Official Documentation Portal · docs.xpayr.com

XPayr Non-Custodial Crypto Gateway Documentation & OpenAPI Hub.

Integrate universal multi-chain crypto checkout (Web3 1-Click Wallet Pay + Direct Exchange QR Transfer) across TRON, Solana, BNB Smart Chain, Base, Polygon, Arbitrum, Optimism, Ethereum & Circle Arc at a flat 0.5% fee with zero custody delay.

⚡ Try Live Demo Checkout ($10 Testnet USDT) 🤖 AI & MCP Server Portal (mcp.xpayr.com) 📦 Postman Collection v1 📄 OpenAPI 3.1.0 JSON 🧠 llms-full.txt

Core REST API v1

1. Authentication & Creating a Dual Checkout Session

Authentication & Environment Keys

Authenticate all requests to https://xpayr.com/api/v1 using the HTTP Authorization: Bearer <key> header:

sk_test_... — Testnet Secret Key (BSC Testnet, Polygon Amoy, TRON Nile, Solana Devnet, Arc Testnet)
sk_live_... — Mainnet Production Secret Key (0.5% flat fee, 99.5% direct to merchant wallet)
agk_test_... / agk_live_... — Scoped AI Commerce Agent Key for POST /api/v1/agent-intents

Read docs/authentication.md →

Create a Payment Session (`POST /api/v1/payments`)

Supports multi-chain selection (`is_multi_chain`), 1-year reusable links (`is_reusable`), and HTML email invoices (`send_invoice_email`):

curl -X POST "https://xpayr.com/api/v1/payments" \
  -H "Authorization: Bearer sk_test_your_secret_key" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 49.90,
    "currency": "USDT",
    "network": "tron-mainnet",
    "order_id": "ORD-1001",
    "is_multi_chain": true,
    "send_invoice_email": true,
    "customer_email": "buyer@example.com"
  }'

Security & Event Verification

2. Signed HMAC-SHA256 Webhooks & AI Agent Commerce

Verify `X-XPayr-Signature` (HMAC-SHA256)

Every webhook event (payment.completed, payment.expired, payment.failed, test.webhook) is signed with your 32-byte webhook secret:

import crypto from 'node:crypto';

export function verifyXpayrWebhook(rawBody, signatureHeader, webhookSecret) {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', webhookSecret)
    .update(rawBody, 'utf8')
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(expected),
    Buffer.from(String(signatureHeader || ''))
  );
}

Read docs/webhooks.md →

Policy-Controlled AI Agent Commerce

Allow autonomous AI agents to submit payment intents evaluated against per-transaction caps, daily limits, and human-in-the-loop approval queues:

# Install Official 21-Tool MCP Server in Claude / Cursor / Cline
npx -y @xpayr/mcp-server --suite all

# Submit an AI Agent Payment Intent via REST API v1
curl -X POST "https://xpayr.com/api/v1/agent-intents" \
  -H "Authorization: Bearer agk_test_your_agent_key" \
  -H "Content-Type: application/json" \
  -d '{"amount":19.99,"currency":"USDC","network":"arc-testnet","reason":"GPU Invoice #402"}'

Read guides/agent-commerce-mode.md →

Open-Source Ecosystem (`github.com/xpayrcom`)