Dashboard
Welcome.
Here is everything happening with your Bitcoin payments.
01
→
Register ZPUB
Register your ZPUB to generate addresses
02
2
Define Products
Set up your tiers and pricing
03
3
Get API Key
Copy your key to authenticate requests
04
4
Integrate
Paste the snippet into your website
Revenue
€0
0 sats
Paid
0
All time
Pending
0
Awaiting payment
Address index
0
Next address
Recent Invoices
No invoices yet
Complete your setup and your first invoice will appear here.
Payments
Invoices
All invoices generated by your API key.
| Invoice | Customer | Product | Sats | Fiat | Status | Date |
|---|---|---|---|---|---|---|
| No invoices yet | ||||||
Setup · Step 1
Register Your ZPUB
Register the ZPUB from your business hardware wallet so we can generate a unique Bitcoin address for every invoice.
⚠
NEVER SHARE YOUR SEED PHRASE WITH ANYONE. Not with us, not with support, not with anyone. We will never ask for it.
Your ZPUB
A ZPUB is a view-only public key from your hardware wallet. It lets us generate receive addresses without any ability to spend your funds.
ℹ
Your ZPUB starts with zpub or xpub. It is not your seed phrase and it is not a private key.
Found in Trezor Suite, Ledger Live, or Sparrow under account settings.
Address derived successfully
Compare this against your wallet receive addresses. If it matches, your ZPUB is correct.
How to find your ZPUB
Trezor Suite
Accounts → Select account → Show public key
Ledger Live
Accounts → Select account → Edit → Advanced → Extended public key
Sparrow Wallet
Master Public Keys section → Copy zpub
Coldcard
Advanced → Export Wallet → Choose format
Setup · Step 2
Define Your Products
Set up the tiers you sell. Tier keys are used in your API calls.
Product Tiers
Tier Key
Display Name
Price/mo
Tier keys must be lowercase with no spaces.
Currency
Setup · Step 3
Your API Key
Use this key to authenticate every request your website makes to BoreLine Pay.
⚠
Treat your API key like a password. Never commit it to public repositories or expose it in client-side JavaScript. Store it as a server environment variable.
Live API Key
sk_live_••••••••••••••••••••••••••••••••••••••••
Replace Key
If your key is ever leaked, generate a new one here. The old key stops working immediately.
Make sure you are ready to update your website settings right away. Your checkout will stop working until you do.
Setup · Step 4
Integrate
Add Bitcoin payments to your website with one API call.
Step 1 · Create an invoice from your server
JavaScript · Node.js
const res = await fetch('https://api.boreline.app/api/invoice', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-API-Key': process.env.BORELINE_PAY_KEY }, body: JSON.stringify({ email: customer.email, tier: 'starter', months: 1 }) }); const { invoice_url } = await res.json(); window.location.href = invoice_url;
Step 2 · Verify webhook signature
JavaScript · Node.js
app.post('/webhooks/payment', (req, res) => { const sig = req.headers['x-boreline-sig']; const ts = parseInt(req.headers['x-boreline-time']); if (Math.abs(Date.now() / 1000 - ts) > 300) return res.status(400).send('Replay'); const keyHash = sha256(YOUR_API_KEY); const expected = hmac(keyHash, req.rawBody); if (sig !== expected) return res.status(401).end(); if (req.body.event === 'payment.confirmed') grantAccess(req.body.email, req.body.tier); if (req.body.event === 'payment.reversed') revokeAccess(req.body.email); res.status(200).end(); });
Account
Settings
Account
Webhook
Called on payment.confirmed and payment.reversed events.
Security
Verify Your Wallet
Confirm that the addresses we generate match your hardware wallet. You do not have to trust us.
ZPUB Fingerprint
SHA-256 hash of your registered ZPUB. If this changes without your action, contact support immediately.
ZPUB HASH
Not configured
Derivation Path
Pathm/84h/0h/0h/0/{index}
TypeBIP84 Native SegWit
Next index0
Derived Addresses
Compare these against your wallet receive address list. They must match exactly.
No wallet connected
Register your ZPUB first to see derived addresses here.