PeerTupeer API

Copy<?php
$apiKey      = 'ptp_live_YOUR_KEY';
$apiUsername = 'your-merchant-slug';  // optional
$base        = 'https://app.peertupeer.com/api/v1';

// Step 1 — List available gift card products
$ch = curl_init($base . '/gift-cards');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: '      . $apiKey,
        'X-API-Username: ' . $apiUsername,
    ],
]);
$products = json_decode(curl_exec($ch), true);
curl_close($ch);

// Step 2 — Purchase a $50 Amazon USA card
$ch = curl_init($base . '/gift-cards');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POSTFIELDS     => json_encode([
        'product_id' => 1,      // Amazon
        'country'    => 'USA',
        'currency'   => 'USD',
        'face_value' => 50,
        'quantity'   => 1,
    ]),
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: '      . $apiKey,
        'X-API-Username: ' . $apiUsername,
        'Content-Type: application/json',
    ],
]);
$order = json_decode(curl_exec($ch), true);
curl_close($ch);
$ref = $order['data']['reference'];  // e.g. "GCAXXXXXXXX"

// Step 3 — Poll until ready (usually < 5 minutes)
do {
    sleep(10);
    $ch = curl_init($base . '/purchase-status?reference=' . $ref);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => [
            'X-API-Key: '      . $apiKey,
            'X-API-Username: ' . $apiUsername,
        ],
    ]);
    $status = json_decode(curl_exec($ch), true);
    curl_close($ch);
} while (!$status['data']['ready']);

$cardCode = $status['data']['cards'][0]['code'];
echo "Card code: " . $cardCode;

Copyconst API_KEY      = 'ptp_live_YOUR_KEY';
const API_USERNAME = 'your-merchant-slug'; // optional
const BASE         = 'https://app.peertupeer.com/api/v1';

const headers = {
  'X-API-Key':      API_KEY,
  'X-API-Username': API_USERNAME,
  'Content-Type':   'application/json',
};

// Step 1 — Place order
const order = await fetch(`${BASE}/gift-cards`, {
  method:  'POST',
  headers,
  body: JSON.stringify({
    product_id: 1,      // Amazon
    country:    'USA',
    currency:   'USD',
    face_value: 50,
    quantity:   1,
  }),
}).then(r => r.json());

const ref = order.data.reference;

// Step 2 — Poll for card code
async function waitForCard(reference) {
  while (true) {
    await new Promise(r => setTimeout(r, 10000)); // wait 10s
    const s = await fetch(`${BASE}/purchase-status?reference=${reference}`, {headers})
                    .then(r => r.json());
    if (s.data?.ready) return s.data.cards;
  }
}

const cards = await waitForCard(ref);
console.log('Card code:', cards[0].code);

Copyimport requests, time

API_KEY      = 'ptp_live_YOUR_KEY'
API_USERNAME = 'your-merchant-slug'   # optional
BASE         = 'https://app.peertupeer.com/api/v1'

HEADERS = {
    'X-API-Key':      API_KEY,
    'X-API-Username': API_USERNAME,
    'Content-Type':   'application/json',
}

# Step 1 — Place order
order = requests.post(f'{BASE}/gift-cards', json={
    'product_id': 1,
    'country':    'USA',
    'currency':   'USD',
    'face_value': 50,
    'quantity':   1,
}, headers=HEADERS).json()

ref = order['data']['reference']

# Step 2 — Poll for card
while True:
    time.sleep(10)
    s = requests.get(f'{BASE}/purchase-status?reference={ref}', headers=HEADERS).json()
    if s['data']['ready']:
        print('Card code:', s['data']['cards'][0]['code'])
        break

Copy# Place order
curl -X POST 'https://app.peertupeer.com/api/v1/gift-cards' \
  -H 'X-API-Key: ptp_live_YOUR_KEY' \
  -H 'X-API-Username: your-slug' \
  -H 'Content-Type: application/json' \
  -d '{"product_id":1,"country":"USA","currency":"USD","face_value":50}'

# Check status
curl 'https://app.peertupeer.com/api/v1/purchase-status?reference=GCAXXXXXXXX' \
  -H 'X-API-Key: ptp_live_YOUR_KEY'

Copycurl 'https://app.peertupeer.com/api/v1/gift-cards' \
  -H 'X-API-Key: ptp_live_YOUR_KEY' \
  -H 'X-API-Username: your-slug'

Copy<?php
$ch = curl_init('https://app.peertupeer.com/api/v1/gift-cards');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-API-Key: ptp_live_YOUR_KEY', 'X-API-Username: your-slug'],
]);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);
foreach ($res['data'] as $p) {
    echo $p['name'] . ' — from GHS ' . $p['min_rate_ghs'] . "\n";
}

Copyconst res = await fetch('https://app.peertupeer.com/api/v1/gift-cards', {
  headers: { 'X-API-Key': 'ptp_live_YOUR_KEY', 'X-API-Username': 'your-slug' }
}).then(r => r.json());
console.log(res.data); // array of products

Copyimport requests
res = requests.get('https://app.peertupeer.com/api/v1/gift-cards',
    headers={'X-API-Key': 'ptp_live_YOUR_KEY', 'X-API-Username': 'your-slug'}
).json()
for p in res['data']:
    print(p['name'], p['min_rate_ghs'])

Copycurl -X POST 'https://app.peertupeer.com/api/v1/gift-cards' \
  -H 'X-API-Key: ptp_live_YOUR_KEY' \
  -H 'X-API-Username: your-slug' \
  -H 'Content-Type: application/json' \
  -d '{"product_id":1,"country":"USA","currency":"USD","face_value":50,"quantity":1}'

Copy<?php
$ch = curl_init('https://app.peertupeer.com/api/v1/gift-cards');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POSTFIELDS     => json_encode([
        'product_id' => 1, 'country' => 'USA',
        'currency' => 'USD', 'face_value' => 50,
    ]),
    CURLOPT_HTTPHEADER => [
        'X-API-Key: ptp_live_YOUR_KEY',
        'X-API-Username: your-slug',
        'Content-Type: application/json',
    ],
]);
$order = json_decode(curl_exec($ch), true);
curl_close($ch);
echo $order['data']['reference']; // e.g. GCAXXXXXXXX

Copyconst order = await fetch('https://app.peertupeer.com/api/v1/gift-cards', {
  method: 'POST',
  headers: {
    'X-API-Key': 'ptp_live_YOUR_KEY',
    'X-API-Username': 'your-slug',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({product_id:1, country:'USA', currency:'USD', face_value:50}),
}).then(r => r.json());
console.log(order.data.reference);

Copyimport requests
order = requests.post('https://app.peertupeer.com/api/v1/gift-cards',
    json={'product_id':1,'country':'USA','currency':'USD','face_value':50},
    headers={'X-API-Key':'ptp_live_YOUR_KEY','X-API-Username':'your-slug',
             'Content-Type':'application/json'}
).json()
print(order['data']['reference'])

Copycurl 'https://app.peertupeer.com/api/v1/purchase-status?reference=GCAXXXXXXXX' \
  -H 'X-API-Key: ptp_live_YOUR_KEY'

Copy<?php
$ref = 'GCAXXXXXXXX';
do {
    sleep(8);
    $ch = curl_init('https://app.peertupeer.com/api/v1/purchase-status?reference=' . $ref);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => ['X-API-Key: ptp_live_YOUR_KEY'],
    ]);
    $s = json_decode(curl_exec($ch), true);
    curl_close($ch);
} while (!$s['data']['ready']);
$code = $s['data']['cards'][0]['code'];
echo "Card: " . $code;

Copyasync function pollUntilReady(ref) {
  const h = {'X-API-Key': 'ptp_live_YOUR_KEY'};
  while (true) {
    await new Promise(r => setTimeout(r, 8000));
    const s = await fetch(`https://app.peertupeer.com/api/v1/purchase-status?reference=${ref}`, {headers:h}).then(r=>r.json());
    if (s.data?.ready) return s.data.cards;
  }
}
const cards = await pollUntilReady('GCAXXXXXXXX');
console.log(cards[0].code);

Copyimport requests, time
ref = 'GCAXXXXXXXX'
while True:
    time.sleep(8)
    s = requests.get(f'https://app.peertupeer.com/api/v1/purchase-status?reference={ref}',
        headers={'X-API-Key':'ptp_live_YOUR_KEY'}).json()
    if s['data']['ready']:
        print(s['data']['cards'][0]['code'])
        break

Copycurl -X POST 'https://app.peertupeer.com/api/v1/trades' \
  -H 'X-API-Key: ptp_live_YOUR_KEY' \
  -F 'card_type_id=1' \
  -F 'country=USA' \
  -F 'currency=USD' \
  -F 'card_amount=100' \
  -F 'front_image=@/path/to/front.jpg' \
  -F 'back_image=@/path/to/back.jpg'

Copy<?php
$ch = curl_init('https://app.peertupeer.com/api/v1/trades');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POSTFIELDS     => [
        'card_type_id' => 1,
        'country'      => 'USA',
        'currency'     => 'USD',
        'card_amount'  => 100,
        'front_image'  => new CURLFile('/path/to/front.jpg'),
        'back_image'   => new CURLFile('/path/to/back.jpg'),
    ],
    CURLOPT_HTTPHEADER => ['X-API-Key: ptp_live_YOUR_KEY'],
]);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);
echo $res['data']['reference'];

Copyconst form = new FormData();
form.append('card_type_id', '1');
form.append('country', 'USA');
form.append('currency', 'USD');
form.append('card_amount', '100');
form.append('front_image', frontFile);  // File object
form.append('back_image', backFile);

const res = await fetch('https://app.peertupeer.com/api/v1/trades', {
  method: 'POST',
  headers: { 'X-API-Key': 'ptp_live_YOUR_KEY' },
  body: form,
}).then(r => r.json());
console.log(res.data.reference);

Copyimport requests
with open('/path/to/front.jpg','rb') as f, open('/path/to/back.jpg','rb') as b:
    res = requests.post('https://app.peertupeer.com/api/v1/trades',
        data={'card_type_id':1,'country':'USA','currency':'USD','card_amount':100},
        files={'front_image':f, 'back_image':b},
        headers={'X-API-Key':'ptp_live_YOUR_KEY'}
    ).json()
print(res['data']['reference'])

Copy<?php
$payload   = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_PEERTUPEER_SIGNATURE'] ?? '';
$secret    = 'your_webhook_secret';

if (!hash_equals(hash_hmac('sha256', $payload, $secret), $signature)) {
    http_response_code(401);
    exit('Unauthorized');
}

$event = json_decode($payload, true);
$type  = $event['event'];  // e.g. "purchase.fulfilled"

if ($type === 'purchase.fulfilled') {
    $ref   = $event['data']['reference'];
    $cards = $event['data']['cards'];
    // Deliver card codes to your customer
}

Copyconst crypto = require('crypto');

app.post('/webhook', express.raw({type:'application/json'}), (req, res) => {
  const sig      = req.headers['x-peertupeer-signature'];
  const expected = crypto.createHmac('sha256', 'your_webhook_secret')
                         .update(req.body).digest('hex');
  if (!crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
    return res.status(401).send('Unauthorized');
  }
  const event = JSON.parse(req.body);
  if (event.event === 'purchase.fulfilled') {
    const code = event.data.cards[0].code;
    // Deliver to customer
  }
  res.json({ok: true});
});

Copyimport hmac, hashlib
from flask import Flask, request, jsonify, abort

app = Flask(__name__)
SECRET = 'your_webhook_secret'

@app.route('/webhook', methods=['POST'])
def webhook():
    sig      = request.headers.get('X-PeerTupeer-Signature', '')
    expected = hmac.new(SECRET.encode(), request.data, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(sig, expected):
        abort(401)
    event = request.json
    if event['event'] == 'purchase.fulfilled':
        code = event['data']['cards'][0]['code']
        # deliver to customer
    return jsonify(ok=True)