time2pay Payments API

What this is

A crypto cashier for merchants: players deposit, you get told when the money settled, and you pay winnings back out. Nothing custodial happens on the payout side — the platform cannot move your funds without a signature from your own wallet.

What you can build

Quickstart

The shortest path from nothing to a payment link a player can actually pay.

1. Get a key. The platform operator issues it in the admin panel: an API_KEY_ID and an API_KEY_SECRET. One active key per merchant — issuing a new one revokes the previous. Keep the secret on your backend; it never belongs in a browser. Without a key you also receive no webhooks, because every callback we send is signed with it.
2. Copy the client. Signing requests has a complete, dependency-light client for Go, PHP, JavaScript, Python and Node.js — one file each. Every code example in these docs uses it. Set it up once:
   Go PHP JavaScript (Deno, Bun, Workers) Python Node.js

   client := &time2pay.Client{
   	BaseURL: os.Getenv("BASE_URL"),
   	KeyID:   os.Getenv("API_KEY_ID"),
   	Secret:  os.Getenv("API_KEY_SECRET"),
   }
   ctx := context.Background()

   $client = new Time2payClient(getenv('BASE_URL'), getenv('API_KEY_ID'), getenv('API_KEY_SECRET'));

   const client = createClient({ baseUrl: env.BASE_URL, keyId: env.API_KEY_ID, secret: env.API_KEY_SECRET });

   client = Time2payClient(os.environ["BASE_URL"], os.environ["API_KEY_ID"], os.environ["API_KEY_SECRET"])

   const client = new Time2payClient({
     baseUrl: process.env.BASE_URL,
     keyId: process.env.API_KEY_ID,
     secret: process.env.API_KEY_SECRET,
   });

3. Check the signature. Run the client's sign function against the test vector before you debug anything else — a wrong signature and a wrong key look identical from the outside. Then run the smoke test: one read-only call that proves the key, the clock and the IP allowlist.
4. Create a payment link. One signed call returns a URL. Redirect the player to it and you are done taking a deposit.
   Go PHP JavaScript (Deno, Bun, Workers) Python Node.js

   link, err := client.Call(ctx, "POST", "/v1/hpp/sessions", `{
   	"player_id": "player-123",
   	"external_order_id": "deposit-1001",
   	"amount": "125.50",
   	"network": "eth",
   	"token": "USDT",
   	"return_url": "https://casino.example/cashier/return"
   }`)
   if err != nil {
   	return err
   }
   fmt.Println(link["url"])

   $link = $client->call('POST', '/v1/hpp/sessions', [
       'player_id' => 'player-123',
       'external_order_id' => 'deposit-1001',
       'amount' => '125.50',
       'network' => 'eth',
       'token' => 'USDT',
       'return_url' => 'https://casino.example/cashier/return',
   ]);
   echo $link['url'];

   const link = await client.call("POST", "/v1/hpp/sessions", {
     player_id: "player-123",
     external_order_id: "deposit-1001",
     amount: "125.50",
     network: "eth",
     token: "USDT",
     return_url: "https://casino.example/cashier/return",
   });
   console.log(link.url);

   link = client.call("POST", "/v1/hpp/sessions", {
       "player_id": "player-123",
       "external_order_id": "deposit-1001",
       "amount": "125.50",
       "network": "eth",
       "token": "USDT",
       "return_url": "https://casino.example/cashier/return",
   })
   print(link["url"])

   const link = await client.call("POST", "/v1/hpp/sessions", {
     player_id: "player-123",
     external_order_id: "deposit-1001",
     amount: "125.50",
     network: "eth",
     token: "USDT",
     return_url: "https://casino.example/cashier/return",
   });
   console.log(link.url);

   {
     "session": "sess_9f2c1e",
     "token": "E59YRa6MDSiUunx2oZbU1C3-P_jufO18n7ZRj_xeVBE",
     "url": "https://time2pay.tech/p/E59YRa6MDSiUunx2oZbU1C3-P_jufO18n7ZRj_xeVBE",
     "expires_at": "2026-07-28T18:12:25Z"
   }

5. Credit the player when it settles. We send a signed webhook to your callback URL. Verify it, deduplicate on X-Idempotency-Key and credit exactly once.

Where to go next

Service endpoints

Unauthenticated, for your load balancer rather than your integration.