Documentação da API

curl -X GET "https://api.diamond-payments.com/api/pix/balance" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA"

curl -X POST "https://api.diamond-payments.com/api/pix" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d '{
    "amount": 149.90,
    "customer_name": "Cliente Exemplo Martins",
    "customer_email": "[email protected]",
    "customer_phone": "11984217390",
    "customer_document": "52998224725",
    "product_name": "Plano Pro Anual",
    "postback_url": "https://meusite.com.br/api/postback",
    "metadata": {
      "utm": { "utm_source": "meta_ads", "utm_campaign": "vendas_q4" }
    }
  }'

<?php
$payload = [
    'amount'            => 149.90,
    'customer_name'     => 'Cliente Exemplo Martins',
    'customer_email'    => '[email protected]',
    'customer_phone'    => '11984217390',
    'customer_document' => '52998224725',
    'product_name'      => 'Plano Pro Anual',
    'postback_url'      => 'https://meusite.com.br/api/postback',
    'metadata'          => ['utm' => ['utm_source' => 'meta_ads']],
];

$ch = curl_init('https://api.diamond-payments.com/api/pix');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'Content-Type: application/json',
        'X-Api-Key: sk_live_SUA_CHAVE_SECRETA',
    ],
    CURLOPT_POSTFIELDS     => json_encode($payload),
]);
$response = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($response['success']) {
    $copiaECola = $response['data']['pix']['qrCode']['emv'];
    $transacao  = $response['data']['id'];
}

const response = await fetch("https://api.diamond-payments.com/api/pix", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-Api-Key": process.env.GATEWAY_API_KEY, // sk_live_SUA_CHAVE_SECRETA
  },
  body: JSON.stringify({
    amount: 149.9,
    customer_name: "Cliente Exemplo Martins",
    customer_email: "[email protected]",
    customer_phone: "11984217390",
    customer_document: "52998224725",
    product_name: "Plano Pro Anual",
    postback_url: "https://meusite.com.br/api/postback",
    metadata: { utm: { utm_source: "meta_ads" } },
  }),
});

const { success, data, error } = await response.json();
if (success) {
  console.log("Copia e Cola:", data.pix.qrCode.emv);
  console.log("ID da transação:", data.id);
}

import requests

resp = requests.post(
    "https://api.diamond-payments.com/api/pix",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    json={
        "amount": 149.90,
        "customer_name": "Cliente Exemplo Martins",
        "customer_email": "[email protected]",
        "customer_phone": "11984217390",
        "customer_document": "52998224725",
        "product_name": "Plano Pro Anual",
        "postback_url": "https://meusite.com.br/api/postback",
        "metadata": {"utm": {"utm_source": "meta_ads"}},
    },
    timeout=60,
)
body = resp.json()
if body["success"]:
    print("Copia e Cola:", body["data"]["pix"]["qrCode"]["emv"])
    print("ID da transação:", body["data"]["id"])

curl -X POST "https://api.diamond-payments.com/api/pix/status" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d '{ "transaction_code": "tx_8f406f9ae5e7bb85919e" }'

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/status');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
    CURLOPT_POSTFIELDS     => json_encode(['transaction_code' => 'tx_8f406f9ae5e7bb85919e']),
]);
$status = json_decode(curl_exec($ch), true)['status'] ?? null; // pending | approved | failed
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/status", {
  method: "POST",
  headers: { "Content-Type": "application/json", "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
  body: JSON.stringify({ transaction_code: "tx_8f406f9ae5e7bb85919e" }),
});
const { status } = await res.json(); // pending | approved | failed

import requests

resp = requests.post(
    "https://api.diamond-payments.com/api/pix/status",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    json={"transaction_code": "tx_8f406f9ae5e7bb85919e"},
)
print(resp.json()["status"])  # pending | approved | failed

curl -X GET "https://api.diamond-payments.com/api/pix/transactions/tx_8f406f9ae5e7bb85919e" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA"

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/transactions/tx_8f406f9ae5e7bb85919e');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$tx = json_decode(curl_exec($ch), true);
curl_close($ch);
print_r($tx['data']);

const res = await fetch("https://api.diamond-payments.com/api/pix/transactions/tx_8f406f9ae5e7bb85919e", {
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const { data } = await res.json();
console.log(data);

import requests

resp = requests.get(
    "https://api.diamond-payments.com/api/pix/transactions/tx_8f406f9ae5e7bb85919e",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
)
print(resp.json()["data"])

curl -G "https://api.diamond-payments.com/api/pix/transactions" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d status=approved -d page=1 -d limit=10

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/transactions?status=approved&page=1&limit=10');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);
print_r($res['data']);

const res = await fetch("https://api.diamond-payments.com/api/pix/transactions?status=approved&page=1&limit=10", {
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const { data, pagination } = await res.json();
console.log(data, pagination);

import requests

resp = requests.get(
    "https://api.diamond-payments.com/api/pix/transactions",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    params={"status": "approved", "page": 1, "limit": 10},
)
print(resp.json())

curl -X POST "https://api.diamond-payments.com/api/pix/withdrawal" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d '{
    "amount": 250.00,
    "pix_key_type": "email",
    "pix_key": "[email protected]"
  }'

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/withdrawal');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
    CURLOPT_POSTFIELDS     => json_encode([
        'amount'       => 250.00,
        'pix_key_type' => 'email',
        'pix_key'      => '[email protected]',
    ]),
]);
$saque = json_decode(curl_exec($ch), true);
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/withdrawal", {
  method: "POST",
  headers: { "Content-Type": "application/json", "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
  body: JSON.stringify({
    amount: 250,
    pix_key_type: "email",
    pix_key: "[email protected]",
  }),
});
const saque = await res.json();

import requests

resp = requests.post(
    "https://api.diamond-payments.com/api/pix/withdrawal",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    json={"amount": 250.00, "pix_key_type": "email", "pix_key": "[email protected]"},
)
print(resp.json())

curl -X POST "https://api.diamond-payments.com/api/pix/withdrawal/status" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d '{ "withdrawal_id": "wd_6ad6ea5458" }'

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/withdrawal/status');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
    CURLOPT_POSTFIELDS     => json_encode(['withdrawal_id' => 'wd_6ad6ea5458']),
]);
$saque = json_decode(curl_exec($ch), true)['data'] ?? null;
curl_close($ch);
echo $saque['status']; // pending | processing | approved | rejected | failed | cancelled

const res = await fetch("https://api.diamond-payments.com/api/pix/withdrawal/status", {
  method: "POST",
  headers: { "Content-Type": "application/json", "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
  body: JSON.stringify({ withdrawal_id: "wd_6ad6ea5458" }),
});
const { data } = await res.json();
console.log(data.status); // pending | processing | approved | rejected | failed | cancelled

import requests

resp = requests.post(
    "https://api.diamond-payments.com/api/pix/withdrawal/status",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    json={"withdrawal_id": "wd_6ad6ea5458"},
)
print(resp.json()["data"]["status"])

curl -G "https://api.diamond-payments.com/api/pix/withdrawals" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d status=approved -d page=1 -d limit=10

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/withdrawals?status=approved&page=1&limit=10');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$lista = json_decode(curl_exec($ch), true);
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/withdrawals?status=approved&page=1&limit=10", {
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const { data, pagination } = await res.json();

import requests

resp = requests.get(
    "https://api.diamond-payments.com/api/pix/withdrawals",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    params={"status": "approved", "page": 1, "limit": 10},
)
print(resp.json()["pagination"])

curl "https://api.diamond-payments.com/api/pix/balance" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA"

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/balance');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$saldo = json_decode(curl_exec($ch), true)['data']['balance'] ?? null;
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/balance", {
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const { data } = await res.json();
console.log(data.balance);

import requests

resp = requests.get("https://api.diamond-payments.com/api/pix/balance", headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"})
print(resp.json()["data"]["balance"])

curl -X GET "https://api.diamond-payments.com/api/pix/webhooks/events"

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/webhooks/events');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$events = json_decode(curl_exec($ch), true)['data'];
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/webhooks/events");
const { data } = await res.json();
console.log(data);

import requests
events = requests.get("https://api.diamond-payments.com/api/pix/webhooks/events").json()["data"]
print(events)

curl -X GET "https://api.diamond-payments.com/api/pix/webhooks" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA"

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/webhooks');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$webhooks = json_decode(curl_exec($ch), true)['data'];
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/webhooks", {
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const { data } = await res.json();
console.log(data);

import requests
res = requests.get("https://api.diamond-payments.com/api/pix/webhooks", headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"})
print(res.json()["data"])

curl -X POST "https://api.diamond-payments.com/api/pix/webhooks" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d '{
    "name": "Meu Servidor de Produção",
    "endpoint": "https://api.meusite.com.br/webhooks/pix",
    "events": ["approved", "failed", "withdrawal.approved", "withdrawal.failed"],
    "is_active": true
  }'

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/webhooks');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
    CURLOPT_POSTFIELDS     => json_encode([
        'name'      => 'Meu Servidor de Produção',
        'endpoint'  => 'https://api.meusite.com.br/webhooks/pix',
        'events'    => ['approved', 'failed', 'withdrawal.approved', 'withdrawal.failed'],
        'is_active' => true,
    ]),
]);
$webhook = json_decode(curl_exec($ch), true);
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/webhooks", {
  method: "POST",
  headers: { "Content-Type": "application/json", "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
  body: JSON.stringify({
    name: "Meu Servidor de Produção",
    endpoint: "https://api.meusite.com.br/webhooks/pix",
    events: ["approved", "failed", "withdrawal.approved", "withdrawal.failed"],
    is_active: true,
  }),
});
const { data } = await res.json();
console.log("Secret gerado:", data.secret);

import requests
resp = requests.post(
    "https://api.diamond-payments.com/api/pix/webhooks",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    json={
        "name": "Meu Servidor de Produção",
        "endpoint": "https://api.meusite.com.br/webhooks/pix",
        "events": ["approved", "failed", "withdrawal.approved", "withdrawal.failed"],
        "is_active": True,
    },
)
print("Secret:", resp.json()["data"]["secret"])

curl -X GET "https://api.diamond-payments.com/api/pix/webhooks/1" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA"

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/webhooks/1');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$webhook = json_decode(curl_exec($ch), true)['data'];
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/webhooks/1", {
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const { data } = await res.json();

import requests
res = requests.get("https://api.diamond-payments.com/api/pix/webhooks/1", headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"})
print(res.json()["data"])

curl -X PUT "https://api.diamond-payments.com/api/pix/webhooks/1" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA" \
  -d '{
    "events": ["approved", "pending", "med", "chargeback"],
    "is_active": true
  }'

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/webhooks/1');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST  => 'PUT',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
    CURLOPT_POSTFIELDS     => json_encode([
        'events'    => ['approved', 'pending', 'med', 'chargeback'],
        'is_active' => true,
    ]),
]);
$webhook = json_decode(curl_exec($ch), true);
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/webhooks/1", {
  method: "PUT",
  headers: { "Content-Type": "application/json", "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
  body: JSON.stringify({
    events: ["approved", "pending", "med", "chargeback"],
    is_active: true,
  }),
});
const { data } = await res.json();

import requests
resp = requests.put(
    "https://api.diamond-payments.com/api/pix/webhooks/1",
    headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"},
    json={"events": ["approved", "pending", "med", "chargeback"], "is_active": True},
)
print(resp.json())

curl -X DELETE "https://api.diamond-payments.com/api/pix/webhooks/1" \
  -H "X-Api-Key: sk_live_SUA_CHAVE_SECRETA"

<?php
$ch = curl_init('https://api.diamond-payments.com/api/pix/webhooks/1');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST  => 'DELETE',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: sk_live_SUA_CHAVE_SECRETA'],
]);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);

const res = await fetch("https://api.diamond-payments.com/api/pix/webhooks/1", {
  method: "DELETE",
  headers: { "X-Api-Key": "sk_live_SUA_CHAVE_SECRETA" },
});
const result = await res.json();

import requests
res = requests.delete("https://api.diamond-payments.com/api/pix/webhooks/1", headers={"X-Api-Key": "sk_live_SUA_CHAVE_SECRETA"})
print(res.json())

<?php
// endpoint receptor cadastrado em Webhooks
$payload = json_decode(file_get_contents('php://input'), true);

if (!$payload || empty($payload['event'])) {
    http_response_code(400);
    exit;
}

$event = $payload['event'];

// Eventos de cobrança (order)
if (!empty($payload['order'])) {
    $code = $payload['order']['transaction_code'];
    if ($event === 'approved') {
        // Libere o pedido / produto para o cliente
    } elseif ($event === 'failed' || $event === 'expired') {
        // Cancele o pedido
    } elseif ($event === 'med' || $event === 'chargeback') {
        // Notifique seu financeiro sobre a disputa / estorno
    }
}

// Eventos de saque (withdrawal)
if (!empty($payload['withdrawal'])) {
    $wdId = $payload['withdrawal']['withdrawal_id'];
    if ($event === 'withdrawal.approved') {
        // Saque concluído no banco
    } elseif ($event === 'withdrawal.failed') {
        // Saque falhou e o valor foi devolvido ao saldo
    }
}

http_response_code(200); // responda 2xx em até 10 segundos
echo 'ok';

import express from "express";
const app = express();
app.use(express.json());

app.post("/webhook", async (req, res) => {
  const { event, order, withdrawal } = req.body ?? {};
  if (!event) return res.sendStatus(400);

  if (order) {
    if (event === "approved") {
      // await liberarPedido(order.transaction_code);
    }
  } else if (withdrawal) {
    if (event === "withdrawal.approved") {
      // Saque concluído
    }
  }

  res.sendStatus(200); // responda 2xx em até 10 segundos
});

app.listen(3000);

from flask import Flask, request

app = Flask(__name__)

@app.post("/webhook")
def webhook():
    payload = request.get_json(silent=True) or {}
    event = payload.get("event")
    if not event:
        return "", 400

    order = payload.get("order")
    if order and event == "approved":
        pass  # liberar_pedido(order["transaction_code"])

    return "ok", 200  # responda 2xx em até 10 segundos

<?php
$secret   = getenv('WEBHOOK_SECRET');            // secret whsec_... retornado na criação
$raw      = file_get_contents('php://input');    // corpo bruto, sem decodificar
$sent     = $_SERVER['HTTP_X_WEBHOOK_SIGNATURE'] ?? ($_SERVER['HTTP_X_SIGNATURE'] ?? '');
$expected = hash_hmac('sha256', $raw, $secret);

if (!hash_equals($expected, $sent)) {
    http_response_code(401);
    exit;
}
// assinatura válida: processe o evento
http_response_code(200);

import crypto from "crypto";

// express.raw preserva o corpo bruto necessário para o cálculo
app.post("/webhook", express.raw({ type: "application/json" }), (req, res) => {
  const expected = crypto
    .createHmac("sha256", process.env.WEBHOOK_SECRET)
    .update(req.body)
    .digest("hex");
  const sent = req.get("X-Webhook-Signature") || req.get("X-Signature") || "";
  const ok = sent.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(sent), Buffer.from(expected));
  if (!ok) return res.sendStatus(401);
  // assinatura válida: processe o evento
  res.sendStatus(200);
});

import hashlib, hmac, os
from flask import Flask, request, abort

app = Flask(__name__)

@app.post("/webhook")
def webhook():
    expected = hmac.new(
        os.environ["WEBHOOK_SECRET"].encode(), request.get_data(), hashlib.sha256
    ).hexdigest()
    sent = request.headers.get("X-Webhook-Signature") or request.headers.get("X-Signature") or ""
    if not hmac.compare_digest(expected, sent):
        abort(401)
    # assinatura válida: processe o evento
    return "", 200