Developer API & Integration Reference

curl -X POST https://mail.gofluxpay.com/api/v1/payments/create \
  -H "Authorization: Bearer flx_live_sample_key" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: ORDER-1001-A" \
  -d '{
    "merchant_id": "mrc_sample_mid",
    "amount": 2500.00,
    "order_id": "ORDER-1001",
    "payer_email": "customer@example.com",
    "customer_name": "Tariq Khan",
    "return_url": "https://merchant.example/payment-result",
    "webhook_url": "https://merchant.example/webhooks/flux"
  }'

{
  "success": true,
  "payment": {
    "payment_id": "flx_pay_8a1bc490",
    "order_id": "ORDER-1001",
    "status": "pending",
    "amount": "2500.00",
    "currency": "PKR",
    "expires_at": "2026-11-01 22:15:00",
    "checkout_url": "https://mail.gofluxpay.com/checkout/flx_pay_8a1bc490?token=sec_token_94812"
  }
}

{
  "success": true,
  "payment": {
    "payment_id": "flx_pay_8a1bc490",
    "order_id": "ORDER-1001",
    "status": "completed",
    "amount": "2500.00",
    "fee": "95.00",
    "method": "jazzcash",
    "payer_mobile": "0300****567",
    "paid_at": "2026-11-01 22:12:30"
  }
}

{
  "success": true,
  "data": {
    "account_title": "MUHAMMAD USMAN",
    "account_number": "0102030405060708",
    "bank_name": "Meezan Bank Limited"
  }
}

curl -X POST https://mail.gofluxpay.com/api/v1/payouts/create \
  -H "X-API-KEY: flx_xak_your_payout_key" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: PO-REQ-1793704262" \
  -d '{
    "merchant_id": "mrc_your_merchant_mid",
    "amount": 5000.00,
    "account_number": "03001234567",
    "beneficiary_name": "Tariq Khan",
    "bank_name": "JazzCash",
    "type": "wallet"
  }'

{
  "success": true,
  "payout": {
    "payout_id": "flx_po_78a1bc",
    "status": "completed",
    "amount": "5000.00",
    "fee": "15.00",
    "bank_name": "JazzCash",
    "account_number": "0300****567",
    "beneficiary_name": "Tariq Khan",
    "reference_number": "FT263051928014",
    "completed_at": "2026-11-01 22:30:15"
  }
}

<?php
$secret = 'flx_sec_live_9a2b8e4f1c';
$rawPayload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_FLUX_SIGNATURE'] ?? '';

$expectedSignature = hash_hmac('sha256', $rawPayload, $secret);

if (!hash_equals($expectedSignature, $signature)) {
    http_response_code(401);
    exit('Signature verification failed');
}

$event = json_decode($rawPayload, true);
if ($event['event'] === 'payment.completed') {
    $orderId = $event['data']['order_id'];
    $amount  = $event['data']['amount'];
    // Fulfill order in your internal database
}

http_response_code(200);
echo json_encode(['received' => true]);

const crypto = require('crypto');

app.post('/webhooks/flux', (req, res) => {
  const secret = 'flx_sec_live_9a2b8e4f1c';
  const rawBody = req.rawBody || JSON.stringify(req.body);
  const signature = req.headers['x-flux-signature'];

  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');

  if (signature !== expectedSignature) {
    return res.status(401).send('Signature verification failed');
  }

  const event = req.body;
  if (event.event === 'payment.completed') {
    const { order_id, amount } = event.data;
    // Mark order as paid
  }

  res.status(200).json({ received: true });
});