API documentation

Overview

Base URL: https://nexcoddigital.in/api/v1/

Every service — SMS, OTP, WhatsApp, email, voice, KYC, payments, recharge, utility — is called the same way: POST /services/{CODE} with its parameters as JSON. The price comes from your wallet; if the request fails you are refunded at once.

Authentication

Create keys in your account under API keys. Send the key in the Authorization header (or X-API-Key). Keys are shown once; keep them on your server, never in an app or web page.

Authorization: Bearer nxd_live_9f2c…

Keys can be locked to your server IPs. Calls from any other IP get ip_not_allowed.

Sandbox

Keys that start with nxd_test_ run in the sandbox: parameters are checked exactly as in live, a success response is returned, no provider is called and nothing is charged. KYC is not needed for test keys. You can also try every service from the API console.

POST/services/{CODE}

Runs a service. Put its parameters at the top level of the JSON body (or inside "params"). Add an optional client_ref — your own id for the request, up to 64 characters.

curl -X POST https://nexcoddigital.in/api/v1//services/SMS_TXN \
  -H "Authorization: Bearer nxd_live_…" \
  -H "Content-Type: application/json" \
  -d '{
    "mobile": "9876543210",
    "message": "Your order 1024 is confirmed.",
    "template_id": "1707160000000000000",
    "client_ref": "order-1024"
  }'

Services with amount + fee charging (recharge, bill payment, payout) take an amount in rupees; your wallet is debited the amount plus the service fee.

GET/transactions/{REF}

Returns one request by our reference — use it to check a pending request. GET/transactions?client_ref=order-1024 finds it by your id; without a filter it lists your latest requests (limit up to 100).

GET/balance

{ "ok": true, "balance": 4821.64, "currency": "INR", "account": "NXD10024", "mode": "live" }

GET/services

Every service available to you with your price, its unit, charging type, status and parameter list.

Response

Every request answers HTTP 200 with this shape when it was processed, whether the provider succeeded or not. Check ok and status.

{
  "ok": true,
  "ref": "NXD7K2M9QH4TPX",        // our reference
  "client_ref": "order-1024",
  "service": "SMS_TXN",
  "status": "success",           // success | pending | refunded
  "mode": "live",
  "charged": 0.18,
  "balance": 4821.64,
  "provider_ref": "a1b2c3",
  "data": { },                     // service-specific fields
  "created_at": "2026-10-21T10:15:00+05:30"
}

Errors

Requests that are refused before processing return {"ok": false, "error": {"code", "message"}} with the HTTP status below.

Idempotency

Send the same client_ref again — after a timeout, say — and you get the first request's result back with "duplicate": true. It is never run or charged twice.

Webhooks

Add HTTPS endpoints under Webhooks. We POST JSON for these events:

Headers: X-Nexcod-Event, X-Nexcod-Timestamp and X-Nexcod-Signature: sha256=…, the HMAC-SHA256 of timestamp + "." + raw body with the endpoint's secret. Answer 2xx within 10 seconds; otherwise we retry after 1, 5, 30, 120 and 360 minutes.

// Node.js (Express, raw body)
const crypto = require('crypto');
const sig = crypto.createHmac('sha256', process.env.NEXCOD_WEBHOOK_SECRET)
  .update(req.get('X-Nexcod-Timestamp') + '.' + req.rawBody).digest('hex');
if ('sha256=' + sig !== req.get('X-Nexcod-Signature')) return res.sendStatus(401);

Limits

120 requests a minute per key by default (ask support to raise it). Accounts can also carry a daily spend cap. Over the limit you get HTTP 429 with Retry-After: 60.

Code samples

Python

import os, requests
r = requests.post("https://nexcoddigital.in/api/v1//services/KYC_PAN",
    headers={"Authorization": "Bearer " + os.environ["NEXCOD_KEY"]},
    json={"pan": "ABCDE1234F", "client_ref": "kyc-77"}, timeout=40)
res = r.json()
if res["ok"]: print(res["data"])

Node.js

const res = await fetch('https://nexcoddigital.in/api/v1//services/RC_MOBILE', {
  method: 'POST',
  headers: { Authorization: `Bearer ${process.env.NEXCOD_KEY}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ mobile: '9876543210', operator: 'JIO', amount: '299', client_ref: 'rc-501' }),
}).then(r => r.json());

Service catalogue

Codes and parameters. * = required. Your prices are in your account and in GET /services.

Email

KYC & Verification

Other APIs

OTP

Payments

Recharge

SMS

Utility & BBPS

Voice

WhatsApp