Quickstart

curl https://txengine.bloobank.com/txengine/v1/time

{
  "time": "2026-08-05T12:00:00.000Z",
  "epochMs": 1754392800000
}

// npm install @noble/curves @noble/hashes
import { secp256k1 } from '@noble/curves/secp256k1';
import { sha256 } from '@noble/hashes/sha256';
import { randomUUID } from 'node:crypto';

const BASE_URL    = 'https://txengine.bloobank.com';   // host only — no path
const ACCESS_KEY  = process.env.BLOOBANK_ACCESS_KEY;
const PRIVATE_KEY = process.env.BLOOBANK_PRIVATE_KEY;  // 64-char hex

async function request(method, pathname, body) {
  // pathname must include the /txengine/v1 prefix — it is part of the signed string
  const rawBody   = body ? new TextEncoder().encode(JSON.stringify(body)) : new Uint8Array(0);
  const timestamp = Date.now().toString();             // single clock read
  const requestId = randomUUID();                      // fresh per attempt
  const bodyHex   = Buffer.from(sha256(rawBody)).toString('hex');

  const canonical = `${ACCESS_KEY}:${requestId}:${timestamp}:${method.toUpperCase()}:${pathname}:${bodyHex}`;
  const digest    = sha256(new TextEncoder().encode(canonical));
  const signature = Buffer.from(
    secp256k1.sign(digest, PRIVATE_KEY, { lowS: true }).toCompactRawBytes(),
  ).toString('base64');

  const res = await fetch(`${BASE_URL}${pathname}`, {
    method,
    headers: {
      'Content-Type':        'application/json',
      'X-Access-Key':        ACCESS_KEY,
      'X-Access-Timestamp':  timestamp,
      'X-Access-Request-Id': requestId,
      'X-Access-Signature':  signature,
    },
    body: body ? rawBody : undefined,
  });

  if (!res.ok) throw new Error(`HTTP ${res.status}: ${await res.text()}`);
  return res.json();
}

const wallets = await request('GET', '/txengine/v1/wallets');
console.log(wallets.items.map((w) => w.name));

const order = await request('POST', '/txengine/v1/wallets/production-main/paymentOrders', {
  direction:      'IN',
  network:        'br.gov.bcb.pix',
  idempotencyKey: 'invoice-2026-0184',
  amount:         25000,                 // minor units — BRL 250.00 in cents
  currency:       'BRL',
  instrument:     { type: 'PIX_CASH_IN_EMV_DYNAMIC', expiresIn: 86400 },
});

console.log(order.id, order.status);     // ord_..., PENDING