curl https://api.tasdid.com/api/v1/payments \
  -H "Authorization: Bearer tsd_live_..." \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "amount_usd": 72.50,
    "success_url": "https://yourshop.com/thanks",
    "cancel_url":  "https://yourshop.com/cart",
    "metadata": { "order_id": "ORD-1234" }
  }'

Authorization: Bearer tsd_live_abcdef...

POST /api/v1/payments
Idempotency-Key: 06f3eba8-31dc-4d6f-a3f0-7c6e3f8b9001

HTTP/1.1 201 Created
Idempotent-Replayed: true
Content-Type: application/json
...

{
  "error": {
    "type": "invalid_request_error",
    "code": "invalid_field",
    "message": "Number must be less than or equal to 10000",
    "param": "amount_usd"
  }
}

curl https://api.tasdid.com/api/v1/payments \
  -H "Authorization: Bearer tsd_live_..." \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "amount_usd": 72.50,
    "chain": "BSC",
    "reference": "ORD-1234",
    "expires_in_minutes": 30,
    "success_url": "https://yourshop.com/thanks?order=ORD-1234",
    "cancel_url":  "https://yourshop.com/cart",
    "customer_email": "buyer@example.com",
    "metadata": { "order_id": "ORD-1234", "sku": "T-shirt-L" }
  }'

{
  "id": "cmpy3q1k0000a8j2hxs1mr2y",
  "reference": "TSD-CJBMXP",
  "merchant_reference": "ORD-1234",
  "status": "PENDING",
  "mode": "live",
  "amount_usd": 72.5,
  "amount_usdt": 72.5,
  "locked_rate": 1,
  "chain": "BSC",
  "asset": "USDT",
  "deposit_address": "0xC59829e89Eb32Dcd34bbaD8f7555954a25A62f07",
  "qr_uri": "ethereum:0x705b...c3bf@97/transfer?address=0xC598...&uint256=72500000000000000000",
  "hosted_url": "https://app.tasdid.com/pay/TSD-CJBMXP",
  "source": "api",
  "success_url": "https://yourshop.com/thanks?order=ORD-1234",
  "cancel_url":  "https://yourshop.com/cart",
  "customer_email": "buyer@example.com",
  "metadata": { "order_id": "ORD-1234", "sku": "T-shirt-L" },
  "on_chain_txs": [],
  "paid_at": null,
  "expires_at": "2026-06-04T08:30:00.000Z",
  "created_at": "2026-06-04T08:00:00.000Z"
}

curl https://api.tasdid.com/api/v1/payments/TSD-CJBMXP \
  -H "Authorization: Bearer tsd_live_..."

curl -X POST https://api.tasdid.com/api/v1/payments/TSD-CJBMXP/test_complete \
  -H "Authorization: Bearer tsd_test_..."

{
  "id": "evt_a1b2c3d4e5f6a7b8c9d0e1f2",
  "type": "payment.paid",
  "created": 1717450000,
  "data": { /* a Payment object */ }
}

Tasdid-Signature: t=1717450000,v1=86c1a7b3e2c5...
Tasdid-Event-Type: payment.paid
Tasdid-Event-Id: evt_a1b2c3...

import { createHmac, timingSafeEqual } from "node:crypto";

export function verifyTasdidSignature(rawBody, header, secret) {
  const match = /^t=(\d+),v1=([a-f0-9]+)$/.exec(header ?? "");
  if (!match) return false;
  const [, t, v1] = match;
  const expected = createHmac("sha256", secret)
    .update(`${t}.${rawBody}`)
    .digest("hex");
  return v1.length === expected.length &&
    timingSafeEqual(Buffer.from(expected), Buffer.from(v1));
}

import hmac, hashlib, re

def verify_tasdid_signature(raw_body: bytes, header: str, secret: str) -> bool:
    m = re.match(r"^t=(\d+),v1=([a-f0-9]+)$", header or "")
    if not m: return False
    t, v1 = m.group(1), m.group(2)
    expected = hmac.new(
        secret.encode(),
        f"{t}.".encode() + raw_body,
        hashlib.sha256,
    ).hexdigest()
    return hmac.compare_digest(expected, v1)

function verify_tasdid_signature(string $rawBody, ?string $header, string $secret): bool {
  if (!$header || !preg_match('/^t=(\d+),v1=([a-f0-9]+)$/', $header, $m)) {
    return false;
  }
  [, $t, $v1] = $m;
  $expected = hash_hmac('sha256', $t . '.' . $rawBody, $secret);
  return hash_equals($expected, $v1);
}