  "amount": 1000,
  "trxID": "ABC123XYZ",
  "senderPhone": "+8801712345678",
  "matchedAt": "2026-04-11T01:25:12.000Z"
}

Webhook Events

Signature Verification

Verify webhook authenticity using HMAC-SHA256 with your webhook secret.

const crypto = require('crypto');

function verifyWebhook(body, signature, secret) {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', secret)
    .update(body)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

Error Codes

Rate Limits