Quickstart

npm install @getbagsapp/sdk

pip install requests

import { Bag } from "@getbagsapp/sdk";

// Initialize the client with your test API key
const bag = new Bag({
  apiKey: process.env.BAG_API_KEY!,
});

async function main() {
  // Create a payment link for a $29.99 product on Base Sepolia (testnet)
  const link = await bag.paymentLinks.create({
    name: "Pro Plan",           // Display name shown on the checkout page
    amount: 29.99,              // Price in USD
    network: "base_sepolia",    // Testnet network — no real money moves
  });

  console.log("Payment link created:");
  console.log(`  ID:     ${link._id}`);
  console.log(`  Name:   ${link.name}`);
  console.log(`  Amount: $${link.amount} ${link.currency}`);
  console.log(`  Token:  ${link.token}`);
  console.log(`  Active: ${link.active}`);
  console.log(`  URL:    https://justusebag.xyz/pay/${link._id}`);
}

main().catch(console.error);

npx tsx create-link.ts

import os
import requests

API_KEY = os.environ["BAG_API_KEY"]
BASE_URL = "https://justusebag.xyz"

# Create a payment link for a $29.99 product on Base Sepolia (testnet)
response = requests.post(
    f"{BASE_URL}/api/payment-links",
    headers={
        "Authorization": f"Bearer {API_KEY}",
        "Content-Type": "application/json",
    },
    json={
        "name": "Pro Plan",           # Display name shown on the checkout page
        "amount": 29.99,              # Price in USD
        "network": "base_sepolia",    # Testnet network — no real money moves
    },
)

result = response.json()

if result["status"] == "success":
    link = result["data"]
    print("Payment link created:")
    print(f"  ID:     {link['_id']}")
    print(f"  Name:   {link['name']}")
    print(f"  Amount: ${link['amount']} {link['currency']}")
    print(f"  Token:  {link['token']}")
    print(f"  Active: {link['active']}")
    print(f"  URL:    https://justusebag.xyz/pay/{link['_id']}")
else:
    print(f"Error: {result.get('message', 'Unknown error')}")

python create_link.py

import express from "express";
import crypto from "crypto";

const app = express();
const WEBHOOK_SECRET = process.env.BAG_WEBHOOK_SECRET!;

app.post(
  "/webhooks/bag",
  express.raw({ type: "application/json" }),
  (req, res) => {
    const signature = req.headers["x-webhook-signature"] as string;
    const event = req.headers["x-webhook-event"] as string;
    const rawBody = req.body as Buffer;

    // Verify the HMAC-SHA256 signature against your webhook secret
    const expected = crypto
      .createHmac("sha256", WEBHOOK_SECRET)
      .update(rawBody)
      .digest("hex");

    if (
      !signature ||
      !crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature))
    ) {
      console.error("Invalid webhook signature — rejecting request");
      res.status(401).json({ error: "Invalid signature" });
      return;
    }

    const payload = JSON.parse(rawBody.toString());

    console.log(`Received event: ${event}`);
    console.log(`Timestamp: ${payload.timestamp}`);

    switch (event) {
      case "payment.completed": {
        const { sessionId, txHash, amount, network } = payload.data;
        console.log(`Payment completed: ${amount} USDC on ${network}`);
        console.log(`  Session: ${sessionId}`);
        console.log(`  Tx Hash: ${txHash}`);
        // TODO: fulfill the order — grant access, send receipt, etc.
        break;
      }
      case "payment.failed": {
        const { sessionId, reason } = payload.data;
        console.log(`Payment failed: ${reason}`);
        console.log(`  Session: ${sessionId}`);
        // TODO: notify the customer, allow retry
        break;
      }
      default:
        console.log(`Unhandled event: ${event}`);
    }

    res.status(200).json({ received: true });
  }
);

app.listen(4000, () => {
  console.log("Webhook server listening on http://localhost:4000");
});

npm install express
npx tsx webhook-server.ts

import os
import hmac
import hashlib
import json
from flask import Flask, request, jsonify

app = Flask(__name__)
WEBHOOK_SECRET = os.environ["BAG_WEBHOOK_SECRET"]


@app.route("/webhooks/bag", methods=["POST"])
def handle_webhook():
    signature = request.headers.get("X-Webhook-Signature", "")
    event = request.headers.get("X-Webhook-Event", "")
    raw_body = request.get_data()

    # Verify the HMAC-SHA256 signature against your webhook secret
    expected = hmac.new(
        WEBHOOK_SECRET.encode(),
        raw_body,
        hashlib.sha256,
    ).hexdigest()

    if not hmac.compare_digest(expected, signature):
        print("Invalid webhook signature — rejecting request")
        return jsonify({"error": "Invalid signature"}), 401

    payload = json.loads(raw_body)

    print(f"Received event: {event}")
    print(f"Timestamp: {payload['timestamp']}")

    if event == "payment.completed":
        data = payload["data"]
        print(f"Payment completed: {data['amount']} USDC on {data['network']}")
        print(f"  Session: {data['sessionId']}")
        print(f"  Tx Hash: {data['txHash']}")
        # TODO: fulfill the order — grant access, send receipt, etc.

    elif event == "payment.failed":
        data = payload["data"]
        print(f"Payment failed: {data['reason']}")
        print(f"  Session: {data['sessionId']}")
        # TODO: notify the customer, allow retry

    else:
        print(f"Unhandled event: {event}")

    return jsonify({"received": True}), 200


if __name__ == "__main__":
    app.run(port=4000)

pip install flask
python webhook_server.py