Quickstart

Take your first USDT payment end-to-end. Use test credentials (zp_test_…) first — they behave identically to live but settle on the TRON testnet.

1. Get your API key

API keys are issued from the Merchant Dashboard → API Keys. Copy the secret key (zp_test_sk_…) when it's shown — it is revealed only once. See Authentication for the key format and scopes.

2. Create a charge

Send the order amount to POST /v1/deposit-addresses. The response includes a deposit address and a hosted checkout_url.

cURL

curl -X POST https://api.zaropay.com/v1/deposit-addresses \
  -H "X-Api-Key: zp_live_sk_xxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": "100",
    "currency": "USDT",
    "orderRef": "INV-1042",
    "successUrl": "https://shop.example.com/thanks?order=1042",
    "cancelUrl":  "https://shop.example.com/cart"
  }'

Node.js

const res = await fetch("https://api.zaropay.com/v1/deposit-addresses", {
  method: "POST",
  headers: {
    "X-Api-Key": process.env.ZAROPAY_API_KEY, // zp_live_sk_...
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    amount: "100",
    currency: "USDT",
    orderRef: "INV-1042",
    successUrl: "https://shop.example.com/thanks?order=1042",
    cancelUrl: "https://shop.example.com/cart",
  }),
});
const { data } = await res.json();
console.log(data.address, data.checkout_url);

Python

import os, requests

res = requests.post(
    "https://api.zaropay.com/v1/deposit-addresses",
    headers={"X-Api-Key": os.environ["ZAROPAY_API_KEY"]},  # zp_live_sk_...
    json={
        "amount": "100",
        "currency": "USDT",
        "orderRef": "INV-1042",
        "successUrl": "https://shop.example.com/thanks?order=1042",
        "cancelUrl": "https://shop.example.com/cart",
    },
)
data = res.json()["data"]
print(data["address"], data["checkout_url"])

PHP

<?php
$ch = curl_init("https://api.zaropay.com/v1/deposit-addresses");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_HTTPHEADER => [
        "X-Api-Key: " . getenv("ZAROPAY_API_KEY"), // zp_live_sk_...
        "Content-Type: application/json",
    ],
    CURLOPT_POSTFIELDS => json_encode([
        "amount" => "100",
        "currency" => "USDT",
        "orderRef" => "INV-1042",
        "successUrl" => "https://shop.example.com/thanks?order=1042",
        "cancelUrl" => "https://shop.example.com/cart",
    ]),
]);
$data = json_decode(curl_exec($ch), true)["data"];
echo $data["address"] . " " . $data["checkout_url"];

Response (201 Created):

{
  "success": true,
  "message": "Created",
  "data": {
    "id": "5f1c9d2e-7a4b-4c0a-9e21-3b8f0a1d2c34",
    "address": "TXyz...payTo",
    "chain": "tron",
    "currency": "USDT",
    "status": "ACTIVE",
    "expected_amount": "100",
    "pay_amount": null,
    "order_ref": "INV-1042",
    "checkout_token": "k7H2…",
    "checkout_url": "https://checkout.zaropay.com/c/k7H2…"
  }
}

3. Collect the payment

Redirect the customer to data.checkout_url for a branded payment page (QR + live status), or display data.address and data.expected_amount in your own UI. See Hosted Checkout for the full flow.

4. Receive & verify the webhook

When the deposit confirms, ZaroPay POSTs deposit.confirmed to your endpoint with an x-zaropay-signature header. You must verify it before fulfilling. Minimal Node.js receiver:

const crypto = require("crypto");
const express = require("express");
const app = express();

// Capture the RAW body — signature is computed over the exact bytes.
app.post("/webhooks/zaropay", express.raw({ type: "application/json" }), (req, res) => {
  const raw = req.body.toString("utf8");
  if (!verify(raw, req.get("x-zaropay-signature"), process.env.ZAROPAY_WEBHOOK_SECRET)) {
    return res.status(400).send("bad signature");
  }
  const event = JSON.parse(raw);
  if (event.event === "deposit.confirmed") {
    // event.data.orderAmount, event.data.txHash, event.data.depositId ...
    // dedupe on event.id, then mark the order paid.
  }
  res.sendStatus(200); // 2xx = delivered; anything else is retried
});

// full verify() in /webhooks/signatures

Register your endpoint URL + grab its whsec_… signing secret in the dashboard, or via POST /v1/webhooks/endpoints. The complete, copy-paste verification code for every language is on Signature verification.

5. Go live

Swap your zp_test_sk_… key for a zp_live_sk_… key and point at https://api.zaropay.com. Nothing else changes. Then test with a tiny real amount before announcing.