Connect your ShamCash and Syriatel Cash accounts to your website, online store, app, internal system or Telegram and WhatsApp bot. Read balances and incoming and outgoing transfers, verify customer payments by transaction number automatically, and manage every payment account from one dashboard over a simple REST API.
Create your account and link your first wallet in minutes.
$ curl "https://api.eaglebot99.com?resource=status" \
-H "X-Api-Key: YOUR_API_KEY"
{
"success": true,
"message": "API is working.",
"user": { "id": 123, "name": "Your Name", "email": "[email protected]" },
"limits": { "max_linked_accounts": 10 }
}A layer between your ShamCash (Sham Cash) and Syriatel Cash accounts and your software: link your wallets once, and your website, store, app or bot can read balances and transfers, verify payments and send transfers with a simple API call, instead of opening the app and checking every transfer by hand.
When a customer pays you with ShamCash or Syriatel Cash, you open the app, look for the transfer, match the amount and confirm the order yourself, often from a screenshot the customer sends that may be fake. As orders grow, this gets slow, costly and error-prone.
Link your ShamCash account by scanning a QR code, and your Syriatel Cash number with your account password and an SMS code. The platform keeps the link encrypted, reads your own account history and keeps every transfer in a searchable archive. Your website calls the API with its own key and gets a clear JSON answer: did the payment arrive, how much, from whom and when.
It does not hold your money: it stays in your ShamCash and Syriatel Cash accounts, and no transfer leaves them unless you ask for it. It opens no new accounts in your name and never stores your PIN. It is independent, not part of Syriatel or ShamCash.
The customer pays for the order and enters the transaction number; the store verifies it over the API and confirms the order at once, with no manual check.
The user sends the transfer number to the bot, which looks it up in your account and answers automatically.
Once the transfer is verified, your system credits the user's balance without any staff member stepping in.
Pull incoming and outgoing transfers into your accounting system over the API whenever you need.
Follow the balances and transfers of all your linked ShamCash and Syriatel Cash accounts from one dashboard, in Arabic or English.
Send ShamCash and Syriatel Cash transfers over the API, protected against double sending when a request is retried.
ShamCash and Syriatel Cash are trademarks of their respective owners. This platform is an independent service, not affiliated with them, and works on accounts their owners link themselves.
ShamCash is a widely used Syrian e-wallet for sending, receiving and paying money. Once your ShamCash account is linked to the platform, your website or system can read your balance in every currency and your incoming and outgoing transfers, and verify any payment by its transaction number, without opening the app.
Your customer sends the amount to your ShamCash account and gives you the transaction number. Your system sends that number to the find_tx endpoint; the platform looks for it in the transfers your account received and returns it with its amount, currency, sender and date, or found: false when it has not arrived. A transfer your own account sent is never accepted as an incoming payment.
curl -s "https://api.eaglebot99.com?resource=shamcash&action=find_tx&tx=TRANSACTION_NO&account_address=YOUR_ACCOUNT_ADDRESS" \
-H "X-Api-Key: YOUR_API_KEY"Syriatel Cash is Syriatel's e-wallet, working with your mobile number to send, receive and pay money. Once your number is linked to the platform, your system reads your Syriatel Cash balance and incoming and outgoing transfers, verifies customer payments by transaction number, and sends transfers to other numbers over the API.
Your customer sends money to your number and gives you the transaction number. Your system sends it to the find_tx endpoint with your number (gsm) and the period (7 days, 30 days or all); the platform looks for it in the transfers your number received and returns the transfer as Syriatel recorded it, or found: false when it has not arrived.
curl -s "https://api.eaglebot99.com?resource=syriatel&action=find_tx&tx=TRANSACTION_NO&gsm=09XXXXXXXX&period=7" \
-H "X-Api-Key: YOUR_API_KEY"You can link both wallets and use them with the same key and the same request style. This is what each one offers today:
| Feature | ShamCash | Syriatel Cash |
|---|---|---|
| How to link | Scan a QR code with the ShamCash app | Number, account password and SMS code |
| Balance | In every currency | For a linked number or cash code |
| Incoming transfers | With sender, currency and note | 7 days, 30 days or all |
| Outgoing transfers | Available | Available |
| Verify a payment by transaction number | Available | Available |
| Transfers over the API | From 24 hours after linking | With your PIN on each transfer |
| Number of accounts | Several accounts, per your plan | Several numbers, per your plan |
| Dashboard | Available | Available |
Stop checking the apps by hand: let your systems read your wallets and confirm payments for you.
A single endpoint and a single key for Syriatel Cash and ShamCash, with the same request style and the same JSON answers for both.
Link several Syriatel Cash numbers and ShamCash accounts and follow their balances and state from one place, in Arabic or English.
Read balances and incoming or outgoing transfers over REST whenever your system needs them, with no manual checks.
Look up a transfer by its transaction number to confirm that a customer really paid, with the amount, the sender and the date.
Every transfer read through the API, your dashboard or the scheduled scan is kept in an archive: find_tx still finds it after the wallet app stops listing it.
Send Syriatel Cash and ShamCash transfers through the API. Idempotency keys make sure a retry never pays twice.
Plain HTTPS and JSON: PHP, Node.js, Python or any other language. Ready-to-copy examples below and in the documentation.
Monthly plans for companies and individuals, several linked accounts per plan, paid from your balance with the method that suits you.
From sign-up to your first API call in a few minutes.
Sign up with your email and your password.
Link ShamCash by scanning a QR code with the ShamCash app, and each Syriatel Cash number with its Syriatel Cash account password and the verification code Syriatel sends you by SMS.
Generate your key on the API page of your dashboard. It is shown once and stored hashed; you can limit it to your servers' IP addresses.
Send HTTPS requests with the X-Api-Key header and read JSON answers: balances, histories, transaction lookups and transfers.
The service is free at the moment.
Free
One endpoint, a resource and an action, your key in a header, and JSON back. Here is the status call against this site:
https://api.eaglebot99.com
curl -s "https://api.eaglebot99.com?resource=status" \
-H "X-Api-Key: YOUR_API_KEY" \
-H "Accept: application/json"<?php
$ch = curl_init('https://api.eaglebot99.com?resource=status');
curl_setopt_array($ch, [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'X-Api-Key: YOUR_API_KEY',
'Accept: application/json',
],
CURLOPT_TIMEOUT => 30,
]);
$body = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
$data = json_decode((string) $body, true);
if ($data['success'] ?? false) {
echo $data['message'], PHP_EOL; // "API is working."
} else {
echo "Error {$status}: ", $data['error'] ?? 'no answer', PHP_EOL;
}// Node.js 18+ (built-in fetch)
async function main() {
const response = await fetch('https://api.eaglebot99.com?resource=status', {
headers: {
'X-Api-Key': process.env.API_KEY ?? 'YOUR_API_KEY',
Accept: 'application/json',
},
});
const data = await response.json();
if (data.success) {
console.log(data.message); // "API is working."
} else {
console.error(response.status, data.error);
}
}
main().catch(console.error);import requests
response = requests.get(
"https://api.eaglebot99.com",
params={"resource": "status"},
headers={"X-Api-Key": "YOUR_API_KEY", "Accept": "application/json"},
timeout=30,
)
data = response.json()
if data["success"]:
print(data["message"]) # "API is working."
else:
print(response.status_code, data["error"])Replace YOUR_API_KEY with the key from the API page of your dashboard. Send it in the X-Api-Key header rather than in the URL.
{
"success": true,
"message": "API is working.",
"user": {
"id": 123,
"name": "Your Name",
"email": "[email protected]"
},
"limits": {
"max_linked_accounts": 10
}
}GET reads, POST sends money. The documentation details every parameter and answer.
| Method | Endpoint | Description |
|---|---|---|
| GET | resource=status |
Check your key: returns your user and your account limit. |
| GET | resource=accounts&action=list |
Your active Syriatel Cash and ShamCash accounts. |
| GET | resource=syriatel&action=balance |
Syriatel Cash balance of a linked number or cash code. |
| GET | resource=syriatel&action=history |
Incoming Syriatel Cash transfers (7 days, 30 days or all). |
| GET | resource=syriatel&action=outgoing_history |
Outgoing Syriatel Cash transfers. |
| GET | resource=syriatel&action=find_tx |
Find a Syriatel Cash transfer by its number. |
| POST | resource=syriatel&action=transfer_cash |
Send Syriatel Cash to another number (the PIN goes in the request body and is never stored). |
| POST | resource=syriatel&action=mobile_recharge |
Recharge mobile credit from Syriatel Cash. Not available yet |
| GET | resource=shamcash&action=balance |
ShamCash balances in every currency. |
| GET | resource=shamcash&action=logs |
Incoming ShamCash transfers with sender, amount, currency, date and note. |
| GET | resource=shamcash&action=outgoing_logs |
Outgoing ShamCash transfers. |
| GET | resource=shamcash&action=find_tx |
Find a ShamCash transfer by its number. |
| POST | resource=shamcash&action=transfer |
Send from a linked ShamCash account (from 24 hours after linking). |
Standard HTTP codes: 400 invalid request, 401 missing or wrong key, 403 not allowed, 404 unknown endpoint or account, 405 wrong method, 429 too many requests, 500 internal error, 502 provider error.
Your wallets hold real money: every part of the service is designed around that.
Your key is shown once when it is generated; only its SHA-256 hash is stored. Regenerate or revoke it at any time.
The Syriatel Cash PIN of a transfer is used for that operation only: never saved, never logged, and never accepted in a URL.
Syriatel and ShamCash credentials and sessions are encrypted at rest with authenticated encryption (XChaCha20-Poly1305).
Restrict your key to your servers' IP addresses. Every key is rate limited (60 API requests per minute by default).
Every call is recorded in your request log (method, endpoint, result, IP address), never a body, a key or a PIN.
A transfer is recorded before it is sent and sent only once; a retry with the same Idempotency-Key gets the first answer, and an uncertain result is never resent automatically.
Create your account and link your first wallet in minutes.