Gift cards e recargas de jogos com preço de lojista, em um painel ou via API

# 1) Check your balance and tier
curl https://api.scarabpay.com/api/gift-merchants/v1/me \
  -H "Authorization: Bearer $SCARABPAY_KEY"

# 2) Buy a game top-up (same reference = never charged twice)
curl -X POST https://api.scarabpay.com/api/gift-merchants/v1/orders \
  -H "Authorization: Bearer $SCARABPAY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"product_id": 7016, "reference": "INV-10045",
       "player_id": "5123456789", "expected_price": "0.84"}'

# 3) Get the codes of an order
curl https://api.scarabpay.com/api/gift-merchants/v1/orders/INV-10045 \
  -H "Authorization: Bearer $SCARABPAY_KEY"

$ch = curl_init('https://api.scarabpay.com/api/gift-merchants/v1/orders');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . getenv('SCARABPAY_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'product_id' => 7016,
        'reference'  => 'INV-10045',
        'player_id'  => '5123456789',
    ]),
]);
$order = json_decode(curl_exec($ch), true)['data'];
echo $order['status']; // completed

const res = await fetch('https://api.scarabpay.com/api/gift-merchants/v1/orders', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.SCARABPAY_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ product_id: 7016, reference: 'INV-10045', player_id: '5123456789' }),
});
const { data } = await res.json();
console.log(data.status); // completed

import os, requests

r = requests.post(
    "https://api.scarabpay.com/api/gift-merchants/v1/orders",
    headers={"Authorization": f"Bearer {os.environ['SCARABPAY_KEY']}"},
    json={"product_id": 7016, "reference": "INV-10045", "player_id": "5123456789"},
    timeout=30,
)
order = r.json()["data"]
print(order["status"])  # completed