Quickstart

The API is live at https://api.matocard.xyz, with every route in the API reference tab and in Swagger. CORS is open, so it works from a browser, Vercel or localhost.

Matocard API in Swagger — Swagger at api.matocard.xyz/docs: every route, with examples, and an Authorize button for the session header.

Check it is up

curl https://api.matocard.xyz/health
# {"ok":true}

Install

bun add viem

No passwords. The account signs a fixed message once; the result is the session.

signin.ts

import { generatePrivateKey, privateKeyToAccount } from "viem/accounts";

// in the app this is the Mera passkey account
const account = privateKeyToAccount(generatePrivateKey());

const until = Math.floor(Date.now() / 1000) + 7 * 24 * 3600; // at most 7 days
const message = `Sign in to Matocard\n${account.address.toLowerCase()}\nuntil ${until}`;
const signature = await account.signMessage({ message });
const authorization = `Matocard ${account.address}.${until}.${signature}`;

Read the home screen

const me = await fetch("https://api.matocard.xyz/me", {
  headers: { authorization },
}).then((r) => r.json());

console.log(me.verified, me.limit, me.score);
// false "0" "0" for a new account

The first signed call creates the user.

Get a quote

const quote = await fetch("https://api.matocard.xyz/quote", {
  method: "POST",
  body: JSON.stringify({ pair: "USD/MYR" }),
}).then((r) => r.json());
// { id, pair: "USD/MYR", rate: "4.0845", expiresAt }

Authentication

The session format and its rules.

Amounts and quotes

Smallest units, currencies, rounding.

Payments

Top-ups, settlements and cash-outs.

Contract calls

What the app sends to the chain itself.

Getting started

Integrate

Operate

Next

Authentication

Amounts and quotes

Payments

Contract calls

​Next

Authentication

Amounts and quotes

Payments

Contract calls

Next