# ChainPay

> ChainPay is a cryptocurrency payment gateway with hosted checkout, blockchain monitoring, signed webhooks, and direct merchant settlement.

## Agent discovery

- Base URL: https://chainpay.pro/api/v1
- OpenAPI 3.1: https://chainpay.pro/openapi.json
- Human docs: https://chainpay.pro/docs
- MCP package: chainpay-mcp
- Authentication: Authorization: Bearer sk_live_... or sk_test_...

## Safety rules

- Never place API keys in URLs, source code, logs, or chat messages.
- Use an app-scoped, expiring key whenever possible.
- Read-only agents should receive only orders:read.
- Every create-order call must include a unique Idempotency-Key.
- Show the amount, currency, chain, externalId, and environment before creating a live order.
- Do not modify wallets, rotate secrets, or trigger settlement unless the user explicitly uses the ChainPay dashboard.
- Never create a fulfillment receipt from an agent. Only the merchant server may sign it after its local order is durably completed.

## Common operations

- POST /orders — create an order (orders:write; Idempotency-Key required)
- GET /orders — list orders (orders:read)
- GET /orders/{id} — inspect an order (orders:read)
- GET /rates — public exchange rates
- POST /sandbox/simulate-payment — simulate a test order with sk_test_ key
- POST /fulfillment-receipts — merchant-server HMAC callback; not an Agent operation