I've just finished the first API service: Receive Payments API

It can be accessed here:


It works very similarly to Blockchain's API, with these basic differences:

• It works with CAPTcoin instead of Bitcoin (of course)
• It has an extra security for the merchant: A hash is sent with every callback. The actual key is sent only in the body of the SSL request when the address is generated. This is to make sure it's encrypt (unlike Blockchain, which asks the merchants to send a secret key via GET). So even if an attacker succeeds sniffing the traffic between the API and the merchant's server, he won't be able to simulate a callback. Learn more here (look for "salt_hash" and "security_hash").
• Transactions are forwarded to the merchant only after 6 confirmations. This is to prevent double-spend attacks (an extra security for the API).
• The code is 100% made from scratch.

This is the basic diagram explaining how it works:

This service is in alpha stage now

So I need testers:

Beware all generated addresses will be destroyed after this phase is over.
Do not use it on production yet.

To test, please go to: https://api.captcoin.com/
and read the full description and instructions.

Basically, you need to call this URL, either from your browser (to test) or from your server:


Where:

• $receiving_address: Your CAPTcoin address. Payments will be forwarded there
• $callback_url: The URL which will be called

Ideally, it'd be great if some of you can implement your own $callback_url for testing purposes.
The site contains instructions and basic examples on how to achieve that.

(I'm still working on a fork of https://github.com/blockchain/receive_payment_php_demo with a complete working example)

If you're not able to do that, you can use this Callbak URL:

Whenever it is called, it will just log the event here:
https://api.captcoin.com/log.txt
so you can confirm it.

I made a simple tool to easily perform these tests:
https://api.captcoin.com/test/

Just follow these steps:

• Go to https://api.captcoin.com/test/
• Enter your CAPTcoin address and your callback URL, and click "Send"
• Verify the response
• Check the callback that will be sent, and confirm by clicking "Test the Callback URL"
• Verify the response is as expected
• If that works fine, go eject and send some amount between ⟳0.1 and ⟳1 to the generated address.
• Check the callbacks (for example https://api.captcoin.com/log.txt) every 3 minutes.
• Verify the coins are forwarded after 6 confirmations.

Please, help testing this to be 100% it's ready for production


Post any feedback.

I repeat the warning: All generated addresses will be destroyed after the alpha period is over. Do not use it on production yet.