Skip to content
For engineers

Build on the rails

Three API surfaces — a public exchange API, a merchant payment API with signed webhooks, and a card-issuing API. This is the page to send your engineer.

Monbits Exchange

A public API on every exchange

Every white-label exchange ships with a public REST API and WebSocket order tracking, so partners and power users can build on your platform.

  • Currencies and live rates with transparent fee breakdowns
  • Create and track conversion orders programmatically
  • Subscribe to real-time order updates over WebSocket
Explore Monbits Exchange
Public API
                                    
# Live estimate with the fee breakdown included
curl "https://your-exchange.com/api/public/v1/convert-crypto\
/estimates/amount?fromCurrency=BTC&toCurrency=ETH&amount=1"

# Create a conversion order
curl -X POST \
  "https://your-exchange.com/api/public/v1/convert-crypto/orders" \
  -H "Content-Type: application/json" \
  -d '{
    "fromCurrency": "eth",
    "toCurrency": "btc",
    "amount": 1,
    "address": "1HQ3Go3ggs8pFnXuHVHRytPCq5fGG8Hbhx"
  }'
                                
Monbits Pay

A merchant API your backend can trust

REST endpoints for orders, hosted checkout, payment links and payouts — with signed webhooks for every status change.

  • Order, payment and withdrawal events delivered as webhooks
  • Signed with HMAC-SHA512, with stable delivery IDs for safe retries
  • Test mode flagged on every payload to keep staging traffic separate
Explore Monbits Pay
Verify a webhook (Node)
                                    
// Express: verify X-Signature before trusting the payload
app.post(
  "/webhook",
  express.raw({ type: "application/json" }),
  (req, res) => {
    const expected = crypto
      .createHmac("sha512", process.env.WEBHOOK_SECRET)
      .update(req.body) // raw bytes — never re-serialized JSON
      .digest("base64");

    const valid = crypto.timingSafeEqual(
      Buffer.from(req.headers["x-signature"]),
      Buffer.from(expected),
    );
    if (!valid) return res.status(401).send("invalid signature");

    res.status(200).send("OK"); // ack fast, process async
  },
);
                                
Monbits Card

Card programs, programmable

Card types, pricing and limits are API-readable, with webhook events for transactions, 3-D Secure and deposits.

  • Card tiers with per-tier pricing and daily/monthly limits
  • Crypto top-ups through redundant payment providers
  • Webhook events for transactions, 3-D Secure and deposits
Explore Monbits Card
Card pricing & limits
                                    
GET /cards/pricing

[
  {
    "cardName": "Standard",
    "cardPrice": "10.00",
    "cardPriceCurrency": "USD",
    "rechargeFeeRate": "0.02",
    "dailyLimit": 5000,
    "monthlyLimit": 25000
  }
]
                                

Want the full API reference?

Complete references for each product are available to evaluating teams — request access and an engineer will walk you through the integration end to end.