AvoPay Web API

Authorization: Bearer <your_api_key>

{
  "payment_id":   "pmt_abc123",
  "checkout_url": "https://avopay.dev/pay/pmt_abc123",
  "expires_at":   "2026-05-15T14:23:00.000Z"
}

// POST handler for your checkout page
app.post('/checkout', async (req, res) => {
  const resp = await fetch('https://api.avopay.dev/api/v1/payments', {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${process.env.AVOPAY_SECRET_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      amount:       req.body.total,
      currency:     'EUR',
      redirect_url: `https://yoursite.com/orders/${req.body.orderId}`,
      metadata:     { order_id: req.body.orderId },
    }),
  });
  if (!resp.ok) throw new Error('Payment creation failed');
  const { checkout_url } = await resp.json();
  res.redirect(303, checkout_url);
});

{
  "payment_id":  "pmt_abc123",
  "status":      "paid",
  "amount_fiat": 49.99,
  "currency":    "EUR",
  "amount_sats": 62341,
  "created_at":  "2026-05-15T14:08:00.000Z",
  "checkout_url":"https://avopay.dev/pay/pmt_abc123"
}

Your backend          AvoPay API            Customer browser       AQUA wallet
    │                     │                        │                      │
    │  POST /payments      │                        │                      │
    │─────────────────────▶│                        │                      │
    │  { checkout_url }    │                        │                      │
    │◀─────────────────────│                        │                      │
    │                      │                        │                      │
    │  redirect to         │                        │                      │
    │  checkout_url ───────────────────────────────▶│                      │
    │                      │                        │  scan QR / tap link  │
    │                      │                        │─────────────────────▶│
    │                      │                        │                      │  pay
    │                      │◀──────────────── Lightning settled ───────────│
    │                      │                        │                      │
    │  POST webhook        │                        │                      │
    │◀─────────────────────│  page redirects ──────▶│                      │
    │  payment.confirmed   │  to redirect_url       │                      │

{
  "id":          "lnk_abc",
  "title":        "Coffee tip",
  "description":  null,
  "amount_fiat":  5.00,    // null for open-amount links
  "currency":     "EUR",
  "status":       "active"
}

{ "amount_fiat": 10.00, "currency": "EUR" }

{ "payment_id": "pmt_xyz", "checkout_url": "https://avopay.dev/pay/pmt_xyz" }

<a href="https://avopay.dev/pay/lnk_abc"
   style="display:inline-block;background:#E65C00;color:#fff;
          padding:10px 22px;border-radius:8px;text-decoration:none;
          font-family:sans-serif;font-weight:600;">
  Pay with Bitcoin
</a>

<script src="https://avopay.dev/js/avopay.js"></script>

<script src="https://avopay.dev/js/avopay.js"></script>

<button onclick="payNow()">Pay €9.99 with Bitcoin</button>

<script>
function payNow() {
  AvoPay.pay({
    publishableKey: 'ak_pub_YOUR_KEY',
    amount:         9.99,
    currency:       'EUR',
    redirectUrl:    'https://yoursite.com/thank-you',
    onError:        err => alert(err.message),
  });
}
</script>

const AvoPay = require('./avopay.js');  // or: import AvoPay from './avopay.js'
await AvoPay.pay({ publishableKey: 'ak_pub_…', amount: 9.99, currency: 'EUR' });

{
  "event":       "payment.confirmed",
  "payment_id":  "pmt_abc123",
  "link_id":     null,          // "lnk_…" if payment originated from a link
  "amount_fiat": 49.99,
  "currency":    "EUR",
  "amount_sats": 62341,
  "metadata":    { "order_id": "1234" },
  "settled_at":  "2026-05-15T14:09:41.000Z"
}

const crypto = require('crypto');

app.post('/webhooks/avopay', express.raw({ type: 'application/json' }), (req, res) => {
  const secret    = process.env.AVOPAY_WEBHOOK_SECRET;
  const signature = req.headers['x-avopay-signature'];

  if (secret && signature) {
    const expected = 'sha256=' + crypto
      .createHmac('sha256', secret)
      .update(req.body)
      .digest('hex');

    const sigBuf  = Buffer.from(signature);
    const expBuf  = Buffer.from(expected);
    if (sigBuf.length !== expBuf.length ||
        !crypto.timingSafeEqual(sigBuf, expBuf)) {
      return res.sendStatus(401);
    }
  }

  const event = JSON.parse(req.body.toString());

  if (event.event === 'payment.confirmed') {
    // mark order paid in your database
    console.log('Paid:', event.payment_id, event.amount_fiat, event.currency);
  }

  res.sendStatus(200);
});

if (event.event === 'payment.confirmed') {
  const already = db.query('SELECT 1 FROM orders WHERE payment_id = ? AND paid = 1', [event.payment_id]);
  if (!already) {
    db.run('UPDATE orders SET paid = 1 WHERE payment_id = ?', [event.payment_id]);
  }
}

{
  "registration_id": "a1b2c3d4e5f6...",
  "invoice":         "lnbc154200n1...",
  "sats":            15420,
  "plan":            "lightning_monthly",
  "expires_at":      "2026-05-25T12:00:00.000Z",
  "message":         "Pay this Lightning invoice to activate your account..."
}

curl -s -X POST https://api.avopay.dev/api/v1/account/register \
  -H "Content-Type: application/json" \
  -d '{
    "email":          "[email protected]",
    "password":       "YourSecurePass123",
    "plan":           "monthly",
    "terms_accepted": true
  }'

{ "status": "pending", "invoice": "lnbc...", "sats": 15420, "expires_at": "..." }

{
  "status":  "active",
  "api_key": "ak_live_ABC123...",
  "plan":    "lightning_monthly",
  "note":    "Save this API key — it will not be shown again."
}

{ "status": "active", "api_key_retrieved": true }

{ "status": "expired" }

import time, requests

reg_id = "a1b2c3d4..."

while True:
    r = requests.get(f"https://api.avopay.dev/api/v1/account/register/status/{reg_id}")
    data = r.json()
    if data["status"] == "active" and "api_key" in data:
        api_key = data["api_key"]
        # store api_key securely — shown only once
        break
    elif data["status"] == "expired":
        raise Exception("Registration expired — create a new one")
    time.sleep(5)

ct(slip77(master_blinding_key_hex),elsh(wpkh([fingerprint/49'/1776'/0']xpub.../0/*)))

{ "connected": true }

curl -s -X POST https://api.avopay.dev/api/v1/connect/descriptor \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "lbtc_descriptor":  "ct(slip77(aabbcc...),elsh(wpkh([fp/49'"'"'/1776'"'"'/0'"'"']xpub.../0/*)))",
    "btcln_descriptor": "ct(slip77(aabbcc...),elsh(wpkh([fp/49'"'"'/1776'"'"'/0'"'"']xpub.../0/*)))"
  }'

curl -s -X POST https://api.avopay.dev/api/v1/payment-links \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "title":        "1hr Consultation",
    "amount_fiat":  150.00,
    "currency":     "USD",
    "redirect_url": "https://yoursite.com/booked"
  }'

{
  "id":          "lnk_abc123",
  "url":         "https://avopay.dev/pay/lnk_abc123",
  "amount_fiat": 150.00,
  "currency":    "USD",
  "status":      "active"
}

<a href="https://avopay.dev/pay/lnk_abc123"
   style="display:inline-block;background:#D4C5A9;color:#000;
          padding:10px 22px;border-radius:8px;text-decoration:none;
          font-family:sans-serif;font-weight:600;">
  Book Consultation — Pay in Bitcoin
</a>

HTTP/1.1 400 Bad Request

{ "error": "amount and currency are required" }