Web Server Setup

Your game needs a backend service to connect securely with the Bolt API. The web server is a trusted intermediary between your game client and Bolt.

Requirements

Your web server should:
  • Authenticate with Bolt: Use server-side API keys (never expose the signing secret in the client).
  • Create payment links: Call POST /v1/gaming/payment_links on behalf of the game.
  • Persist transactions: Store transaction data in your game schema.
  • Handle webhooks: Accept transaction status updates from Bolt.
  • Validate authenticity: Verify webhook signatures before fulfilling purchases.
The game requests a payment link from your web server. Your server calls POST /v1/gaming/payment_links and returns the payment_link URL to the client. See Create Payment Link for request and response details.

Reference implementation