API Documentation

Use this section to test the API quickly.

• Base URL: https://www.jesusnumber.com/api/v1
• Authentication: Send your API key in the X-API-Key header on every request (no email/password in the body).
• Body formats: JSON (application/json) or form posts (application/x-www-form-urlencoded / multipart/form-data).
• Time: All datetimes are UTC. Short-term expiration is in seconds; long-term / 3-day expires is an absolute UTC timestamp.
• Responses: JSON envelope success, message, data (see each endpoint).

curl -X GET "https://www.jesusnumber.com/api/v1/balance" \
  -H "X-API-Key: your_api_key_here" \
  -H "Accept: application/json"

Requests are throttled to protect the service (default Laravel API throttle, typically per IP / minute). If you exceed the limit, you may receive HTTP 429.

{
  "message": "Too Many Attempts."
}

{
  "success": false,
  "message": "Invalid or inactive API key.",
  "data": null
}

All documented endpoints require header X-API-Key: <your_key>. They accept JSON (Content-Type: application/json) or form posts. Query parameters apply to GET routes as shown.

Returns wallet balances for the authenticated API key (deposit, hold, spend, available balance).

{
  "success": true,
  "message": "Wallet balance retrieved.",
  "data": {
    "balance": 50.00,
    "hold_balance": 0.00,
    "spend_balance": 0.00,
    "deposit": 0.00
  }
}

{
  "success": false,
  "message": "Invalid or inactive API key.",
  "data": null
}

List active products from your catalog (synced from upstream). Optional filters narrow by category, network, type, or search text.

{
  "success": true,
  "message": "Products retrieved.",
  "data": {
    "products": [ /* full product rows */ ],
    "count": 12
  }
}

{
  "success": false,
  "message": "Invalid or inactive API key.",
  "data": null
}

Place a new order for a product_id. Order type is determined by the product. Optional premium flow: premium + premium_quote_id.

{
  "success": true,
  "message": "Order completed successfully",
  "data": { /* order + upstream fields */ }
}

{
  "success": false,
  "message": "Insufficient balance",
  "data": null
}

Returns one order owned by your account. data.kind is short_term or long_term; full row is under data.order.

{
  "success": true,
  "message": "Order retrieved.",
  "data": {
    "kind": "short_term",
    "order": { }
  }
}

{
  "success": false,
  "message": "Order not found.",
  "data": null
}

Merged list of short-term and long-term orders, sorted by time. Pagination via query string.

{
  "success": true,
  "message": "Orders retrieved.",
  "data": {
    "orders": [],
    "pagination": {
      "current_page": 1,
      "last_page": 1,
      "per_page": 20,
      "total": 0
    }
  }
}

{
  "success": false,
  "message": "Invalid or inactive API key.",
  "data": null
}

Returns all stored incoming SMS rows for the order. Poll until messages is non-empty.

{
  "success": true,
  "message": "SMS messages retrieved.",
  "data": {
    "order_id": "146185",
    "messages": [
      {
        "sms": "...",
        "code": "123456"
      }
    ]
  }
}

{
  "success": false,
  "message": "Order not found.",
  "data": null
}

Reject / cancel an eligible order (same business rules as the website). Request body must include order_id.

{
  "success": true,
  "message": "Order reject successfully",
  "data": { }
}

{
  "success": false,
  "message": "Order not found.",
  "data": null
}

When the upstream provider delivers an SMS, they POST to your configured callback URL on this app (typically POST /api/callback). Payload shape is defined by the provider; the app stores SMS and updates orders. You do not call this endpoint with your API key — you receive it on your server.

{
  "event": "incoming_message",
  "message": {
    "order_id": 454303,
    "number": "16095170503",
    "service": "paypal",
    "sender": "8843",
    "sms": "Your PayPal OTP is 545",
    "type": "str"
  }
}