Access wallet, verification, CIBIL, marketplace, and more through our secure RESTful API with 3-layer authentication.
https://vistarkriya.com/api/v1
Comprehensive API coverage for all platform capabilities. Each module provides RESTful endpoints with consistent response formats.
Core wallet balance, transactions, pipeline management, and license operations
Fetch credit reports and scores for individuals and businesses
PAN, Aadhaar, Bank Account, GST and other verification APIs
Access marketplace services and products programmatically
Commission and earnings management APIs
Customer management and B2C operations
All API requests require 4-header authentication including HMAC-SHA256 signature for maximum security.
X-API-Key
Your API key
vk_live_abc123...
X-Timestamp
Unix timestamp (seconds)
1739612345
X-Signature
HMAC-SHA256 signature (hex)
a1b2c3d4e5...
X-Admin-Code
Your 6-digit admin code
123456
Signature = HMAC-SHA256( timestamp + method + endpoint + body, api_secret )
1739612345GET/api/v1/wallet/balance
1739612345POST/api/v1/verify/pan{"pan":"ABCDE1234F"}
Get started quickly with ready-to-use code examples in your favorite language.
<?php
// Your credentials
$api_key = 'vk_live_your_api_key_here';
$api_secret = 'your_api_secret_here';
$tenant_code = '123456';
// Request details
$timestamp = time();
$method = 'GET';
$endpoint = '/api/v1/wallet/core/balance.php';
$body = '';
// Generate signature
$signature_string = $timestamp . $method . $endpoint . $body;
$signature = hash_hmac('sha256', $signature_string, $api_secret);
// Make request
$ch = curl_init();
curl_setopt_array($ch, [
CURLOPT_URL => 'https://vistarkriya.com' . $endpoint,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'X-API-Key: ' . $api_key,
'X-Timestamp: ' . $timestamp,
'X-Signature: ' . $signature,
'X-Admin-Code: ' . $tenant_code,
'Content-Type: application/json'
]
]);
$response = curl_exec($ch);
$data = json_decode($response, true);
print_r($data);
{
"success": true,
"data": {
"balance": 15420.50,
"currency": "INR",
"last_updated": "2024-02-20T10:30:00Z"
}
}
Common error codes and how to resolve them.
AUTH_MISSING_KEY
X-API-Key header missing
AUTH_INVALID_KEY
API key not found
HMAC_INVALID
Signature doesn't match
TIMESTAMP_EXPIRED
Request too old (>5 min)
AUTH_IP_BLOCKED
IP not in whitelist
Before hashing, verify it looks like: 1739612345GET/api/v1/wallet/balance
Your server time must be within 5 minutes of our server. Use NTP.
Use GET not get
For POST, use exact JSON string. No extra whitespace.
X-Admin-Code is sent as header only, not in HMAC calculation.
{
"success": false,
"error": {
"code": "HMAC_INVALID",
"message": "Signature verification failed",
"http_status": 401
}
}
Sign up for a free account to get your API key and access full documentation with interactive testing.
Complete API documentation with interactive testing console is available in your admin dashboard after signup.
Get the latest updates on new features and business tips