Connect your site with the API

curl https://www.gayidvebi.ge/api/v1/ping \
  -H "Authorization: Bearer gyd_live_xxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

<?php
// $orderId, $customer, $cart come from your checkout
$order = [
    'id'       => (string) $orderId,
    'customer' => ['name' => $customer['name'], 'phone' => $customer['phone']],
    'shipping' => ['city' => $customer['city'], 'address' => $customer['address'], 'fee' => 6],
    'payment'  => ['method' => 'cod', 'paid' => false],
    'items'    => array_map(fn ($line) => [
        'product_id' => (string) $line['product_id'],
        'name'       => $line['name'],
        'options'    => $line['options'] ?? [],      // ['ზომა' => 'L']
        'quantity'   => (int) $line['qty'],
        'price'      => (float) $line['unit_price'],
    ], $cart),
];

$ch = curl_init('https://www.gayidvebi.ge/api/v1/orders');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 15,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . getenv('GAYIDVEBI_API_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => json_encode($order, JSON_UNESCAPED_UNICODE),
]);
$response = json_decode((string) curl_exec($ch), true);
$status   = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

if ($status === 201 || $status === 200) {
    // Saved (or it was already saved). $response['order']['crm_id']
} elseif ($status === 0 || !empty($response['retry'])) {
    // No answer, 429 or 5xx: try again later with the same id — never saved twice
} else {
    error_log('Gayidvebi refused the order: ' . json_encode($response));
}

{
  "id": "1001",
  "number": "A-1001",
  "created_at": "2026-10-15T13:30:00+04:00",
  "customer": {
    "name": "ნინო ბერიძე",
    "phone": "+995 555 12 34 56",
    "email": "nino@example.ge",
    "personal_id": "01001012345"
  },
  "shipping": {
    "city": "თბილისი",
    "address": "ჭავჭავაძის გამზ. 12, ბინა 4",
    "fee": 6,
    "paid_by": "customer"
  },
  "payment": { "method": "cod", "title": "ადგილზე გადახდა", "paid": false },
  "items": [
    {
      "product_id": "202",
      "variant_id": "203",
      "sku": "TS-L",
      "name": "მაისური",
      "options": { "ზომა": "L", "ფერი": "შავი" },
      "quantity": 2,
      "price": 35
    }
  ],
  "discount": 0,
  "total": 76,
  "currency": "GEL",
  "note": "დარეკეთ მისვლამდე",
  "admin_url": "https://shop.ge/admin/orders/1001"
}

HTTP/1.1 422 Unprocessable Entity
{
  "ok": false,
  "error": "validation_failed",
  "message": "Some fields are invalid. See `errors`.",
  "field": "customer.phone",
  "errors": [
    { "field": "customer.phone", "code": "required", "message": "customer.phone is required" },
    { "field": "items[0].quantity", "code": "invalid_value", "message": "items[0].quantity must be a whole number from 1 to 100000" }
  ],
  "retry": false,
  "server_time": 1760520601
}

curl https://www.gayidvebi.ge/api/v1/orders/1001 \
  -H "Authorization: Bearer gyd_live_xxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

curl -X POST https://www.gayidvebi.ge/api/v1/orders/1001/cancel \
  -H "Authorization: Bearer gyd_live_xxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{ "reason": "customer" }'

curl "https://www.gayidvebi.ge/api/v1/products?limit=100" \
  -H "Authorization: Bearer gyd_live_xxxxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

POST /your/webhook/url HTTP/1.1
Content-Type: application/json
webhook-id: msg_5b0c3a1e9d2f4c7b8a6e1d0c9b8a7f6e
webhook-timestamp: 1760520601
webhook-signature: v1,K5oZfzN95Z9UVu1EsfQmfVNQhnkZ2pj9o9NDN/H/pI4=

{
  "type": "order.status_changed",
  "timestamp": "2026-10-15T09:30:01.123Z",
  "data": {
    "id": "1001",
    "number": "A-1001",
    "crm_id": "5b0c…-…",
    "status":          { "id": "shipped", "label": "გაგზავნილი", "stage": "in_progress" },
    "previous_status": { "id": "pending", "label": "ახალი",      "stage": "new" },
    "changed_at": "2026-10-15T09:30:01.123Z"
  }
}

<?php
$secret = getenv('GAYIDVEBI_WEBHOOK_SECRET');           // whsec_...
$id     = $_SERVER['HTTP_WEBHOOK_ID'] ?? '';
$ts     = $_SERVER['HTTP_WEBHOOK_TIMESTAMP'] ?? '';
$header = $_SERVER['HTTP_WEBHOOK_SIGNATURE'] ?? '';
$body   = file_get_contents('php://input');              // the raw body, not re-encoded

$key      = base64_decode(substr($secret, strlen('whsec_')));
$expected = base64_encode(hash_hmac('sha256', "$id.$ts.$body", $key, true));
$valid    = false;
foreach (explode(' ', $header) as $part) {
    [$version, $signature] = array_pad(explode(',', $part, 2), 2, '');
    if ($version === 'v1' && hash_equals($expected, $signature)) $valid = true;
}
if (!$valid || abs(time() - (int) $ts) > 300) {
    http_response_code(401);
    exit;
}

$event = json_decode($body, true);
// Retries reuse the same webhook-id: skip an id you already handled
if ($event['type'] === 'order.status_changed') {
    $orderId = $event['data']['id'];                       // your order id
    $stage   = $event['data']['status']['stage'];          // received|new|in_progress|completed|cancelled
    // … update the order on your site
}
http_response_code(200);