Authentication
Send your private API key as a Bearer token with every request. Never expose it in frontend code.
Request headers
Authorization: Bearer YOUR_API_KEY Content-Type: application/json
Place an automated order
Use a unique order_id for idempotency. Reusing the same ID will not create a duplicate charge.
POST
https://shop.mytopyp.shop/api/v1/orderJSON request body
{
"order_id": "UNIQUE-ORDER-001",
"package_code": "FF-25",
"player_id": "123456789",
"quantity": 1,
"wallet_type": "balance",
"callback_url": "https://your-site.com/callback"
}Wallet selection
balance uses the BDT price and Balance Wallet. dollar uses the USD price and Dollar Wallet. Default is balance.
Other endpoints
GET
https://shop.mytopyp.shop/api/v1/productsActive product catalogGET
https://shop.mytopyp.shop/api/v1/balanceWallet and credit balanceGET
https://shop.mytopyp.shop/api/v1/status?order_id=UNIQUE-ORDER-001Order status lookupCallback verification
Each callback includes X-MyTopUp-Signature, an HMAC-SHA256 signature. Verify the signature, process each unique order once and return HTTP 200.
✓ Signed payload✓ Unique order protection✓ Automatic retry support