Merchant payment API

1. Create a named API key

API base URL: https://api.aurapayglobal.com. Auth with Authorization: Bearer apk_live_… or apk_test_… (no separate merchant login handshake).

On the web gateway open More → Merchant API(or Services → API in Telegram). Give the key a name, choose Test (`apk_test_…`) or Live (`apk_live_…`), then optionally set webhook URL + secret. The create response returns the secret once, plus endpoint hints.

2. Create an invoice (TON or USDT)

curl -X POST https://api.aurapayglobal.com/api/v1/invoices \
  -H "Authorization: Bearer apk_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 12.5,
    "currency": "USDT",
    "externalId": "order_1001",
    "note": "Premium plan",
    "expiresInSeconds": 3600
  }'

Response includes checkoutUrl, payUrl, appPayUrl, and environment. Share checkout with the customer.

3. Hosted checkout

Customers open https://pay.aurapayglobal.com/pay/PR-XXXXXX. TON invoices include a QR with memo PR-XXXXXX: the inbound indexer auto-marks paid when the memo or amount matches. USDT pays via Telegram or the AuraPay app (TonConnect).

4. Webhooks

AuraPay POSTs signed JSON (retried up to 3 times):

• payment.confirmed: paid on-chain
• payment.expired: timed out unpaid

Verify X-AuraPay-Signature as sha256=HMAC_SHA256(secret, rawBody).

API surface