NDM X Studio Top UP api API

Free Fire auto top-up for Unipin vouchers and Garena Shells across BD, SG, MY, and Indonesia. Send a request, get a webhook callback (or an instant sync response) with per-item success/failure detail. This page covers authentication, every endpoint, every callback format, and every error code the API returns.

Base URL

Base URL

http://your.vouchershop.autotopup.api.com

02

Authentication

Every request must include your API key in the Authorization header. No Bearer prefix â€” send the key as-is.

Header

Authorization: your_api_key_here

03

Errors & Status Codes

Auth, limit, and validation failures return JSON with an error message and a machine-readable code.

Authentication errors

Token validity, expiry & access control

6 codes

401 TOKEN_MISSING Missing API token in Authorization header

401 TOKEN_INVALID Token does not exist or has been revoked

403 TOKEN_EXPIRED Token validity period has ended

429 TOKEN_BANNED Token temporarily banned due to repeated abuse

429 IP_BANNED Too many requests â€” IP temporarily rate-limited

429 BURST_BANNED Burst limit exceeded â€” retry with back-off

Limit & server errors

Balance, capacity & internal availability

8 codes

401 TOKEN_ERROR Insufficient balance (need N, have M)

401 TOKEN_ERROR Token expired on a specific scheduled date

500 REDIS_ERROR Internal token verification failure

503 SHELL_UNAVAILABLE Shell top-up endpoint currently offline

503 OVERLOADED Server overloaded â€” high CPU / RAM usage

503 QUEUE_FULL Processing queue full â€” try again shortly

503 SERVER_BUSY Instant endpoint busy â€” use async /topup instead

409 VOUCHER_CONSUMED Voucher already redeemed (permanently consumed)

Request validation errors

Malformed payload, region & field checks

7 codes

400 INVALID_PLAYERID Player UID format is not valid

400 INVALID_VOUCHER Wrong format â€” must be SERIAL PIN

400 INVALID_VOUCHER Batch limit exceeded â€” max 5 vouchers per request

400 INVALID_VOUCHER Duplicate voucher detected in same batch

400 MISSING_PACKAGE Field package required for Shell orders

400 INVALID_PACKAGE Unknown package code for the selected shop

400 REGION_UNSUPPORTED Player region is not supported by this shop

04

POST /topup

Unipin Voucher Top-up

Redeems one or more Unipin voucher codes for a Free Fire player. This is the async endpoint â€” it accepts the order, responds immediately with processing, then sends the final result to your url as a webhook callback.

Body parameters

Field	Type	Required
orderid	string	required
playerid	string	required
code	string	required
url	string	required

orderid â€” your own ID, used to track this order and match the callback.
playerid â€” the Free Fire player UID being topped up.
code â€” one or more Unipin voucher codes, comma-separated (max 5). Each code is SERIAL PIN.
url â€” your webhook URL. The order result is POSTed here when processing finishes.

Example request

cURL

curl -X POST http://your.vouchershop.autotopup.api.com/topup \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "order-001",
    "playerid": "123456789",
    "code": "BDMB-T-S-01885045 6591-4164-9992-5148,BDMB-Q-S-12512238 3357-3436-4346-4621",
    "url": "https://your-webhook.com/callback"
  }'

Immediate response

The server accepts the order and starts processing in the background.

200 OK

status: processing

Callback â€” all success

Sent to your url once every voucher in the batch has been redeemed.

Webhook POST

{
  "status": "success",
  "orderid": "test-001",
  "content": {
    "batch": [
      {
        "uc": "BDMB-Q-S-12513859 5265-6592-7735-1778",
        "ok": true,
        "detail": "âœ… Success"
      },
      {
        "uc": "BDMB-Q-S-12513264 6642-2292-1792-2551",
        "ok": true,
        "detail": "âœ… Success"
      }
    ],
    "callback_url": "https://testdummy.onrender.com/health"
  },
  "nickname": "KNGá´‡êŸ™á—™á´€á´á´˜ÉªÊ€á´‡"
}

Callback â€” all failed

Webhook POST

{
  "status": "failed",
  "orderid": "test-001",
  "content": {
    "batch": [
      {
        "uc": "BDMB-Q-S-12513859 5265-6592-7735-1778",
        "ok": false,
        "detail": "âŒ Consumed Voucher"
      },
      {
        "uc": "BDMB-Q-S-12513264 6642-2292-1792-2551",
        "ok": false,
        "detail": "âŒ Consumed Voucher"
      }
    ],
    "callback_url": "https://testdummy.onrender.com/health"
  },
  "nickname": "KNGá´‡êŸ™á—™á´€á´á´˜ÉªÊ€á´‡"
}

Callback â€” partial success

Some vouchers redeemed, others failed. Check each batch item's ok field individually.

Webhook POST

{
  "status": "partial",
  "orderid": "test-001",
  "content": {
    "batch": [
      {
        "uc": "BDMB-Q-S-12513859 5265-6592-7735-1778",
        "ok": true,
        "detail": "âœ… Success"
      },
      {
        "uc": "BDMB-Q-S-12513264 6642-2292-1792-2551",
        "ok": false,
        "detail": "âŒ Consumed Voucher"
      }
    ],
    "callback_url": "https://testdummy.onrender.com/health"
  },
  "nickname": "KNGá´‡êŸ™á—™á´€á´á´˜ÉªÊ€á´‡"
}

Possible `detail` values

Voucher detail enum 3 rows

Detail	Meaning
âŒ Consumed Voucher	Voucher was already used
Uid is invalid	The provided Player ID doesn't exist
Only BD region supported. Your region: SG	This shop only accepts Bangladesh-server UIDs

05

POST /topup-instant

Unipin Voucher Top-up â€” Instant

Same Unipin redemption, but synchronous: the full result comes back in the HTTP response itself. No url field, no callback â€” useful when you would rather wait on the request than handle a webhook.

Example request

Note the codes use a colon SERIAL:PIN format on this endpoint.

cURL

curl -X POST http://your.vouchershop.autotopup.api.com/topup-instant \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "order-002",
    "playerid": "123456789",
    "code": "BDMB-T-S-01885045:6591-4164-9992-5148,BDMB-Q-S-12512238:3357-3436-4346-4621,BDMB-I-S-03420017:2334-2751-3366-1131,BDMB-I-S-03421301:6497-3777-3756-4271,BDMB-I-S-03422906:1449-1937-9239-3661"
  }'

Response â€” all success

200 OK

{
  "status": "success",
  "orderid": "order-002",
  "content": {
    "batch": [
      { "uc": "BDMB-T-S-01885045 6591-4164-9992-5148", "ok": true, "detail": "âœ… Success" },
      { "uc": "BDMB-Q-S-12512238 3357-3436-4346-4621", "ok": true, "detail": "âœ… Success" },
      { "uc": "BDMB-I-S-03420017 2334-2751-3366-1131", "ok": true, "detail": "âœ… Success" },
      { "uc": "BDMB-I-S-03421301 6497-3777-3756-4271", "ok": true, "detail": "âœ… Success" },
      { "uc": "BDMB-I-S-03422906 1449-1937-9239-3661", "ok": true, "detail": "âœ… Success" }
    ]
  },
  "nickname": "PlayerName"
}

Response â€” all failed / partial

Same batch shape as the async endpoint â€” see the /topup examples above for the all-failed and partial-success formats. The same detail values apply (Consumed Voucher, invalid UID, region mismatch).

06

Supported Vouchers

Each Unipin denomination has both a voucher and gift-card variant, both accepted by code.

Unipin Voucher Prefix Matrix 10 rows

Value	Voucher prefix	Gift card prefix
20UC / 25 Diamond	BDMB-T-S-xxxxxxxx	UPBD-Q-S-xxxxxxxx
36UC / 50 Diamond	BDMB-U-S-xxxxxxxx	UPBD-R-S-xxxxxxxx
80UC / 115 Diamond	BDMB-J-S-xxxxxxxx	UPBD-G-S-xxxxxxxx
160UC / 240 Diamond	BDMB-I-S-xxxxxxxx	UPBD-F-S-xxxxxxxx
161UC / Weekly	BDMB-Q-S-xxxxxxxx	UPBD-N-S-xxxxxxxx
405UC / 610 Diamond	BDMB-K-S-xxxxxxxx	UPBD-H-S-xxxxxxxx
800UC / Monthly	BDMB-S-S-xxxxxxxx	UPBD-P-S-xxxxxxxx
810UC / 1240 Diamond	BDMB-L-S-xxxxxxxx	UPBD-I-S-xxxxxxxx
1625UC / 2530 Diamond	BDMB-M-S-xxxxxxxx	UPBD-J-S-xxxxxxxx
2000UC	Wallet-loadable UC â€” no fixed prefix

ðŸ”Ž Pattern match the first 8 chars after BDMB- to detect the voucher variant programatically. The final S indicates region-locked (BD market).

07

POST /topup Garena Shell

Garena Shell Top-up

Tops up Garena Shell on the SG, MY, BD, or Indonesia shop backend. Same /topup endpoint as Unipin â€” the code field switches it into shell mode. Async: responds immediately, then calls your url with the result.

Body parameters

Field	Type	Required
orderid	string	required
playerid	string	required
code	string	required
package	string	required
qty	integer	required
username	string	required
password	string	required
autocode	string	required
url	string	required

code â€” which shop backend to use: shell (bdgamebazar.com), sgshell (shop.garena.sg), myshell (shop.garena.my), or indoshell (kiosgamer.co.id).
package â€” the package code for that shop (see the reference table below).
qty â€” quantity to purchase.
username / password â€” your Garena shop account credentials.
autocode â€” your secret OTP/auth key for that shop account.

Example request

cURL

curl -X POST http://your.vouchershop.autotopup.api.com/topup \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "shell-001",
    "playerid": "123456789",
    "code": "shell",
    "package": "lvl6",
    "qty": 1,
    "username": "your_username",
    "password": "your_password",
    "autocode": "your_secret_key",
    "url": "https://your-webhook.com/callback"
  }'

Immediate response

200 OK

status: accepted

Callback â€” single item, success

Webhook POST

{
    "status": "success",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {
                "package": "LITE",
                "ok": true,
                "detail": "Success"
            }
        ]
    },
    "nickname": "PlayerName"
}

Callback â€” single item, failed

Webhook POST

{
    "status": "failed",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {
                "package": "LITE",
                "ok": false,
                "detail": "Insufficient Garena shells"
            }
        ]
    },
    "nickname": "PlayerName"
}

Callback â€” multiple shells, all success

Webhook POST

{
    "status": "success",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"}
        ]
    },
    "nickname": "PlayerName"
}

Callback â€” multiple shells, partial / all failed

When any item fails, status is "failed" at the top level even if some items succeeded â€” check each batch entry's ok field for the real per-item outcome.

Webhook POST

{
    "status": "failed",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"}
        ]
    },
    "nickname": "PlayerName"
}

08

POST /topup-instant Garena Shell

Garena Shell â€” Instant Sync

Same Garena Shell payload as the async /topup endpoint, but synchronous. Drop the url field â€” the result comes back immediately in the HTTP response, no webhook callback needed.

Example request

cURL

curl -X POST http://your.vouchershop.autotopup.api.com/topup-instant \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "shell-001",
    "playerid": "123456789",
    "code": "shell",
    "package": "lvl6",
    "qty": 1,
    "username": "your_username",
    "password": "your_password",
    "autocode": "your_secret_key"
  }'

No url parameter. Response is immediate (no webhook). Formats are identical to the async callback examples above (single success/failed, multiple success/partial/failed). If server is busy, returns HTTP 503.

Response â€” single shell, success

200 OK

{
    "status": "success",
    "orderid": "shell-001",
    "content": {
        "batch": [
            {
                "package": "LVL6",
                "ok": true,
                "detail": "Success"
            }
        ]
    },
    "nickname": "PlayerName"
}

Response â€” single shell, failed

200 OK

{
    "status": "failed",
    "orderid": "shell-001",
    "content": {
        "batch": [
            {
                "package": "LVL6",
                "ok": false,
                "detail": "Wrong OTP"
            }
        ]
    },
    "nickname": "PlayerName"
}

Response â€” multiple shells (qty > 1)

200 OK

{
    "status": "success",
    "orderid": "shell-001",
    "content": {
        "batch": [
            {"package": "LVL6", "ok": true, "detail": "Success"},
            {"package": "LVL6", "ok": true, "detail": "Success"},
            {"package": "LVL6", "ok": false, "detail": "Insufficient Garena shells"}
        ]
    },
    "nickname": "PlayerName"
}

Response â€” server busy

If the instant endpoint is overloaded, use async /topup instead.

503

{
    "error": "Server busy â€” use /topup for queued processing.",
    "code": "SERVER_BUSY"
}

09

Shop & Package Reference

sgshell shop.garena.sg backend

Categories & Packages 3 rows

Category	Packages
Membership	weekly, monthly, Lite, 3D, 7D, 30D
Level Up	lvl6, lvl10, lvl15, lvl20, lvl25, lvl30, lvlall
Diamonds	25, 100, 310, 520, 1060, 2180, 5600, 11500

indoshell kiosgamer.co.id backend

ID Region Packages 4 rows

Category	Packages
Membership	weekly, monthly
Booyah Pass	bp
Diamonds	5, 50, 70, 140, 355, 720, 7290
Level Up	lvl6, lvl10, lvl15, lvl20, lvl25, lvl30, lvlall

myshell shop.garena.my backend

MY Region Packages 3 rows

Category	Packages
Membership	weekly, monthly
Diamonds	25, 100, 310, 520, 1060, 2180, 5600, 11500
Other	Lite, 3D, 7D, 30D, lvl6, lvl10, lvl15, lvl20, lvl25, lvl30

shell bdgamebazar.com backend

BD Default Packages 2 rows

Category	Packages
Membership	Lite, 3D, 7D, 30D
Level Up	108588 (Lvl 6), 108589 (Lvl 10), 108590 (Lvl 15), 108591 (Lvl 20), 108592 (Lvl 25), 108593 (Lvl 30)

Package names returned in callbacks

Callback Package Names 4 rows

Shop	Package names
BD Shell	LITE, EVO3, EVO7, EVO30, LVL6, LVL10, LVL15, LVL20, LVL25, LVL30
SG / MY Shell	LITE, EVO3, EVO7, EVO30, 25, 100, 310, 520, 1060, 2180, 5600, 11500, Weekly, Monthly
Indo Shell	5, 50, 70, 140, 355, 720, 7290, 36500, 73100, Weekly, Monthly, BP
All regions	LVL6, LVL10, LVL15, LVL20, LVL25, LVL30 (Level Up Pass)

ðŸ’¡ These are the exact package values you will receive in the POST callback body â€” match them in your DB lookup, not the input codes.

10

Shell Detail Messages

Possible values for the detail field on shell top-up responses.

Shell detail enum values 8 values

Detail
Insufficient garena shells
Wrong OTP
UID is invalid
Inaccurate region
UID region mismatch
Garena server error or wrong shell account
Garena transaction error
Level up pass not eligible

âš¡ All values are returned in plain English â€” check exact string match (case-sensitive) when parsing the detail field in your webhook handler.

11

GET /search

Search Previous Orders

Look up any past order by order ID, player ID, or voucher code prefix.

By order ID

cURL

curl -X GET "https://your.vouchershop.autotopup.api.com/search?orderid=ORDER123" \
  -H "Authorization: your_token_here"

By player ID

cURL

curl -X GET "https://your.vouchershop.autotopup.api.com/search?playerid=123456789" \
  -H "Authorization: your_token_here"

By voucher code

cURL

curl -X GET "https://your.vouchershop.autotopup.api.com/search?code=BDMB-T" \
  -H "Authorization: your_token_here"

Example response â€” Unipin voucher order

200 OK

{
    "count": 1,
    "results": [
        {
            "orderid": "test-001",
            "playerid": "2716319203",
            "order_type": "voucher",
            "status": "success",
            "player_name": "PlayerName",
            "elapsed": 3.21,
            "success_count": 2,
            "total_count": 2,
            "source": "topup",
            "created_at": "2026-06-27T09:00:00",
            "result": {
                "results": [
                    {
                        "serial": "BDMB-Q-S-12513859",
                        "pin": "5265-6592-7735-1778",
                        "success": true,
                        "message": "",
                        "player_name": "PlayerName",
                        "product": "Weekly Membership",
                        "node": "VPS-01"
                    },
                    {
                        "serial": "BDMB-Q-S-12513264",
                        "pin": "6642-2292-1792-2551",
                        "success": true,
                        "message": "",
                        "player_name": "PlayerName",
                        "product": "Weekly Membership",
                        "node": "VPS-01"
                    }
                ]
            }
        }
    ]
}

Example response â€” Garena Shell order

200 OK

{
    "count": 1,
    "results": [
        {
            "orderid": "ORDER123",
            "playerid": "2716319203",
            "order_type": "shell",
            "status": "success",
            "player_name": "PlayerName",
            "elapsed": 4.32,
            "success_count": 1,
            "total_count": 1,
            "source": "topup",
            "created_at": "2026-06-27T09:00:00",
            "result": {
                "results": [
                    {
                        "package": "LITE",
                        "success": true,
                        "message": "",
                        "node": "VPS-01"
                    }
                ]
            }
        }
    ]
}

NDM X Studio Top UP api âš¡ Developer Portal

NDM X Studio Top UP api API

Authentication

Errors & Status Codes

Authentication errors

Limit & server errors

Request validation errors

Unipin Voucher Top-up

Body parameters

Example request

Immediate response

Callback â€” all success

Callback â€” all failed

Callback â€” partial success

Possible detail values

Unipin Voucher Top-up â€” Instant

Example request

Response â€” all success

Response â€” all failed / partial

Supported Vouchers

Garena Shell Top-up

Body parameters

Example request

Immediate response

Callback â€” single item, success

Callback â€” single item, failed

Callback â€” multiple shells, all success

Callback â€” multiple shells, partial / all failed

Garena Shell â€” Instant Sync

Example request

Response â€” single shell, success

Response â€” single shell, failed

Response â€” multiple shells (qty > 1)

Response â€” server busy

Shop & Package Reference

sgshell shop.garena.sg backend

indoshell kiosgamer.co.id backend

myshell shop.garena.my backend

shell bdgamebazar.com backend

Package names returned in callbacks

Shell Detail Messages

Search Previous Orders

By order ID

By player ID

By voucher code

Example response â€” Unipin voucher order

Example response â€” Garena Shell order

NDM X Studio Top UP api API

Endpoints

Stack & Regions

NDM X Studio

Possible `detail` values