# "signature" is computed as described in the Signature Generation Guide.
# This value is the guide's worked example (example signing secret).
curl --request POST \
  --url https://api.c2cpayment.net/api/merchant/orders \
  --header "C2C-API-Key: $C2C_API_KEY" \
  --header "Content-Type: application/json" \
  --header "Idempotency-Key: INV-10045" \
  --data '{"orderType":"Deposit","amount":1500,"currency":"PKR","walletType":"JazzCash","merchantOrderRef":"INV-10045","customerReference":"player_12345","callbackUrl":"https://merchant.example.com/webhooks/c2c","signature":"56eff91b5ab0351471a2a8d457320230"}'

// signBody(): see the Signature Generation Guide
const payload = {
  orderType: 'Deposit',
  amount: 1500,
  currency: 'PKR',
  walletType: 'JazzCash',
  merchantOrderRef: 'INV-10045',
  customerReference: 'player_12345',
  callbackUrl: 'https://merchant.example.com/webhooks/c2c',
};

const response = await fetch(
  'https://api.c2cpayment.net/api/merchant/orders',
  {
    method: 'POST',
    headers: {
      'C2C-API-Key': process.env.C2C_API_KEY,
      'Content-Type': 'application/json',
      'Idempotency-Key': 'INV-10045',
    },
    body: JSON.stringify({ ...payload, signature: signBody(payload, process.env.C2C_SIGNING_SECRET) }),
  }
);
const { data } = await response.json();
// Persist data.orderId, then redirect the customer to data.paymentPageUrl

import os, requests

# sign_body(): see the Signature Generation Guide
payload = {
    "orderType": "Deposit",
    "amount": 1500,
    "currency": "PKR",
    "walletType": "JazzCash",
    "merchantOrderRef": "INV-10045",
    "customerReference": "player_12345",
    "callbackUrl": "https://merchant.example.com/webhooks/c2c",
}

response = requests.post(
    "https://api.c2cpayment.net/api/merchant/orders",
    json={**payload, "signature": sign_body(payload, os.environ["C2C_SIGNING_SECRET"])},
    headers={
        "C2C-API-Key": os.environ["C2C_API_KEY"],
        "Idempotency-Key": "INV-10045",
    },
)
data = response.json()["data"]
# Persist data["orderId"], then redirect the customer to data["paymentPageUrl"]

{
  "data": {
    "orderId": "788fcae0-5214-403c-baa2-f318c0eb1b5b",
    "paymentPageUrl": "https://<payment-page-host>/pay?order_id=788fcae0-5214-403c-baa2-f318c0eb1b5b&expires=1791462080&signature=Xk3...&wallet=jazzcash",
    "status": "Queued",
    "orderReference": "ORD-20261008120620-3f6b",
    "expiresAt": "2026-10-08T12:21:20.605646Z",
    "stage": "Assigned",
    "merchantOrderRef": "INV-10045"
  }
}

{
  "data": {
    "orderId": "788fcae0-5214-403c-baa2-f318c0eb1b5b",
    "paymentPageUrl": "https://<payment-page-host>/pay?order_id=788fcae0-5214-403c-baa2-f318c0eb1b5b&expires=1791462080&signature=Xk3...&wallet=jazzcash",
    "status": "Awaiting",
    "orderReference": "ORD-20261008120620-3f6b",
    "expiresAt": "2026-10-08T12:21:20.605646Z",
    "stage": "Awaiting",
    "merchantOrderRef": "INV-10045"
  }
}

{
  "error": "'Amount' must be greater than '0'."
}

{
  "success": false,
  "error": "Request signature verification failed. Sign the request as described in the signature guide.",
  "code": "SIGNATURE_INVALID",
  "traceId": "5b269362496001a7ed102e2d8cc50329"
}

{
  "error": "IP not in whitelist."
}

{
  "error": "merchantOrderRef 'INV-10045' is already used by order ORD-20261008120620-3f6b. Reuse the same Idempotency-Key to retry a request, or use a new reference for a new payment."
}

{
  "error": "This Idempotency-Key was already used for a different order request."
}