API Endpoints

Base URL: https://your-domain.com/casino

All requests that require authentication must include Authorization: Bearer <token>.

Public endpoints

`GET /health`

Returns service health status. No auth required.

`GET /wallet-address`

Returns the casino treasury wallet address.

{ "address": "ABC123..." }

`GET /public/whitelabel`

Returns the platform’s public branding configuration.

{
  "title": "My Casino",
  "logoUrl": "https://...",
  "accentColor": "#3b82f6"
}

`GET /recent-bets`

Returns the public recent bets feed (last 20 bets across all users).

Player endpoints (require auth)

`POST /auth/login`

Authenticate via Sign-In-With-Solana. See Authentication.

`GET /balance`

Returns all token balances for the authenticated user.

{
  "balances": [
    { "token": "So11111...", "balance": 1000000 }
  ]
}

`POST /deposit`

Field	Type	Required	Description
`signature`	string	✓	Solana transaction signature
`token`	string	✓	SPL token mint address

`POST /withdraw`

Request a withdrawal. Debits immediately; pending admin approval.

Field	Type	Required	Description
`amount`	number	✓	Amount in base units (lamports for SOL)
`token`	string	✓	SPL token mint
`destination`	string	✓	Destination wallet address

`GET /account/transactions`

Returns ledger of deposits, withdrawals, and balance adjustments.

Query	Type	Description
`page`	number	Page number (default 1)
`limit`	number	Per page (default 20, max 100)

`POST /play`

Play a game round.

Field	Type	Required	Description
`gameType`	string	✓	Game identifier (e.g. `slots`, `crash`)
`wager`	number	✓	Wager in base units
`token`	string	✓	SPL token mint
`config`	object	—	Game-specific config

`GET /history`

Returns the user’s game history.

`GET /seed`

Returns the server seed (hashed) and current nonce for provably fair verification.

`POST /legacy/launch`

Launch a Pragmatic Play or PGSoft game via Seamless mode.

Field	Type	Required	Description
`gameCode`	string	✓	Provider game code
`userCode`	string	✓	Platform user identifier
`language`	string	—	ISO language code (default: `pt`)

Returns { "url": "https://..." } — redirect the user to this URL.

Admin endpoints (require admin role)

All admin endpoints require Authorization: Bearer <token> where the wallet has at least admin:read permission.

`GET /admin/me`

Returns the current wallet’s role, access level, and permissions.

{
  "wallet": "ABC...",
  "role": "superadmin",
  "level": 1,
  "permissions": ["admin:read", "admin:write", "..."],
  "agentCode": null
}

`GET /admin/overview`

Returns platform summary (games, transactions, balances).

`GET /admin/metrics/ggr-daily`

Returns daily GGR metrics.

Query	Description
`days`	Number of days to return (default 30)

`GET /admin/games`

Returns game history with filters.

`GET /admin/transactions`

Returns all transactions (deposits/withdrawals).

`PATCH /admin/balances/:user`

Adjust a user’s balance (requires balances:write).

`POST /admin/withdraw/approve`

Approve a pending withdrawal (requires withdraw:approve).

`POST /admin/withdraw/reject`

Reject a pending withdrawal (requires withdraw:reject).

`GET /admin/legacy/agents`

List all legacy agents (operators).

`POST /admin/legacy/agents`

Create a new agent.

`PATCH /admin/legacy/agents/:id`

Update an agent (status, RTP, site endpoint, etc.).

`DELETE /admin/legacy/agents/:id`

Delete an agent.

`GET /admin/provider-games`

List game catalog from all providers.

`PATCH /admin/provider-games/:gameCode`

Enable or disable a game.

`PATCH /admin/whitelabel`

Update whitelabel branding (requires whitelabel:write).

🔐 Authentication ⚠️ Error Codes