Clearqo API

X-Api-Key: cq_live_••••••••••••••••••••••••••••••••••••••••••••••••

curl -X POST https://clearqo.com/wp-json/clearqo/v1/invoices \
  -H "X-Api-Key: $CLEARQO_KEY" \
  -H "Content-Type: application/json" \
  -d '{"amount":"10","order_id":"1042","success_url":"https://shop.example/thanks"}'

<?php
$ch = curl_init('https://clearqo.com/wp-json/clearqo/v1/invoices');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-Api-Key: ' . getenv('CLEARQO_KEY'), 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS     => json_encode(['amount' => '10', 'order_id' => '1042']),
]);
$invoice = json_decode(curl_exec($ch), true);

header('Location: ' . $invoice['checkout_url']);

const res = await fetch('https://clearqo.com/wp-json/clearqo/v1/invoices', {
  method: 'POST',
  headers: { 'X-Api-Key': process.env.CLEARQO_KEY, 'Content-Type': 'application/json' },
  body: JSON.stringify({ amount: '10', order_id: '1042' }),
});
const invoice = await res.json();
// redirect the customer to invoice.checkout_url

import os, requests

invoice = requests.post(
    'https://clearqo.com/wp-json/clearqo/v1/invoices',
    headers={'X-Api-Key': os.environ['CLEARQO_KEY']},
    json={'amount': '10', 'order_id': '1042'},
    timeout=15,
).json()
# redirect the customer to invoice['checkout_url']

{
  "amount": "2800",
  "currency": "PKR",
  "order_id": "1042"
}

// 1 USDT = 285 PKR  →  amount: "9.83", amount_to_pay: "9.8323"

{
    "id": "inv_9f2c4e1a7b3d5c6e8f0a1b2c",
    "object": "invoice",
    "status": "pending",
    "amount": "10.00",
    "amount_to_pay": "10.0023",
    "currency": "USDT",
    "price_amount": "10",
    "price_currency": "USD",
    "rate": "1",
    "order_id": "1042",
    "description": "",
    "checkout_url": "https://clearqo.com/pay/inv_9f2c4e1a7b3d5c6e8f0a1b2c/",
    "methods": [
        {
            "type": "binance_pay",
            "value": "123456789",
            "name": "Acme Digital"
        },
        {
            "type": "usdt_trc20",
            "value": "TQ\u2026"
        },
        {
            "type": "usdt_bep20",
            "value": "0x\u2026"
        }
    ],
    "paid_amount": null,
    "paid_price_amount": null,
    "paid_method": null,
    "txid": null,
    "created_at": "2026-10-10T12:00:00+00:00",
    "expires_at": "2026-10-10T12:30:00+00:00",
    "paid_at": null
}

curl https://clearqo.com/wp-json/clearqo/v1/invoices/inv_9f2c4e1a7b3d5c6e8f0a1b2c \
  -H "X-Api-Key: $CLEARQO_KEY"

{
  "code": "clq_balance",
  "message": "Merchant balance is too low to accept payments. Please top up.",
  "data": { "status": 402 }
}

{
  "id": "evt_3b7c9d2e4f6a8b1c0d2e4f6a",
  "type": "invoice.paid",
  "created": 1760097600,
  "data": { "id": "inv_9f2c…", "status": "paid", "order_id": "1042", "paid_amount": "10.0023", "paid_price_amount": "10.0023", "…": "…" }
}

<?php
$body   = file_get_contents('php://input');
parse_str(str_replace(',', '&', $_SERVER['HTTP_X_CLEARQO_SIGNATURE'] ?? ''), $sig);
$expected = hash_hmac('sha256', ($sig['t'] ?? '') . '.' . $body, getenv('CLEARQO_WEBHOOK_SECRET'));

if (!hash_equals($expected, $sig['v1'] ?? '') || abs(time() - (int) ($sig['t'] ?? 0)) > 300) {
    http_response_code(400);
    exit;
}
$event = json_decode($body, true);
if ($event['type'] === 'invoice.paid') {
    // fulfil order $event['data']['order_id'] once, for $event['data']['paid_price_amount']
}
http_response_code(200);

const crypto = require('crypto');

app.post('/webhooks/clearqo', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = Object.fromEntries((req.get('X-Clearqo-Signature') || '').split(',').map(p => p.split('=')));
  const expected = crypto.createHmac('sha256', process.env.CLEARQO_WEBHOOK_SECRET)
    .update(sig.t + '.' + req.body).digest('hex');
  const valid = sig.v1 && sig.v1.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(sig.v1), Buffer.from(expected)) &&
    Math.abs(Date.now() / 1000 - Number(sig.t)) < 300;
  if (!valid) return res.sendStatus(400);

  const event = JSON.parse(req.body);
  if (event.type === 'invoice.paid') { /* fulfil once */ }
  res.sendStatus(200);
});

import hmac, hashlib, os, time

def verify(raw_body: bytes, header: str) -> bool:
    parts = dict(p.split('=', 1) for p in header.split(',') if '=' in p)
    expected = hmac.new(os.environ['CLEARQO_WEBHOOK_SECRET'].encode(),
                        f"{parts.get('t', '')}.".encode() + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, parts.get('v1', '')) and abs(time.time() - int(parts.get('t', 0))) < 300