SHRU API documentation

POST /api/shru HTTP/1.1
Host: platform.example.com
Content-Type: application/json
X-Key-Id: shru_k7m2q9x4v8p3n6t1r5w0bd
X-Timestamp: 1767225600
X-Signature: e2bf80ed81ffaa94829122e0655d795c446609fadfb952c9025866d54f6b8fa5

{"action":"submit_order","service_id":1042,"input":"356789101234567"}

signable  = "POST" + "\n" + "/api/shru" + "\n" + timestamp + "\n" + body
signature = lowercase_hex( HMAC_SHA256( key = Secret, message = signable ) )

#!/usr/bin/env bash
KEY_ID="shru_your_key_id"
SECRET="your_secret"
ENDPOINT="https://platform.example.com/api/shru"

BODY='{"action":"account_info"}'
TS=$(date +%s)
SIG=$(printf 'POST\n/api/shru\n%s\n%s' "$TS" "$BODY" | openssl dgst -sha256 -hmac "$SECRET" | sed 's/^.*= //')

curl -s -X POST "$ENDPOINT" \
  -H "Content-Type: application/json" \
  -H "X-Key-Id: $KEY_ID" \
  -H "X-Timestamp: $TS" \
  -H "X-Signature: $SIG" \
  --data-raw "$BODY"

<?php
const SHRU_KEY_ID = 'shru_your_key_id';
const SHRU_SECRET = 'your_secret';
const SHRU_ENDPOINT = 'https://platform.example.com/api/shru';

function shru(string $action, array $params = []): array
{
    $body = json_encode(['action' => $action] + $params);
    $ts = (string) time();
    $sig = hash_hmac('sha256', "POST\n/api/shru\n{$ts}\n{$body}", SHRU_SECRET);

    $ch = curl_init(SHRU_ENDPOINT);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_POSTFIELDS => $body,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_FOLLOWLOCATION => false,
        CURLOPT_TIMEOUT => 60,
        CURLOPT_HTTPHEADER => [
            'Content-Type: application/json',
            'X-Key-Id: ' . SHRU_KEY_ID,
            'X-Timestamp: ' . $ts,
            'X-Signature: ' . $sig,
        ],
    ]);
    $raw = curl_exec($ch);

    $reply = json_decode((string) $raw, true);
    return is_array($reply) ? $reply : ['success' => false, 'message' => 'No reply from the server'];
}

print_r(shru('account_info'));
print_r(shru('submit_order', ['service_id' => 1042, 'input' => '356789101234567']));

// Node.js 18 or newer, saved as shru.mjs
import crypto from 'node:crypto';

const KEY_ID = 'shru_your_key_id';
const SECRET = 'your_secret';
const ENDPOINT = 'https://platform.example.com/api/shru';

async function shru(action, params = {}) {
  const body = JSON.stringify({ action, ...params });
  const ts = Math.floor(Date.now() / 1000).toString();
  const sig = crypto
    .createHmac('sha256', SECRET)
    .update(`POST\n/api/shru\n${ts}\n${body}`)
    .digest('hex');

  const res = await fetch(ENDPOINT, {
    method: 'POST',
    redirect: 'error',
    headers: {
      'Content-Type': 'application/json',
      'X-Key-Id': KEY_ID,
      'X-Timestamp': ts,
      'X-Signature': sig,
    },
    body,
  });
  return res.json();
}

console.log(await shru('account_info'));
console.log(await shru('submit_order', { service_id: 1042, input: '356789101234567' }));

import hashlib, hmac, json, time, urllib.error, urllib.request

KEY_ID = "shru_your_key_id"
SECRET = "your_secret"
ENDPOINT = "https://platform.example.com/api/shru"

def shru(action, **params):
    body = json.dumps({"action": action, **params}, separators=(",", ":")).encode()
    ts = str(int(time.time()))
    signable = b"POST\n/api/shru\n" + ts.encode() + b"\n" + body
    sig = hmac.new(SECRET.encode(), signable, hashlib.sha256).hexdigest()
    req = urllib.request.Request(ENDPOINT, data=body, method="POST", headers={
        "Content-Type": "application/json",
        "X-Key-Id": KEY_ID,
        "X-Timestamp": ts,
        "X-Signature": sig,
    })
    try:
        with urllib.request.urlopen(req, timeout=60) as res:
            return json.loads(res.read())
    except urllib.error.HTTPError as err:
        return json.loads(err.read())

print(shru("account_info"))
print(shru("submit_order", service_id=1042, input="356789101234567"))

{
  "action": "sync"
}

{
  "success": true,
  "balance": 125.5,
  "currency": "USD",
  "services": [
    {
      "id": 1042,
      "name": "iPhone Carrier + Find My Check",
      "group": "Apple Checks",
      "type": "fixed",
      "price": 0.12,
      "delivery": "Instant",
      "input_label": "IMEI",
      "input_required": true,
      "quantity": null,
      "bulk": true,
      "fields": []
    },
    {
      "id": 2210,
      "name": "Samsung Network Unlock - All Models",
      "group": "Samsung Unlock",
      "type": "fixed",
      "price": 4.5,
      "delivery": "1-24 Hours",
      "input_label": "IMEI",
      "input_required": true,
      "quantity": null,
      "bulk": true,
      "fields": [
        {
          "label": "Model",
          "key": "Model",
          "type": "input",
          "required": true
        },
        {
          "label": "Network",
          "key": "Network",
          "type": "input",
          "required": false
        }
      ]
    },
    {
      "id": 3105,
      "name": "Tool Credits",
      "group": "Tool Credits",
      "type": "quantity",
      "price": 0.9,
      "delivery": "Instant",
      "input_label": "Username",
      "input_required": true,
      "quantity": {
        "min": 1,
        "max": 500
      },
      "bulk": false,
      "fields": []
    },
    {
      "id": 3120,
      "name": "Tool Credits - Pack of 10",
      "group": "Tool Credits",
      "type": "quantity",
      "price": 0.85,
      "delivery": "Instant",
      "input_label": "Username",
      "input_required": true,
      "quantity": {
        "min": 10,
        "max": 10
      },
      "bulk": false,
      "fields": []
    },
    {
      "id": 4001,
      "name": "Gift Code $10",
      "group": "Digital Codes",
      "type": "fixed",
      "price": 9.2,
      "delivery": "Instant",
      "input_label": null,
      "input_required": false,
      "quantity": null,
      "bulk": false,
      "fields": []
    },
    {
      "id": 5150,
      "name": "Unlock Tool Rental - 6 Hours",
      "group": "Tool Rentals",
      "type": "fixed",
      "price": 2.5,
      "delivery": "Instant",
      "input_label": null,
      "input_required": false,
      "quantity": null,
      "bulk": false,
      "fields": []
    }
  ]
}

{
  "action": "check_status",
  "order_id": 58210
}

composer require shrucloud/php-sdk

<?php
use ShruCloud\Client;
use ShruCloud\ShruException;

$client = new Client('https://platform.example.com', 'shru_your_key_id', 'your_secret');

try {
    $services = $client->syncServices();
    $order = $client->placeOrder(1042, '356789101234567');
    $status = $client->checkStatus($order['order_id']);
} catch (ShruException $e) {
    echo $e->getMessage();
}

SHRU API 1.0 - quick reference

Endpoint      POST https://{platform domain}/api/shru  (HTTPS only, JSON body, one action per request)
Headers       Content-Type: application/json
              X-Key-Id: {Key ID}
              X-Timestamp: {Unix time in seconds, within 5 minutes of the server}
              X-Signature: lowercase hex HMAC-SHA256(Secret, "POST\n/api/shru\n{timestamp}\n{exact body}")
Replies       {"success": true, ...} or {"success": false, "message": "..."}
HTTP codes    200 ok | 400 refused (see message) | 401 authentication | 403 IP not allowed
              405 not POST | 409 same signed request sent twice | 503 maintenance

account_info  {"action":"account_info"}
              -> balance, currency, email
sync          {"action":"sync"}
              -> balance, currency, services[]: id, name, group, type (fixed|quantity), price,
                 delivery, input_label (null = no input), input_required,
                 quantity {min,max} or null, bulk, fields[] {label, key, type, required}
submit_order  {"action":"submit_order","service_id":1042,"input":"356789101234567"}
              optional: "quantity": 25 (quantity services), "fields": {"<key>": "<value>"}
              -> order_id, status (queued, or completed for instant delivery)
check_status  {"action":"check_status","order_id":58210}
              -> order_id, status (queued|processing|completed|rejected|refunded), reply (plain text)

Rules         input up to 255 characters, each field value up to 1000 characters
              quantity: whole number within min-max; left out = min; min = max means that amount
              bulk: one submit_order per entry
              the same order (with input or fields) sent again while the first is still queued returns the first
              order_id with no second charge; instant delivery orders are not matched
              poll unfinished orders every 30-60 seconds; sync about every 15 minutes
              a service missing from sync cannot be ordered ("Service not found")

Test vector   Secret     9f2d6c1e8b4a7d3f5e0c2b9a6d8f1e4c7b3a5d9e2f6c8b1a4d7e0f3c6b9a2d5e8f1c4b7a0d3e6f9c2b5a8d1e4f7c0b3a6d9e2f5c8b1a4d7e0f3c6b9a2d5e8f1c
              Timestamp  1767225600
              Body       {"action":"submit_order","service_id":1042,"input":"356789101234567"}
              Signature  e2bf80ed81ffaa94829122e0655d795c446609fadfb952c9025866d54f6b8fa5