API Reference

Complete REST API reference for Card2Crypto

Base URL

All API requests should be made to:

https://card2crypto.cc/api/v1

Authentication

All API requests require authentication using your API key in the Authorization header:

curl https://card2crypto.cc/api/v1/payments \
  -H "Authorization: Bearer c2c_live_your_api_key_here"

See Authentication for details.

API Keys

Get your API keys from the Dashboard.

API keys follow this format:

c2c_live_[64 character hex string]

Never expose your API keys in client-side code, public repositories, or logs.

Request Format

All POST requests must include:

• Content-Type: application/json header
• Valid JSON body

curl -X POST https://card2crypto.cc/api/v1/payments \
  -H "Authorization: Bearer c2c_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 10000,
    "currency": "usd",
    "return_url": "https://yoursite.com/success"
  }'

Response Format

Success Response

All successful responses return JSON with a data field:

{
  "success": true,
  "data": {
    "id": "pay_abc123",
    "amount": 10000,
    "currency": "usd",
    "status": "pending",
    "checkout_url": "https://card2crypto.cc/checkout/pay_abc123",
    "created_at": "2025-10-16T12:00:00Z"
  }
}

Error Response

Error responses include an error message and appropriate HTTP status code:

{
  "success": false,
  "error": "Invalid API key"
}

HTTP status codes indicate the type of error:

• 400 - Bad Request (invalid parameters)
• 401 - Unauthorized (invalid or missing API key)
• 404 - Not Found (resource doesn’t exist)
• 429 - Too Many Requests (rate limit exceeded)
• 500 - Internal Server Error

Pagination

List endpoints support pagination using query parameters:

GET /api/v1/payments?page=2&limit=20

Parameters:

• page - Page number (default: 1)
• limit - Items per page (default: 10, max: 100)

Response includes pagination metadata:

{
  "success": true,
  "data": [...],
  "pagination": {
    "page": 2,
    "limit": 20,
    "total": 150,
    "pages": 8
  }
}

Rate Limits

API requests are rate limited to prevent abuse:

• Production: 100 requests per minute per API key
• Rate limit headers are included in responses:

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 95
X-RateLimit-Reset: 1634567890

When rate limited, you’ll receive a 429 Too Many Requests response:

{
  "success": false,
  "error": "Rate limit exceeded. Try again in 30 seconds."
}

See Rate Limits for details.

Idempotency

To prevent duplicate payments from network issues or retries, include an idempotency key:

curl -X POST https://card2crypto.cc/api/v1/payments \
  -H "Authorization: Bearer c2c_live_..." \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: unique_key_123" \
  -d '{
    "amount": 10000,
    "currency": "usd",
    "return_url": "https://yoursite.com/success"
  }'

Requests with the same idempotency key within 24 hours will return the same result without creating a duplicate payment.

Versioning

The API version is included in the URL path:

https://card2crypto.cc/api/v1/...

We maintain backwards compatibility within major versions. Breaking changes will be released as new versions (v2, v3, etc.) with migration guides.

Available Endpoints

Payments

Create and manage payments:

Create Payment

POST /api/v1/payments

Retrieve Payment

GET /api/v1/payments/:id

SDK Libraries

Official SDKs coming soon. For now, use the REST API directly with your preferred HTTP client.

Node.js

const fetch = require('node-fetch');

const apiKey = process.env.CARD2CRYPTO_API_KEY;

async function createPayment(amount, returnUrl) {
  const response = await fetch('https://card2crypto.cc/api/v1/payments', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${apiKey}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      amount,
      currency: 'usd',
      return_url: returnUrl
    })
  });

  return response.json();
}

PHP

<?php

function createPayment($amount, $returnUrl) {
    $apiKey = getenv('CARD2CRYPTO_API_KEY');

    $ch = curl_init('https://card2crypto.cc/api/v1/payments');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json'
    ]);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
        'amount' => $amount,
        'currency' => 'usd',
        'return_url' => $returnUrl
    ]));

    $response = curl_exec($ch);
    curl_close($ch);

    return json_decode($response, true);
}

Python

import os
import requests

def create_payment(amount, return_url):
    api_key = os.getenv('CARD2CRYPTO_API_KEY')

    response = requests.post(
        'https://card2crypto.cc/api/v1/payments',
        headers={
            'Authorization': f'Bearer {api_key}',
            'Content-Type': 'application/json'
        },
        json={
            'amount': amount,
            'currency': 'usd',
            'return_url': return_url
        }
    )

    return response.json()

Testing

See Testing Guide for information on testing your integration.

Support

Need help? Check these resources:

Integration Guides

Step-by-step integration tutorials

FAQ

Frequently asked questions

Error Reference

Complete list of error codes

Webhook Documentation

Learn how to handle payment notifications

Changelog

Subscribe to API updates: Dashboard > API Settings

Major changes will be announced at least 30 days in advance with migration guides provided.