The operational layer between crypto and your business.

curl -X POST https://kaskade.com/api/v1/payments \
  -H "Authorization: Bearer ks_live_xxx" \
  -H "Content-Type: application/json" \
  -d '{
    "priceUsd": 250,
    "payCurrency": "usdttrc20",
    "orderId": "ORDER-10428"
  }'

import crypto from "crypto";

app.post("/webhooks/kaskade", (req, res) => {
  const signature = req.headers["x-kaskade-signature"];
  const expected = crypto
    .createHmac("sha256", process.env.KASKADE_WEBHOOK_SECRET)
    .update(req.rawBody)            // the exact bytes we sent
    .digest("hex");

  if (signature !== expected) return res.status(401).end();

  const { payment } = JSON.parse(req.rawBody);
  if (payment.status === "finished") {
    // fulfil the order
  }
  res.status(200).end();
});