Who can use it
Approved partner accounts with active API credentials.
API version v1
Signed server-to-server purchase and refund events for approved partners. API keys stay separate in the partner dashboard.
Overview
The PrizeNest Partner API accepts signed purchase and refund events. PrizeNest calculates points from active earning rules, checks partner funding, matches customers by normalized email or phone, and records integration logs for review.
Approved partner accounts with active API credentials.
Production and TEST requests use https://www.prizenest.org.
X-PrizeNest-Key plus HMAC request signature.
Current public Partner API version is v1.
Every Partner API request must be JSON, sent from a server, include the public API key in X-PrizeNest-Key, include a timestamp in X-PrizeNest-Timestamp, and include an HMAC signature in X-PrizeNest-Signature. Requests with missing, revoked, expired, inactive, wrong-scope, or invalid keys are rejected before event processing. Timestamp skew defaults to 300 seconds.
API keys are managed from the partner portal, separate from this documentation. The raw signing secret is displayed only once. Store it in server-side secret storage and rotate credentials if a secret may have been exposed.