Shadow Pay API

<?php
$ch = curl_init("https://shadow-pay.top/api/v2/credentials.php");
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode(["description" => "Production App"]),
    CURLOPT_HTTPHEADER     => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"],
    CURLOPT_RETURNTRANSFER => true,
]);
$res = json_decode(curl_exec($ch), true);
echo $res["credentials"]["api_key"];

const res = await fetch("https://shadow-pay.top/api/v2/credentials.php", {
  method: "POST",
  headers: {
    "X-API-KEY": "your_api_key",
    "X-API-SECRET": "your_api_secret",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({ description: "Production App" })
});
const data = await res.json();
console.log(data.credentials.api_key);

import requests
r = requests.post("https://shadow-pay.top/api/v2/credentials.php",
    headers={"X-API-KEY": "your_api_key", "X-API-SECRET": "your_api_secret"},
    json={"description": "Production App"})
print(r.json()["credentials"]["api_key"])

<?php
$ch = curl_init("https://shadow-pay.top/api/v2/credentials.php?action=toggle");
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode(["id" => 2]),
    CURLOPT_HTTPHEADER     => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"],
    CURLOPT_RETURNTRANSFER => true,
]);
echo curl_exec($ch);

await fetch("https://shadow-pay.top/api/v2/credentials.php?action=toggle", {
  method: "POST",
  headers: { "X-API-KEY": "your_api_key", "X-API-SECRET": "your_api_secret", "Content-Type": "application/json" },
  body: JSON.stringify({ id: 2 })
});

requests.post("https://shadow-pay.top/api/v2/credentials.php?action=toggle",
    headers={"X-API-KEY": "your_api_key", "X-API-SECRET": "your_api_secret"},
    json={"id": 2}).json()

<?php
$data = ["account_type" => "paybill", "account_number" => "247247", "account_reference" => "My Business"];
$ch = curl_init("https://shadow-pay.top/api/v2/payment-accounts.php");
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode($data),
    CURLOPT_HTTPHEADER     => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"],
    CURLOPT_RETURNTRANSFER => true,
]);
print_r(json_decode(curl_exec($ch), true));

const res = await fetch("https://shadow-pay.top/api/v2/payment-accounts.php", {
  method: "POST",
  body: JSON.stringify({ account_type:"paybill", account_number:"247247", account_reference:"My Business" }),
  headers: { "X-API-KEY":"your_api_key", "X-API-SECRET":"your_api_secret", "Content-Type":"application/json" }
});
console.log(await res.json());

requests.post("https://shadow-pay.top/api/v2/payment-accounts.php",
    json={"account_type":"paybill","account_number":"247247","account_reference":"My Business"},
    headers={"X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret"}).json()

<?php
$d = ["consumer_key" => "Bq...", "consumer_secret" => "rZ...", "shortcode" => "174379", "passkey" => "bfb2...", "environment" => "sandbox"];
$ch = curl_init("https://shadow-pay.top/api/v2/daraja-request.php");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode($d),
CURLOPT_HTTPHEADER => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"], CURLOPT_RETURNTRANSFER => true]);
echo curl_exec($ch);

await fetch("https://shadow-pay.top/api/v2/daraja-request.php", {
  method: "POST",
  body: JSON.stringify({ consumer_key:"Bq...", consumer_secret:"rZ...", shortcode:"174379", passkey:"bfb2...", environment:"sandbox" }),
  headers: { "X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret","Content-Type":"application/json" }
});

requests.post("https://shadow-pay.top/api/v2/daraja-request.php",
    json={"consumer_key":"Bq...","consumer_secret":"rZ...","shortcode":"174379","passkey":"bfb2...","environment":"sandbox"},
    headers={"X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret"}).json()

<?php
$ch = curl_init("https://shadow-pay.top/api/v2/sms-alerts.php");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode(["phone" => "0700100211", "enabled" => true]),
CURLOPT_HTTPHEADER => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"], CURLOPT_RETURNTRANSFER => true]);
echo curl_exec($ch);

await fetch("https://shadow-pay.top/api/v2/sms-alerts.php", {
  method: "POST",
  body: JSON.stringify({ phone:"0700100211", enabled:true }),
  headers: { "X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret","Content-Type":"application/json" }
});

requests.post("https://shadow-pay.top/api/v2/sms-alerts.php", json={"phone":"0700100211","enabled":True},
    headers={"X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret"}).json()

<?php
$data = [
    "payment_account_id" => 5,
    "phone"              => "0700100211",
    "amount"             => 500,
    "reference"          => "ORDER-001",
    "description"        => "Payment for order",
];
$ch = curl_init("https://shadow-pay.top/api/v2/stkpush.php");
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode($data),
    CURLOPT_HTTPHEADER     => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"],
    CURLOPT_RETURNTRANSFER => true,
]);
$res = json_decode(curl_exec($ch), true);
$checkoutId = $res["checkout_request_id"];
// Now poll /api/v2/status.php with $checkoutId

const res = await fetch("https://shadow-pay.top/api/v2/stkpush.php", {
  method: "POST",
  headers: { "X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret","Content-Type":"application/json" },
  body: JSON.stringify({
    payment_account_id: 5,
    phone: "0700100211",
    amount: 500,
    reference: "ORDER-001",
    description: "Payment for order"
  })
});
const data = await res.json();
// Poll data.checkout_request_id via /api/v2/status.php
console.log(data.checkout_request_id);

import requests
res = requests.post("https://shadow-pay.top/api/v2/stkpush.php",
    headers={"X-API-KEY": "your_api_key", "X-API-SECRET": "your_api_secret"},
    json={"payment_account_id": 5, "phone": "0700100211", "amount": 500, "reference": "ORDER-001"})
data = res.json()
checkout_id = data["checkout_request_id"]
# Poll /api/v2/status.php with checkout_id

<?php
function pollStatus(string $checkoutId, string $apiKey, string $apiSecret, string $url): ?array {
    $done = ["completed", "failed", "cancelled", "expired"];
    for ($i = 0; $i < 10; $i++) {
        sleep(2);
        $ch = curl_init($url);
        curl_setopt_array($ch, [
            CURLOPT_POST           => true,
            CURLOPT_POSTFIELDS     => json_encode(["checkout_request_id" => $checkoutId]),
            CURLOPT_HTTPHEADER     => ["X-API-KEY: $apiKey", "X-API-SECRET: $apiSecret", "Content-Type: application/json"],
            CURLOPT_RETURNTRANSFER => true,
        ]);
        $r = json_decode(curl_exec($ch), true);
        if (in_array($r["status"] ?? "", $done)) return $r;
    }
    return null;
}
$result = pollStatus("ws_CO_...", "your_api_key", "your_api_secret", "https://shadow-pay.top/api/v2/status.php");
echo $result["status"];

async function pollStatus(checkoutId, apiKey, apiSecret, maxAttempts = 10) {
  const done = ["completed", "failed", "cancelled", "expired"];
  for (let i = 0; i < maxAttempts; i++) {
    await new Promise(r => setTimeout(r, 2000));
    const res = await fetch("https://shadow-pay.top/api/v2/status.php", {
      method: "POST",
      body: JSON.stringify({ checkout_request_id: checkoutId }),
      headers: { "X-API-KEY": apiKey, "X-API-SECRET": apiSecret, "Content-Type": "application/json" }
    });
    const data = await res.json();
    if (done.includes(data.status)) return data;
  }
  return null;
}
const result = await pollStatus("ws_CO_...", "your_api_key", "your_api_secret");
console.log(result?.status);

import time, requests

def poll_status(checkout_id, api_key, api_secret, url, max_attempts=10):
    done = ["completed", "failed", "cancelled", "expired"]
    for _ in range(max_attempts):
        time.sleep(2)
        r = requests.post(url,
            json={"checkout_request_id": checkout_id},
            headers={"X-API-KEY": api_key, "X-API-SECRET": api_secret})
        data = r.json()
        if data.get("status") in done:
            return data
    return None

result = poll_status("ws_CO_...", "your_api_key", "your_api_secret", "https://shadow-pay.top/api/v2/status.php")
print(result["status"])

<?php
$d = ["title" => "School Fees", "custom_link" => "school-fees-2026", "payment_account_id" => 5, "min_amount" => 500];
$ch = curl_init("https://shadow-pay.top/api/v2/payment-links.php");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode($d),
CURLOPT_HTTPHEADER => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"], CURLOPT_RETURNTRANSFER => true]);
$res = json_decode(curl_exec($ch), true);
echo $res["link"]["url"];

const res = await fetch("https://shadow-pay.top/api/v2/payment-links.php", {
  method: "POST",
  body: JSON.stringify({ title:"School Fees", custom_link:"school-fees-2026", payment_account_id:5, min_amount:500 }),
  headers: { "X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret","Content-Type":"application/json" }
});
const data = await res.json();
console.log(data.link.url);

res = requests.post("https://shadow-pay.top/api/v2/payment-links.php",
    json={"title":"School Fees","payment_account_id":5,"min_amount":500},
    headers={"X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret"})
print(res.json()["link"]["url"])

<?php
$ch = curl_init("https://shadow-pay.top/api/v2/payment-links.php?action=toggle");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode(["id" => 7]),
CURLOPT_HTTPHEADER => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"], CURLOPT_RETURNTRANSFER => true]);
echo curl_exec($ch);

await fetch("https://shadow-pay.top/api/v2/payment-links.php?action=toggle", {
  method: "POST",
  body: JSON.stringify({ id: 7 }),
  headers: { "X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret","Content-Type":"application/json" }
});

requests.post("https://shadow-pay.top/api/v2/payment-links.php?action=toggle", json={"id":7},
    headers={"X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret"}).json()

<?php
$ch = curl_init("https://shadow-pay.top/api/v2/wallet.php");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode(["phone" => "0700100211", "amount" => 500]),
CURLOPT_HTTPHEADER => ["X-API-KEY: your_api_key", "X-API-SECRET: your_api_secret", "Content-Type: application/json"], CURLOPT_RETURNTRANSFER => true]);
$r = json_decode(curl_exec($ch), true);
echo $r["checkout_request_id"]; // poll for confirmation

const res = await fetch("https://shadow-pay.top/api/v2/wallet.php", {
  method: "POST",
  body: JSON.stringify({ phone:"0700100211", amount:500 }),
  headers: { "X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret","Content-Type":"application/json" }
});
const data = await res.json();
console.log(data.checkout_request_id); // poll for confirmation

r = requests.post("https://shadow-pay.top/api/v2/wallet.php",
    json={"phone":"0700100211","amount":500},
    headers={"X-API-KEY":"your_api_key","X-API-SECRET":"your_api_secret"})
checkout_id = r.json()["checkout_request_id"]
# Poll /api/v2/status.php with checkout_id

<?php
// Replace with YOUR M-Pesa number and desired top-up amount
$apiKey    = "your_api_key";
$apiSecret = "your_api_secret";
$url       = "https://shadow-pay.top/api/v2/credit-topup.php";

$payload = [
    "phone"  => "0700100211",  // your Safaricom number
    "amount" => 500,           // credited to your withdrawal balance on payment
];

$ch = curl_init($url);
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode($payload),
    CURLOPT_HTTPHEADER     => [
        "X-API-KEY: $apiKey",
        "X-API-SECRET: $apiSecret",
        "Content-Type: application/json",
    ],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 30,
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($data["success"]) {
    echo "STK Push sent! Check your phone.\n";
    echo "Checkout ID: " . $data["checkout_request_id"] . "\n";
    // Poll /api/v2/status.php with checkout_request_id to confirm payment
} else {
    echo "Error: " . $data["message"] . "\n";
}

// Replace phone with YOUR M-Pesa number
const res = await fetch("https://shadow-pay.top/api/v2/credit-topup.php", {
  method: "POST",
  headers: {
    "X-API-KEY":    "your_api_key",
    "X-API-SECRET": "your_api_secret",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    phone:  "0700100211",  // your Safaricom number
    amount: 500,           // credited to your withdrawal balance on payment
  }),
});

const data = await res.json();

if (data.success) {
  console.log("STK Push sent! Checkout ID:", data.checkout_request_id);
  // Poll /api/v2/status.php with checkout_request_id to confirm payment
} else {
  console.error("Error:", data.message);
}

import requests

# Replace phone with YOUR M-Pesa number
API_KEY    = "your_api_key"
API_SECRET = "your_api_secret"
URL        = "https://shadow-pay.top/api/v2/credit-topup.php"

payload = {
    "phone":  "0700100211",  # your Safaricom number
    "amount": 500,           # credited to your withdrawal balance on payment
}
headers = {
    "X-API-KEY":    API_KEY,
    "X-API-SECRET": API_SECRET,
    "Content-Type": "application/json",
}

response = requests.post(URL, json=payload, headers=headers, timeout=30)
data     = response.json()

if data.get("success"):
    print("STK Push sent! Checkout ID:", data["checkout_request_id"])
    # Poll /api/v2/status.php with checkout_request_id to confirm payment
else:
    print("Error:", data.get("message"))

<?php
// All 4 fields required. reference must equal YOUR account username exactly.
$apiKey    = "your_api_key";
$apiSecret = "your_api_secret";
$url       = "https://shadow-pay.top/api/v2/withdraw.php";

$payload = [
    "mpesa_name"   => "JOHN DOE",       // M-Pesa registered name
    "mpesa_number" => "0700100211",     // number to receive funds
    "amount"       => 5000,             // must not exceed credit balance
    "reference"    => "your_username",  // MUST match your account username
];

$ch = curl_init($url);
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode($payload),
    CURLOPT_HTTPHEADER     => [
        "X-API-KEY: $apiKey",
        "X-API-SECRET: $apiSecret",
        "Content-Type: application/json",
    ],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 30,
]);
$r = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($r["success"]) {
    echo "Submitted! Code: " . $r["withdrawal_code"] . "\n";
    echo "Net amount: KES " . $r["net_amount"] . "\n";
} else {
    echo "Error: " . $r["message"] . "\n";
}

// All 4 fields required. reference must equal YOUR account username exactly.
const res = await fetch("https://shadow-pay.top/api/v2/withdraw.php", {
  method: "POST",
  headers: {
    "X-API-KEY":    "your_api_key",
    "X-API-SECRET": "your_api_secret",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    mpesa_name:   "JOHN DOE",       // M-Pesa registered name
    mpesa_number: "0700100211",     // number to receive funds
    amount:       5000,             // must not exceed credit balance
    reference:    "your_username",  // MUST match your account username
  }),
});

const data = await res.json();

if (data.success) {
  console.log("Submitted! Code:", data.withdrawal_code);
  console.log("Net amount: KES", data.net_amount);
} else {
  console.error("Error:", data.message);
}

import requests

# All 4 fields required. reference must equal YOUR account username exactly.
API_KEY    = "your_api_key"
API_SECRET = "your_api_secret"
URL        = "https://shadow-pay.top/api/v2/withdraw.php"

payload = {
    "mpesa_name":   "JOHN DOE",      # M-Pesa registered name
    "mpesa_number": "0700100211",    # number to receive funds
    "amount":       5000,            # must not exceed credit balance
    "reference":    "your_username", # MUST match your account username
}
headers = {
    "X-API-KEY":    API_KEY,
    "X-API-SECRET": API_SECRET,
    "Content-Type": "application/json",
}

r = requests.post(URL, json=payload, headers=headers, timeout=30)
data = r.json()

if data.get("success"):
    print("Submitted! Code:", data["withdrawal_code"])
    print("Net amount: KES", data["net_amount"])
else:
    print("Error:", data.get("message"))