Authentication
Send your private API key as a Bearer token with every request. Never expose it in frontend code.
Request headers
Authorization: Bearer YOUR_API_KEY Content-Type: application/json
Place an automated order
Use a unique order_id for idempotency. Reusing the same ID will not create a duplicate charge.
POST
https://weekshop.top/api/v1/orderJSON request body
{
"order_id": "UNIQUE-ORDER-001",
"package_code": "FF-25",
"player_id": "123456789",
"quantity": 1,
"wallet_type": "balance",
"callback_url": "https://your-site.com/callback"
}Wallet selection
balance uses the BDT price and Balance Wallet. USD purchases are disabled. Use balance for all new orders.
Other endpoints
GET
https://weekshop.top/api/v1/productsActive product catalogGET
https://weekshop.top/api/v1/balanceWallet and credit balanceGET
https://weekshop.top/api/v1/status?order_id=UNIQUE-ORDER-001Order status lookupCallback verification
Each callback includes X-Week Shop-Signature, an HMAC-SHA256 signature. Verify the signature, process each unique order once and return HTTP 200.
✓ Signed payload✓ Unique order protection✓ Automatic retry support