GamexBulk Shop Public API Documentation

Introduction

Integrate voucher and top-up products into your own system using GamexBulk.Shop public JSON API. This page includes live playground blocks so resellers can verify their API key, test requests, inspect raw request bodies, and validate webhook signatures directly from the browser.

Base URL & Versioning

All endpoints below are relative to https://cdn.milliepin.az/api/v1.

Version v1 is stable. Future breaking versions should use a separate prefix.

Authentication

Authenticated endpoints require your personal API key in the request header below:

X-API-KEY: YOUR_API_KEY

Idempotency

For order creation, send X-Idempotency-Key with a unique UUID. Reusing the same key with the same payload safely returns the same order instead of creating duplicates.

X-Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000

Get Account Details

Retrieve reseller profile data, balance, currency, and personal webhook_secret.

curl -s "https://cdn.milliepin.az/api/v1/getMe" \
  -H "X-API-KEY: YOUR_API_KEY" \
  -H "Accept: application/json"

{
  "success": true,
  "data": {
    "user_id": 579365494,
    "username": "reseller_pro",
    "balance": "1250.5000",
    "webhook_secret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "currency": "USD"
  }
}

No request yet.

Response will appear here.

Games

List available games that can be used to group or filter top-up products.

curl -s "https://cdn.milliepin.az/api/v1/games" -H "Accept: application/json"

{
  "success": true,
  "data": [
    {
      "id": 1,
      "name": "PUBG Mobile"
    },
    {
      "id": 2,
      "name": "Mobile Legends"
    }
  ]
}

No request yet.

Response will appear here.

Categories

List product categories. You may optionally filter by game_id.

curl -s "https://cdn.milliepin.az/api/v1/categories?game_id=1" -H "Accept: application/json"

{
  "success": true,
  "data": [
    {
      "id": 10,
      "name": "UC Packages",
      "game_id": 1
    }
  ]
}

No request yet.

Response will appear here.

Products

List active products. Supports filters such as type, game, category, and IDs.

curl -s "https://cdn.milliepin.az/api/v1/products?type=voucher&per_page=10" \
  -H "Accept: application/json"

{
  "success": true,
  "data": [
    {
      "id": 55,
      "name": "Steam Wallet 10 USD",
      "game_id": 0,
      "game": "",
      "category_id": 3,
      "category": "Gift Cards",
      "type": "VOUCHER",
      "price": "9.9900",
      "stock_status": "FINITE",
      "stock_count": 120,
      "fields": []
    }
  ],
  "meta": {
    "total": 1,
    "per_page": 10,
    "current_page": 1,
    "last_page": 1
  }
}

No request yet.

Response will appear here.

Validate Player

Validate the target player before creating a top-up order. This endpoint is only relevant for products that require player input.

curl -s "https://cdn.milliepin.az/api/v1/validate-player" \
  -X POST \
  -H "X-API-KEY: YOUR_API_KEY" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
    "product_id": 91,
    "player_id": "5123456789",
    "server_id": "2001"
  }'

{
  "success": true,
  "data": {
    "nickname": "PlayerOne",
    "nickname_verified": true,
    "validation_optional": false
  }
}

No request yet.

Response will appear here.

Create Order

Create a voucher or top-up order. For top-up products, validate the player first when required. Use X-Idempotency-Key to avoid duplicates on retries.

X-API-KEY: YOUR_API_KEY
X-Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000

{
  "product_id": 55,
  "qty": 2,
  "callback_url": "https://yourdomain.com/webhooks/gamexbulkshop",
  "callback_mode": "legacy"
}

{
  "product_id": 91,
  "qty": 1,
  "player_id": "5123456789",
  "server_id": "2001",
  "callback_url": "https://yourdomain.com/webhooks/gamexbulkshop",
  "callback_mode": "events"
}

{
  "success": true,
  "data": {
    "order_id": 8821,
    "status": "PENDING"
  }
}

No request yet.

Response will appear here.

Get Order Status

Fetch a single order by ID.

curl -s "https://cdn.milliepin.az/api/v1/order/8821" \
  -H "X-API-KEY: YOUR_API_KEY" \
  -H "Accept: application/json"

{
  "success": true,
  "data": {
    "order_id": 8821,
    "client_order_id": "7b8f0a64-4f7e-4a2f-9a0a-7b1f0a3bfa11",
    "status": "COMPLETED",
    "price": "19.9800",
    "created_at": "2026-01-30T13:05:04+00:00"
  }
}

No request yet.

Response will appear here.

List Orders

Retrieve your recent order list.

{
  "success": true,
  "data": [
    {
      "order_id": 8821,
      "client_order_id": "7b8f0a64-4f7e-4a2f-9a0a-7b1f0a3bfa11",
      "status": "COMPLETED",
      "price": "19.9800",
      "created_at": "2026-01-30T13:05:04+00:00"
    }
  ]
}

No request yet.

Response will appear here.

Webhooks

If you send a valid callback_url while creating an order, webhook behavior depends on callback_mode.

Signature Verification

Signed webhook requests include an HMAC header generated using your personal webhook_secret from /getMe.

$secret = 'YOUR_WEBHOOK_SECRET';
$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_GAMEX_SIGNATURE'] ?? '';

$computed = 'sha256=' . hash_hmac('sha256', $payload, $secret);

if (!hash_equals($computed, $signature)) {
    http_response_code(401);
    exit('Invalid signature');
}

http_response_code(204);

No calculation yet.

Result will appear here.

Payload Examples

Legacy final webhook example

{
  "event_id": "47c8c6ba-16a5-4089-9f62-7ae1e51d4c0f",
  "order_id": 8821,
  "client_order_id": "7b8f0a64-4f7e-4a2f-9a0a-7b1f0a3bfa11",
  "status": "COMPLETED",
  "product_name": "Steam Wallet 10 USD",
  "qty": 2,
  "player_id": null,
  "price": "19.9800",
  "currency": "USD",
  "delivery": ["CODE_1", "CODE_2"],
  "timestamp": "2026-01-30T13:05:10+00:00"
}

Events mode webhook example

{
  "event": "order.status_changed",
  "callback_mode": "events",
  "order_id": 8821,
  "client_order_id": "7b8f0a64-4f7e-4a2f-9a0a-7b1f0a3bfa11",
  "product_id": 91,
  "product_name": "PUBG Mobile 60 UC",
  "product_type": "TOPUP",
  "game_id": 1,
  "game_name": "PUBG Mobile",
  "player_id": "5123456789",
  "player_name": "PlayerOne",
  "server_id": "2001",
  "qty": 1,
  "price": "0.8800",
  "status": "PROCESSING",
  "message": "Order is currently being processed.",
  "timestamp": "2026-03-30T02:00:00+00:00"
}

Order Status Lifecycle

Error Codes

Use error.code for programmatic handling.

{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "player_id is required."
  }
}

Changelog