Shubdx Integration Guide

X-API-Key: Provided by the Shubdx

{ "error": { "code": 401, "message": "Invalid or missing API key" } }

curl -s https://api74658.top/api/v1/games \
  -H "X-API-Key: <YOUR_API_KEY>"

curl -s "https://api74658.top/api/v1/games?category=slots&per_page=2" \
  -H "X-API-Key: <YOUR_API_KEY>"

{
  "data": [
    {
      "id": "gm_4c27e7a7f3c75086a20e",
      "slug": "crazymonkey",
      "name": "Crazy Monkey",
      "studio": "igrosoft",
      "category": "slots",
      "is_active": true,
      "platforms": {
        "desktop": true,
        "mobile": true
      },
      "thumbnail_url": "https://api74658.top/images/igrosoft/528-326/crazymonkey"
    }
  ],
  "meta": { "total": 243, "page": 1, "per_page": 2, "total_pages": 122 }
}

curl -s https://api74658.top/api/v1/games/crazymonkey \
  -H "X-API-Key: <YOUR_API_KEY>"

curl -s -X POST https://api74658.top/api/v1/sessions \
  -H "X-API-Key: <YOUR_API_KEY>" \
  -H "Content-Type: application/json" \
  -d '{
    "player_id": "user_12345",
    "game_slug": "crazymonkey",
    "studio": "igrosoft",
    "currency": "EUR",
    "balance": 150000,
    "language": "en",
    "device": "desktop",
    "return_url": "https://yourcasino.com/lobby"
  }'

{
  "session_id": "gs_01j9x7p3session000",
  "launch_url": "https://api74658.top/play/gs_01j9x7p3session000",
  "expires_at": "2026-06-06T18:22:01Z"
}

{
  "launch_url": "https://api74658.top/demo/2f1c9a8b7d6e5f4a",
  "expires_at": "2026-06-06T18:22:01Z"
}

POST {your_webhook_url}/session/verify
POST {your_webhook_url}/balance
POST {your_webhook_url}/bet/create
POST {your_webhook_url}/bet/win
POST {your_webhook_url}/trx/cancel
POST {your_webhook_url}/trx/complete
POST {your_webhook_url}/freerounds/start
POST {your_webhook_url}/freerounds/spin
POST {your_webhook_url}/freerounds/complete

{
  "id": "wh_01j9z3a8delivery00",
  "occurred_at": "2026-06-06T14:25:10.412Z",
  "session_id": "gs_01j9x7p3session000",
  "data": { "...": "route-specific fields" }
}

import hmac
import hashlib

def verify_webhook(raw_body: bytes, header: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(
        secret.encode(), raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, header)

const crypto = require("crypto");

function verifyWebhook(rawBody, header, secret) {
    const expected = "sha256=" + crypto
        .createHmac("sha256", secret)
        .update(rawBody)
        .digest("hex");
    return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(header));
}

function verifyWebhook(string $rawBody, string $header, string $secret): bool {
    $expected = "sha256=" . hash_hmac("sha256", $rawBody, $secret);
    return hash_equals($expected, $header);
}

{ "player_id": "user_12345", "currency": "EUR", "game_slug": "crazymonkey" }

{ "player_id": "user_12345", "player_group": "vip", "balance": 150000 }

{ "player_id": "user_12345", "currency": "EUR", "game_slug": "crazymonkey" }

{ "balance": 149500, "currency": "EUR" }

{ "transaction_id": "txn_01j9y2k5bet000000", "player_id": "user_12345", "amount": 500, "currency": "EUR" }

{ "balance": 149500 }

{ "error": "insufficient_funds" }

{ "transaction_id": "txn_01j9y9w4payout000", "player_id": "user_12345", "amount": 1200, "currency": "EUR" }

{ "balance": 150700 }

{ "transaction_id": "txn_01j9y2k5bet000000", "original_type": "bet", "amount": 500, "currency": "EUR" }

{}

{ "transaction_id": "txn_01j9y9w4payout000", "original_type": "payout", "amount": 1200, "currency": "EUR" }

{}

curl -s -X POST https://api74658.top/api/v1/sessions \
  -H "X-API-Key: <YOUR_API_KEY>" \
  -H "Content-Type: application/json" \
  -d '{
    "player_id": "user_12345",
    "game_slug": "crazymonkey",
    "studio": "Pragmatic Play",
    "currency": "EUR",
    "balance": 150000,
    "freespins_id": "promo_welcome_42"
  }'

{ "freespins_id": "promo_welcome_42", "player_id": "user_12345", "game_slug": "crazymonkey", "currency": "EUR" }

{ "total_spins": 20, "bet_level": 1, "coin_value": 100 }

{ "freespins_id": "promo_welcome_42", "spin_number": 7, "spin_payout": 250, "total_payout": 1750 }

{}

{ "freespins_id": "promo_welcome_42", "player_id": "user_12345", "total_payout": 4750, "currency": "EUR" }

{ "balance": 154750 }

{
  "transaction_id": "txn_01j9y2k5bet000000",
  "type": "bet",
  "amount": 500,
  "currency": "EUR",
  "status": "completed",
  "balance_after": 149500,
  "created_at": "2026-06-06T14:25:10Z"
}

{
  "freespins_id": "fs_01j9z8c2promo0000",
  "status": "completed",
  "total_spins": 20,
  "spins_completed": 20,
  "last_spin_payout": 500,
  "total_payout": 4750,
  "currency": "EUR",
  "created_at": "2026-06-06T14:30:00Z",
  "completed_at": "2026-06-06T14:33:12Z"
}

HTTP/1.1 429 Too Many Requests
Retry-After: 60

{ "error": { "code": 429, "message": "Rate limit exceeded" } }

{ "error": { "code": 404, "message": "Game not found" } }

import hmac
import hashlib
from fastapi import FastAPI, Request, Response

app = FastAPI()
WEBHOOK_SECRET = "<your_webhook_signing_secret>"


def verify_signature(raw_body: bytes, header: str) -> bool:
    expected = "sha256=" + hmac.new(
        WEBHOOK_SECRET.encode(), raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, header or "")


async def verified(request: Request):
    raw = await request.body()
    if not verify_signature(raw, request.headers.get("X-Webhook-Signature", "")):
        raise HTTPException(status_code=401)
    return (await request.json())["data"]


@app.post("/Your_slots_folder/session/verify")
async def session_verify(request: Request):
    data = await verified(request)
    player = db.get_player(data["player_id"])
    if not player:
        return Response(status_code=404)
    return {"player_id": player.id, "player_group": player.group, "balance": player.balance_minor}

@app.post("/Your_slots_folder/balance")
async def balance(request: Request):
    data = await verified(request)
    balance = db.get_balance(data["player_id"], data["currency"])
    return {"balance": balance, "currency": data["currency"]}

@app.post("/Your_slots_folder/bet/create")
async def bet_create(request: Request):
    data = await verified(request)
    txn_id = data["transaction_id"]
    if db.transaction_exists(txn_id):
        return {"balance": db.get_balance(data["player_id"], data["currency"])}
    if db.get_balance(data["player_id"], data["currency"]) < data["amount"]:
        return Response(
            status_code=402,
            content='{"error":"insufficient_funds"}',
            media_type="application/json",
        )
    return {"balance": db.debit(data["player_id"], data["amount"], txn_id)}

@app.post("/Your_slots_folder/bet/win")
async def bet_win(request: Request):
    data = await verified(request)
    txn_id = data["transaction_id"]
    if db.transaction_exists(txn_id):
        return {"balance": db.get_balance(data["player_id"], data["currency"])}
    return {"balance": db.credit(data["player_id"], data["amount"], txn_id)}

@app.post("/Your_slots_folder/trx/cancel")
async def trx_cancel(request: Request):
    data = await verified(request)
    db.maybe_refund(data["transaction_id"], data["amount"])
    return {}

@app.post("/Your_slots_folder/trx/complete")
async def trx_complete(request: Request):
    data = await verified(request)
    db.ensure_credited(data["transaction_id"], data["amount"])
    return {}

@app.post("/Your_slots_folder/freerounds/start")
async def freerounds_start(request: Request):
    data = await verified(request)
    campaign = db.get_campaign(data["freespins_id"])
    if not campaign or campaign.used:
        return Response(status_code=409)
    return {"total_spins": campaign.total_spins, "bet_level": campaign.bet_level, "coin_value": campaign.coin_value}

@app.post("/Your_slots_folder/freerounds/spin")
async def freerounds_spin(request: Request):
    await verified(request)
    return {}

@app.post("/Your_slots_folder/freerounds/complete")
async def freerounds_complete(request: Request):
    data = await verified(request)
    if db.campaign_credited(data["freespins_id"]):
        return {"balance": db.get_balance(data["player_id"], data["currency"])}
    return {"balance": db.credit_campaign(data["player_id"], data["total_payout"], data["freespins_id"])}

import httpx

SHUBDX_API_KEY = "<your_api_key>"
SHUBDX_BASE_URL = "https://api74658.top"


def launch_game_session(player_id: str, game_slug: str, studio: str,
                         currency: str, balance_minor: int, language: str = "en",
                         device: str = "desktop", return_url: str | None = None) -> dict:
    """Returns { session_id, launch_url, expires_at }."""
    resp = httpx.post(
        f"{SHUBDX_BASE_URL}/api/v1/sessions",
        headers={"X-API-Key": SHUBDX_API_KEY},
        json={
            "player_id": player_id,
            "game_slug": game_slug,
            "studio": studio,
            "currency": currency,
            "balance": balance_minor,
            "language": language,
            "device": device,
            **({"return_url": return_url} if return_url else {}),
        },
        timeout=10,
    )
    resp.raise_for_status()
    return resp.json()