For developers

A payment confirmation API you’ll actually enjoy.

Three calls and you’re live. Stripe-grade webhooks, predictable JSON, zero fund custody — we confirm payments, your app reacts.

1

Create an order

One POST with amount and provider. You get back an order with a randomized exact-cent amount and a per-order receiving address.

POST /api/v1/payment_requests
curl https://www.mypaygate.com/api/v1/payment_requests \
  -H "Authorization: Bearer pk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "provider": "PAYPAL",
        "amount": 2000, "currency": "USD" }'

{ "order_id": "ord_x7c2m94kd3fp",
  "amount": 2000,
  "receiving_address": "a7f3k@mypaygate.com",
  "status": "pending" }
what happens meanwhile
buyer pays  →  $20.00 via PayPal
buyer forwards receipt  →  a7f3k@mypaygate.com

verification:
  ✓ from == buyer email        ✓ forward DKIM
  ✓ amount >= 2000 (paid enough)  ✓ recipient == your handle
  ✓ date in window             ✓ plausibility
2

Your user pays & forwards

They pay the exact amount on PayPal & friends and forward their receipt. We verify identity, amount, recipient — cryptographically where possible.

3

Catch the webhook

payment.confirmed arrives HMAC-signed at your endpoint. Verify the signature, ship the goods. Done.

webhook → your endpoint
POST https://api.yourapp.com/webhooks   200 OK
X-PaymentConfirm-Signature: t=1720812345,v1=5f8a…

{ "type": "payment.confirmed",
  "data": {
    "order_id": "ord_x7c2m94kd3fp",
    "amount": 2000, "currency": "USD",
    "verified_tier": "BUYER_DKIM",
    "confirmed_at": "2026-07-12T14:32:11Z" } }

Boring, in the best way

Signed webhooks

HMAC signatures with timestamps, idempotency keys, exponential-backoff retries and one-click replay from the dashboard.

Verified evidence

Every confirmation carries its full verification trail: DKIM results, amount match, recipient match, plausibility.

Bearer keys

API keys hashed at rest, revocable anytime, rate-limited per key. No OAuth dance for your own account.

Idempotent by design

Replays and duplicate emails are no-ops. Your endpoint can be naive — we’re not.

Event log

Every event queryable via REST with cursor pagination. Rebuild your state anytime.

Embed & links

Hosted pay pages, iframe embeds and per-product links out of the box — skip building the order-and-unlock UI entirely.

Full API reference lives in your dashboard once you sign up — keys, event types, status codes and a webhook test button.

Ship it this afternoon.

Get your API keys