WickSpend Reseller API
Use WickSpend verification numbers, long rentals, Temp Mail, Marketplace products, Boostly SMM services and reseller notifications from your own server. API keys must stay server-side.
Base URL
https://wickspend.com/api/v1
Authentication
X-API-Key: ws_live_xxxxxxxxx # or Authorization: Bearer ws_live_xxxxxxxxx
Never expose API keys in browser JavaScript, mobile bundles, screenshots or repositories.
Numbers
| Method | Path | Purpose |
|---|---|---|
| GET | /numbers/catalog | Live number offers |
| GET | /balance | WickSpend wallet balance |
| POST | /numbers/buy | Buy a number |
| GET | /numbers/orders | Recent number orders |
| GET | /numbers/status?reference=… | Order + OTP status |
| POST | /numbers/cancel | Confirmed cancel + refund |
Long rentals
| Method | Path | Purpose |
|---|---|---|
| GET | /rentals/catalog | Live rental services and periods |
| POST | /rentals/buy | Buy a long rental |
| GET | /rentals/orders | Your rental orders |
| GET | /rentals/order?reference=… | Rental + current SMS/OTP messages |
| POST | /rentals/cancel | Confirmed provider cancel + refund |
Temp Mail
| Method | Path | Purpose |
|---|---|---|
| GET | /temp-mail/services | Live Gmail services |
| GET | /temp-mail/price?service_code=… | Trusted price + stock |
| POST | /temp-mail/buy | Buy a mailbox |
| GET | /temp-mail/order?reference=… | Mailbox + OTP status |
| GET | /temp-mail/orders | Your Temp Mail orders |
| POST | /temp-mail/cancel | Confirmed provider cancel + refund |
Temp Mail uses the existing WickSpend SMSBower integration and wallet. A 202 response is processing/unknown; keep the same request key and do not assume a refund.
Marketplace
| Method | Path | Purpose |
|---|---|---|
| GET | /marketplace/products | Existing WickSpend Marketplace catalog |
| GET | /marketplace/product?product_id=… | One product |
| GET | /marketplace/orders | Your Marketplace orders + delivery |
| POST | /marketplace/buy | Buy a provider-backed product |
manual: products remain read-only through the API.
Boostly
| Method | Path | Purpose |
|---|---|---|
| GET | /boostly/services | Live SMM services and pricing |
| GET | /boostly/service?service_id=… | One service |
| GET | /boostly/orders | Your recent orders |
| GET | /boostly/order?reference=… | One order |
| POST | /boostly/buy | Place an SMM order |
Notifications
| Method | Path | Purpose |
|---|---|---|
| GET | /notifications | List your tenant-scoped notifications |
| POST | /notifications/read | Mark one or all notifications read |
POST /notifications/read
{"notification_id":123}
# mark all
{"all":true}Notification reads are scoped to the reseller authenticated by the API key. Another reseller's notification ID cannot be changed.
Buy Temp Mail
curl -X POST 'https://wickspend.com/api/v1/temp-mail/buy' \
-H 'X-API-Key: ws_live_xxxxxxxxx' \
-H 'Content-Type: application/json' \
-d '{"service_code":"wa","request_key":"mail-order-123"}'Idempotency and refunds
Use one stable request_key per purchase attempt. Do not create a second key after a timeout or PROVIDER_STATUS_UNKNOWN. Wallet refunds occur only after a provider failure or cancellation is confirmed.
Signed webhooks
Webhook configuration and signing-secret rotation are available in the reseller developer dashboard. Verify X-WickSpend-Signature, reject stale timestamps, and deduplicate by delivery ID.
OpenAPI 3.1
https://wickspend.com/api/v1/openapi.json contains the machine-readable contract.