Keys24x7 Reseller API

curl -X POST https://keys24x7.com/api/v2 \
  -d 'key=YOUR_API_KEY' \
  -d 'action=services'

[
  {
    "service": 12,
    "name": "Netflix Premium — 1 Month",
    "type": "Package",
    "category": "Streaming",
    "rate": "99.00",
    "min": 1,
    "max": 14,
    "refill": false,
    "cancel": false
  }
]

curl -X POST https://keys24x7.com/api/v2 \
  -d 'key=YOUR_API_KEY' \
  -d 'action=add' \
  -d 'service=12' \
  -d 'quantity=1' \
  -d '[email protected]'

{ "order": 5731 }

curl -X POST https://keys24x7.com/api/v2 \
  -d 'key=YOUR_API_KEY' \
  -d 'action=status' \
  -d 'order=5731'

{
  "charge": "99.00",
  "start_count": "0",
  "status": "Completed",
  "remains": "0",
  "currency": "INR",
  "credentials": "[email protected]:password123"
}

curl -X POST https://keys24x7.com/api/v2 \
  -d 'key=YOUR_API_KEY' \
  -d 'action=status' \
  -d 'orders=5731,5732,5733'

{
  "5731": { "charge": "99.00", "start_count": "0", "status": "Completed", "remains": "0", "currency": "INR", "credentials": "[email protected]:password123" },
  "5732": { "charge": "199.00", "start_count": "0", "status": "In progress", "remains": "0", "currency": "INR" },
  "5733": { "error": "Incorrect order ID" }
}

curl -X POST https://keys24x7.com/api/v2 \
  -d 'key=YOUR_API_KEY' \
  -d 'action=balance'

{ "balance": "1234.50", "currency": "INR" }

{ "error": "Not enough funds in the balance" }

curl -X POST https://keys24x7.com/api/v2 \
  -d 'key=YOUR_API_KEY' \
  -d 'action=sync' \
  -d 'updated_since=2026-08-05T00:00:00Z'

{
  "version": "9f2c1a77b0e34d51",
  "product_count": 148,
  "updated_at": "2026-08-05 12:41:03",
  "services": [
    {
      "service": 12,
      "name": "Netflix Premium — 1 Month",
      "type": "Package",
      "category": "Streaming",
      "rate": "99.00",
      "min": 1,
      "max": 14,
      "refill": false,
      "cancel": false,
      "active": true,
      "updated_at": "2026-08-05 12:41:03"
    }
  ]
}

curl https://keys24x7.com/api/v1/products \
  -H 'Authorization: Bearer YOUR_API_KEY'

[
  {
    "id": "netflix_premium_1m",
    "api_service_id": 12,
    "name": "Netflix Premium — 1 Month",
    "category": "Streaming",
    "description": "4K UHD private profile, instant delivery",
    "price_inr": 99,
    "price_usdt": 1.2,
    "image_url": "https://keys24x7.com/images/netflix.png",
    "delivery_type": "auto",
    "eta_minutes": 0,
    "in_stock": true,
    "stock_count": 14,
    "active": true,
    "updated_at": "2026-08-05 12:41:03"
  }
]

curl https://keys24x7.com/api/v1/products/netflix_premium_1m \
  -H 'Authorization: Bearer YOUR_API_KEY'

{
  "id": "netflix_premium_1m",
  "api_service_id": 12,
  "name": "Netflix Premium — 1 Month",
  "price_inr": 99,
  "delivery_type": "auto",
  "eta_minutes": 0,
  "in_stock": true,
  "stock_count": 14,
  "active": true,
  "updated_at": "2026-08-05 12:41:03"
}

curl -X POST https://keys24x7.com/api/v1/orders \
  -H 'Authorization: Bearer YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: order-8f21c9a4' \
  -d '{
    "product_id": "netflix_premium_1m",
    "quantity": 1,
    "customer_email": "[email protected]"
  }'

{
  "order_id": 5731,
  "charge": 99,
  "balance_after": 1135.5,
  "status": "Completed",
  "credentials": "[email protected]:password123"
}

{ "error": "Insufficient funds" }

{ "error": "Price below supplier cost — contact support" }

{ "error": "Only 2 in stock", "error_code": "out_of_stock", "available": 2 }

curl https://keys24x7.com/api/v1/orders/5731 \
  -H 'Authorization: Bearer YOUR_API_KEY'

{
  "order_id": 5731,
  "product": "Netflix Premium — 1 Month",
  "status": "Completed",
  "charge": 99,
  "credentials": "[email protected]:password123",
  "created_at": "2026-08-05 12:41:03"
}

curl 'https://keys24x7.com/api/v1/orders?limit=10' \
  -H 'Authorization: Bearer YOUR_API_KEY'

[
  { "order_id": 5731, "product": "Netflix Premium — 1 Month", "status": "Completed", "charge": 99, "created_at": "2026-08-05 12:41:03" },
  { "order_id": 5729, "product": "Spotify Premium — 3 Months", "status": "Pending", "charge": 249, "created_at": "2026-08-05 11:02:47" }
]

curl https://keys24x7.com/api/v1/balance \
  -H 'Authorization: Bearer YOUR_API_KEY'

{ "balance": 1135.5, "currency": "INR" }

curl https://keys24x7.com/api/v1/me \
  -H 'Authorization: Bearer YOUR_API_KEY'

{
  "name": "Acme Digital",
  "email": "[email protected]",
  "status": "active",
  "created_at": "2026-07-01 09:15:00"
}

curl https://keys24x7.com/api/v1/catalog/version \
  -H 'Authorization: Bearer YOUR_API_KEY'

{
  "version": "9f2c1a77b0e34d51",
  "product_count": 148,
  "updated_at": "2026-08-05 12:41:03"
}

curl 'https://keys24x7.com/api/v1/products?updated_since=2026-08-05T00:00:00Z' \
  -H 'Authorization: Bearer YOUR_API_KEY'

# first call — note the ETag header
curl -i https://keys24x7.com/api/v1/products \
  -H 'Authorization: Bearer YOUR_API_KEY'
# → ETag: "3d9a…"

# next call — 304, nothing transferred
curl -i https://keys24x7.com/api/v1/products \
  -H 'Authorization: Bearer YOUR_API_KEY' \
  -H 'If-None-Match: "3d9a…"'
# → HTTP/1.1 304 Not Modified

curl -X POST https://keys24x7.com/api/v1/webhooks \
  -H 'Authorization: Bearer YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
    "url": "https://yourstore.example/hooks/keys",
    "events": ["order.delivered", "order.failed", "catalog.updated"]
  }'

{
  "id": 3,
  "url": "https://yourstore.example/hooks/keys",
  "events": ["order.delivered", "order.failed", "catalog.updated"],
  "active": true,
  "created_at": "2026-08-05 13:20:11",
  "secret": "6f1b…"
}

POST /hooks/keys HTTP/1.1
Content-Type: application/json
X-Keys-Event: order.delivered
X-Keys-Delivery: 918
X-Keys-Timestamp: 1785935112
X-Keys-Signature: sha256=4b0f8c…

{"event":"order.delivered","created_at":"2026-08-05T13:25:12.004Z","data":{ … }}

import crypto from 'crypto';

// IMPORTANT: use the RAW body, not a re-serialised object.
app.post('/hooks/keys', express.raw({ type: 'application/json' }), (req, res) => {
  const expected = 'sha256=' + crypto
    .createHmac('sha256', process.env.KEYS_WEBHOOK_SECRET)
    .update(req.body)
    .digest('hex');
  const got = String(req.headers['x-keys-signature'] || '');
  const ok = got.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(got), Buffer.from(expected));
  if (!ok) return res.status(401).end();

  const { event, data } = JSON.parse(req.body.toString('utf8'));
  // … deliver to your buyer, update your catalog …
  res.status(200).end();   // respond 2xx quickly; do the work after
});

$raw = file_get_contents('php://input');
$expected = 'sha256=' . hash_hmac('sha256', $raw, getenv('KEYS_WEBHOOK_SECRET'));
if (!hash_equals($expected, $_SERVER['HTTP_X_KEYS_SIGNATURE'] ?? '')) {
    http_response_code(401); exit;
}
$payload = json_decode($raw, true);

You are building a digital-goods storefront that resells products from the
Keys24x7 Reseller API.

API BASE URL: https://keys24x7.com/api/v1
API KEY: YOUR_API_KEY

AUTH: every request to the Keys24x7 API needs the header
  Authorization: Bearer <API KEY>

SECURITY (most important requirement):
Create server-side API routes (for example /api/licenses/*) that forward
requests to the Keys24x7 API and inject the Authorization header from an
environment variable named RESELLER_API_KEY. The browser must only ever call
these proxy routes. Never place the key in client-side code, bundles, or
public config — if the framework only supports client code, generate a small
serverless/edge function for the proxy.

BUILD THIS:

1. Catalog page
   - GET {base}/products returns an array of:
     { id, api_service_id, name, category, description, price_inr,
       price_usdt, image_url, delivery_type, eta_minutes, in_stock,
       stock_count }
   - Render a responsive product grid grouped by category with name, image,
     description, delivery ETA and an "In stock" badge.
   - Show a selling price of price_inr with my margin applied (make the
     margin a single constant I can edit, default 20%).
   - Grey out / disable buying when in_stock is false.

2. Checkout
   - Collect the buyer's email address, then POST {base}/orders with JSON:
     { "product_id": "<id>", "quantity": 1, "customer_email": "<buyer email>" }
   - A 201 response returns { order_id, charge, balance_after, status,
     credentials? }. If credentials is present, the item was delivered
     instantly — show it on a success page with a copy button.
   - Error handling: 402 means my reseller wallet is out of funds — show the
     buyer "temporarily unavailable, try again soon" (never mention the
     wallet); 404 unknown product; 422 validation error; show friendly toasts.

3. Order status page
   - For orders that are not yet Completed, poll GET {base}/orders/{order_id}
     every 15 seconds. The response is { order_id, product, status, charge,
     credentials?, created_at }.
   - While status is "Pending" or "In progress" show a friendly "your order
     is being prepared" state with the ETA. When it becomes "Completed",
     stop polling and reveal the credentials with a copy button.
   - Give the buyer a link they can bookmark to come back to this page.

4. Utilities (server-side only)
   - GET {base}/balance returns { balance, currency } — log a server-side
     warning when the balance drops below 500 so I know to top up.
   - GET {base}/me verifies the key works; use it in a health-check route.

GENERAL: mobile-first responsive design, clear loading and empty states,
no exposure of wholesale price_inr or my wallet anywhere in the UI.