All endpoints in the XMRGlobal API require authentication using a Bearer Token. This token must be included in the
Authorizationheader of each HTTP request as follows:Authorization: Bearer <your_token_here>To access protected resources, users must first authenticate (typically via login or API key exchange) and obtain a token. This token:
- is unique to each user session,
- must be securely stored on the client side,
- is required for all POST, PUT, DELETE, and most GET requests.
Requests made without a valid token will return a 401 Unauthorized error.
Requested an API key
this collection provides a set of endpoints for managing advertisements within the XMRGlobal API. It allows clients to:
- Retrieve all available ads `GET /api/ads`
- Retrieve details of a specific ad by token `GET /api/ad/:token`
- Create a new ad `POST /api/ad/new`
- Update an existing ad `PUT /api/ad/update/:token`
Each request requires a valid bearer token for authentication and communicates using JSON. The endpoints are primarily designed for creating and managing cryptocurrency buy/sell listings with various conditions, currencies, and payment methods.
Retrieve your ads currently online or awaiting approval
Retrieve a specific ad from its token
Update an ad, depending on your level on the site you may not have to wait for approval
{
"margin": 5,
"maxamount": 1.5,
"totalamount": 2.0,
"payment_info": "Cash deposit details here",
"payment_detail": "Account xyz",
"condition": "Only verified users",
"currency": "EUR",
"country": "FR",
"payment_method": "CASH_DEPOSITS",
"private": 0,
"minamount": 0.1
}Adding an ad, depending on your level on the site you may not have to wait for approval
{
"type": "buy",
"margin": 5,
"maxamount": 2,
"totalamount": 5,
"payment_info": "Detail payment info here",
"payment_detail": "Ref #1234",
"condition": "Serious seller only",
"currency": "USD",
"country": "US",
"private": 0,
"minamount": 0.1,
"payment_method": "CASH_DEPOSITS"
}this collection provides a set of endpoints for managing disputes within the XMRGlobal API. It allows users to:
- Open a dispute for a trade or transaction `POST /api/dispute/new`
- View the details of an existing dispute `GET /api/dispute/:token`
- Submit a message or evidence to an active dispute `POST /api/dispute/message`
- List all disputes associated with the authenticated user `GET /api/disputes`
Each request requires a valid bearer token for authentication and communicates using JSON.
These endpoints are intended to help users resolve conflicts securely and transparently through the platform's dispute resolution system.
Allows you to recover all the disputes you have opened.
Allows you to obtain the details of the dispute, as well as related messages.
Allows you to open a dispute related to a trade, which has the correct status allowing it, a trade with an open dispute cannot be finalized.
{
"trade_request_token": "< your_trade_request_token >",
"message": "This is the reason for opening the dispute. It should be clear and at least 100 characters long. zdzd"
}Allows you to send a message in the dispute as long as you are linked to it by the disputed trade.
{
"message": "This is a message related to the dispute. Please review it carefully."
}Allows the one who opened the dispute to indicate the dispute is resolved.
Allows the person who opened the dispute to indicate that the dispute is not resolved, going to the administrator.
this collection includes all necessary endpoints to interact with the secure messaging system of the XMRGlobal platform. It enables authenticated users to:
- Start a new encrypted conversation `POST /api/messenger/start`
- Send a PGP-encrypted message in a conversation `POST /api/message/send/:uuid`
- Retrieve a specific message's content `GET /api/message/:uuid`
- List all active message threads for the authenticated user `GET /api/messages`
All messages leverage manual PGP encryption to ensure end-to-end confidentiality. This collection is designed for seamless integration with encrypted trade communication workflows.
Send a message with your token. Please note that only "manual" sending is allowed, so please convert your message to PGP using the partner's key.
{
"type_encryption": "manual",
"message": "-----BEGIN PGP MESSAGE-----\n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\nokLT+A==\n=A49F\n-----END PGP MESSAGE-----"
}Create a conversation with a partner. Please note that only "manual" sending is allowed, so please convert your message to PGP using the partner's key.
{
"type_encryption": "manual",
"user": "buyer01",
"message": "-----BEGIN PGP MESSAGE-----\n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\nokLT+A==\n=A49F\n-----END PGP MESSAGE-----"
}Get all messages in a conversation via its token.
Get all the conversations.
this collection contains a single endpoint designed to manage PGP key updates for users on the XMRGlobal platform.
- `POST /api/pgp/update`: Allows authenticated users to update their PGP public key.
This endpoint is essential for maintaining secure, encrypted communication between platform participants. All requests require a valid bearer token and must include the new PGP public key in the request body.
Update your PGP key, be careful it must be in the correct format before being sent to avoid any errors
{
"new_pgp": "-----BEGIN PGP PUBLIC KEY BLOCK----- mDMEZ5+T9BYJKwYBBAHaRw8BAQdAtuCIF1Y9vpu853XOqMk98MXpiJkRCVE602h2 TQOuy2e0DHRlc3RPdGhlclJzYYiZBBMWCgBBFiEESh5tROyF6AygOiIYNvd3JW4h Nc4FAmefk/QCGwMFCQWjVrwFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQ Nvd3JW4hNc7RZAEAhXDUTuDG5wY8LAxFgtAdaAQDEuFpJ2lptEdwMk3QYtABALOw 6c0bab1PclGeqOFfiByst6k/Uta7BuABJ/0VMhcPuDgEZ5+T9BIKKwYBBAGXVQEF AQEHQAvNyasc/rAMkMh1CS+govedBRaVB4+mqeSGilUMtcFEAwEIB4h+BBgWCgAm FiEESh5tROyF6AygOiIYNvd3JW4hNc4FAmefk/QCGwwFCQWjVrwACgkQNvd3JW4h Nc5DAAEAkaSHOrKLtqHW+o2Npy99qfbbsGTmkdFBOT/wikzAoI4BAORDqf2Tf+Hg b8pGVfJHKW3+LEZnREV1V1qaXsV+sr0C =LQx+ -----END PGP PUBLIC KEY BLOCK-----"
}this collection provides endpoints for managing user profile and communication settings on the XMRGlobal platform. It includes functionalities to:
- Set the user's Signal number `PUT /api/settings/signal`
- Set the Jabber email address `PUT /api/settings/jabber`
- Enable or disable vacation mode `PUT /api/settings/vacation`
- Update the public profile description `PUT /api/settings/description/update`
- Request an account level upgrade `POST /api/settings/level/request`
All endpoints require authentication via a bearer token and communicate using JSON. These settings enhance user personalization, availability, and privacy preferences within the platform.
Update or add a Signal number for notifications
{
"signal_number": "+33612345678"
}Update or add a Jabber mail for notifications
{
"jabber_mail": "[email protected]"
}Enabling and disabling vacation mode
{
"vacation": 0
}Update or add a description to your profile
{
"small_desc": "I am an experienced crypto trader, passionate about privacy and security."
}Send a request to increase your level
{
"level": 2
}this collection offers all necessary endpoints for interacting with the support ticket system of the XMRGlobal platform. Authenticated users can:
- Retrieve the list of all their support tickets `GET /api/supports`
- Get detailed information for a specific support ticket `GET /api/support/:uuid`
- Create a new support ticket `POST /api/support/ticket/create`
- Send a message in response to an existing support ticket `POST /api/support/send/message/:uuid`
All endpoints require authentication and utilize JSON for request and response formats. This collection is ideal for integrating customer support interactions into automated workflows or admin dashboards.
Get all my current tickets
Get ticket information via its token
Create a ticket
{
"subject": "Problème de transaction XMR",
"message": "Bonjour, j’ai un souci avec ma transaction, elle reste bloquée à l’étape de confirmation."
}Send a message in a ticket via its token
{
"message": "This is a test message sent via Postman."
}this collection contains a utility endpoint for encrypting messages using a provided PGP public key on the XMRGlobal platform.
- `POST /api/pgp/encrypt/message`: Encrypts a plaintext message with the recipient's PGP public key.
The endpoint requires authentication via bearer token and accepts JSON input. This tool is essential for preparing secure, encrypted communications prior to sending messages within the platform.
Tools to encrypt any message using the recipient's PGP key. Important note: Please provide the correct PGP format, or it will be rejected by the system.
{
"message": "Hello, this is a test message to encrypt.",
"pgp_receiver": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n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\nb8pGVfJHKW3+LEZnREV1V1qaXsV+sr0C\n=LQx+\n-----END PGP PUBLIC KEY BLOCK-----"
}this collection provides a full suite of endpoints to manage peer-to-peer trades on the XMRToCash platform. It enables users to:
- Initiate a trade based on an advertisement `POST /api/trade/start/:token`
- Retrieve details of a specific trade `GET /api/trade/show/:token`
- View all trades related to the authenticated user `GET /api/trades`
- Send PGP-encrypted messages within the trade context `POST /api/trade/message/send/:token`
- Define XMR receiving method and address `PUT /api/trade/receive/xmr/:token`
- Update trade status to “I have paid” `PUT /api/trade/paid/:token`
- Trigger “Pay Now” status `PUT /api/trade/pay/now/:token`
- Confirm receipt of funds or delivery `PUT /api/trade/new/step/:token`
- Submit post-trade feedback `POST /api/trade/feedback/:token`
- Cancel a trade in progress `PUT /api/trade/cancel/:token`
Each step follows the trade's lifecycle, supporting buyer/seller interactions, encrypted messaging, and reputation feedback. Authentication is required via bearer token, and JSON is used for data exchange.
Retrieves full details of an existing trade, including balance, status, conversation and other important information.
Retrieves all trades with all status
Allows you to start a trade
{
"amount": 1.2
}Send a message in the trade to the partner
{
"type_encryption": "manual",
"message": "-----BEGIN PGP MESSAGE-----\n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\nokLT+A==\n=A49F\n-----END PGP MESSAGE-----"
}Allows you to determine where you want to receive your moneros Only 2 choose : \- internal \- External
{
"receive_xmr": "internal",
"receive_addr_xmr": ""
}Enables 'Pay Now' status for a pending crypto trade. The trade token is required in the URL. Only available for crypto trade
Endpoint to notify the 'I Have Paid' status of a user (partner 1 or partner2) for a given trade request.
Confirms receipt of payment or sending of XMR depending on the trade type.
Allows you to send a review on the partner, depending on the status of the trade
{
"rating": 5,
"message": "Very smooth trade, thank you!"
}Allows you to cancel a trade after 90 minutes, only if the other partner does not validate the trade.
this collection provides essential endpoints to retrieve user-related data from the XMRGlobal platform. Authenticated users can:
- Fetch their own user profile and account details `GET /api/user`
- Retrieve a public profile of any user by username `GET /api/user/{username}`
All requests must be authenticated with a valid bearer token. This collection is useful for accessing identity-related data in trading, messaging, and support workflows.
Get all the information about my XMRGlobal account
Get all public information for a specific user.
this collection provides a complete set of endpoints for managing wallet operations on the XMRGlobal platform. Authenticated users can:
- Retrieve wallet balance information `GET /api/wallet/balance`
- View wallet details including addresses `GET /api/wallet/info`
- Fetch deposit history `GET /api/wallet/deposit`
- Create a withdrawal request `POST /api/wallet/withdrawal/request`
- Retrieve withdrawal history `GET /api/wallet/withdrawal`
All endpoints require bearer token authentication and support JSON format. This collection is essential for users managing Monero funds and transaction history within the platform.
Allows you to send a request to withdraw from the desired amount which is available in your wallet.
{
"amount": 0.5,
"address": "84jCa8bs9QwHrCQ5SK6381BvpnFob95G15MyWqRrqiAf1Qsh4gKAjfNgfecWKJVxqTcUDwx9D1q96YSLqRx34H7aMN2ChyH"
}Allows you to see the amount you in your wallet.
Allows you to make up for all your deposits on your account.
Allows you to have all information about your wallet
Allows you to have a complete list of your withdrawal requests made or in progress.