Gyvar docs

Gyvar API

Move value from a Bitcoin or stablecoin balance to a local destination.

The Gyvar API is a signed, server-to-server surface at https://api.gyvar.com/v1.

What you can do today

Start here

  1. Get access. Keys are self-serve in both sandbox and live, the IP allowlist is mandatory, and moving money needs one grant you have to ask for. Two minutes, and it explains every 403 you might meet on day one.
  2. Sign a request. Ed25519, four headers, one canonical string. This is the only genuinely fiddly part, and it is fiddly in the same way for everyone - read it before writing code.
  3. Run the quickstart. Create an address in sandbox and watch a webhook arrive.
  4. Read the error contract. Switch on details.code, never on message.

Two things to get right up front

Amounts. Every amount comes back twice: amount is a decimal string in the major unit, amount_minor an integer in the minor unit. Display amount. Do arithmetic on amount_minor. Parsing amount as a float is the bug that surfaces months later, on someone else's money.

Idempotency. There is no Idempotency-Key header. Where an operation needs to be safe to retry, the key is a field you already send - reference on an address. Retry a call that timed out and you get the same resource back, not a second one.

A key issued today cannot spend

Everything read-and-receive works the moment you hold a key. The endpoints under Money need two further grants - the money capability on the key, and the project opened for money over the API - and neither is sufficient alone. That is what keeps a leaked key from paying anybody. See Access.

On this page