What's new in the Voodoo Center API

Every notable change to the Voodoo Center API and its integration surface is recorded here, newest first. The API is versioned under /api/v1; we add fields and endpoints in a backward-compatible way and call out anything you may need to act on.

Want to be notified of changes programmatically? New order outcomes always arrive on your webhook, and every field documented in the API Reference is safe to read defensively — ignore unknown fields so future additions never break your integration.

API v1 launch — orders, balance & webhooks

The Voodoo Center API is live. You can now buy digital goods — gift-card keys, top-ups and game services — directly from your own systems.

Endpoints

  • POST /api/v1/auth/token/client — exchange an ak_ API key for a short-lived (2 hour) Bearer access token.
  • GET /api/v1/account/balance — read your spendable balance.
  • POST /api/v1/orders — place an order. Charges your balance and returns 201 with status: "pending"; fulfillment runs asynchronously.
  • GET /api/v1/orders/{id} — look up the current state of one of your orders.

Order-status webhook

When an API-placed order reaches a terminal status (completed, failed or partial), we POST a signed event to your configured webhook URL. Requests carry an X-Webhook-Signature: sha256=<hex> header (HMAC-SHA256 over the raw body) and are retried up to 3 times, 60 seconds apart, on any non-200 response.