API Reseller Limitz Store

curl -X POST https://limitzstore.com/api/v2/balance \
  -H "X-API-Key: API_KEY_KAMU"

<?php
function mg(string $endpoint, array $data = []): array {
    $ch = curl_init('https://limitzstore.com/api/v2/' . $endpoint);
    curl_setopt_array($ch, [
        CURLOPT_POST           => true,
        CURLOPT_POSTFIELDS     => json_encode($data),
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT        => 30,
        CURLOPT_HTTPHEADER     => ['X-API-Key: ' . getenv('MG_API_KEY'), 'Content-Type: application/json'],
    ]);
    $res = json_decode((string) curl_exec($ch), true);
    curl_close($ch);
    return is_array($res) ? $res : ['status' => false, 'message' => 'Koneksi gagal'];
}

$saldo = mg('balance');
echo $saldo['status'] ? $saldo['data']['balance'] : $saldo['message'];

// Node.js 18+ (fetch bawaan)
const API = 'https://limitzstore.com/api/v2';
async function mg(endpoint, data = {}) {
  const res = await fetch(`${API}/${endpoint}`, {
    method: 'POST',
    headers: { 'X-API-Key': process.env.MG_API_KEY, 'Content-Type': 'application/json' },
    body: JSON.stringify(data),
  });
  return res.json(); // { status, message, data }
}

const saldo = await mg('balance');
console.log(saldo.status ? saldo.data.balance : saldo.message);

import os, requests

API = "https://limitzstore.com/api/v2"
def mg(endpoint, data=None):
    r = requests.post(f"{API}/{endpoint}", json=data or {},
                      headers={"X-API-Key": os.environ["MG_API_KEY"]}, timeout=30)
    return r.json()  # {"status", "message", "data"}

saldo = mg("balance")
print(saldo["data"]["balance"] if saldo["status"] else saldo["message"])

curl -X POST https://limitzstore.com/api/v2/order \
  -H "X-API-Key: API_KEY_KAMU" \
  -H "Content-Type: application/json" \
  -d '{"product_id": 1201, "user_id": "12345678", "zone_id": "1234", "ref_id": "INV-20261027-0001"}'

<?php
$hasil = mg('order', [
    'product_id' => 1201,
    'user_id'    => '12345678',
    'zone_id'    => '1234',
    'ref_id'     => 'INV-20261027-0001', // nomor pesanan di sistemmu (unik)
]);
if ($hasil['status']) {
    echo 'Diterima: ' . $hasil['data']['order_id'] . ' (' . $hasil['data']['status'] . ')';
} else {
    echo 'Gagal [' . $hasil['error']['code'] . ']: ' . $hasil['message'];
}

const r = await mg('order', {
  product_id: 1201, user_id: '12345678', zone_id: '1234',
  ref_id: 'INV-20261027-0001', // nomor pesanan di sistemmu (unik)
});
if (r.status) console.log('Diterima', r.data.order_id, r.data.status);
else console.log('Gagal', r.error.code, r.message);

r = mg("order", {"product_id": 1201, "user_id": "12345678", "zone_id": "1234",
                 "ref_id": "INV-20261027-0001"})
if r["status"]:
    print("Diterima", r["data"]["order_id"], r["data"]["status"])
else:
    print("Gagal", r["error"]["code"], r["message"])

<?php
// webhook.php = Callback URL kamu (isi di Pengaturan Akun)
$raw  = file_get_contents('php://input');
$sign = hash_hmac('sha256', $raw, getenv('MG_API_KEY'));
if (!hash_equals($sign, $_SERVER['HTTP_X_SIGNATURE'] ?? '')) {
    http_response_code(401);
    exit('tanda tangan salah');
}
$e = json_decode($raw, true);
// cari pesanan di sistemmu lewat $e['ref_id'] (atau $e['order_id']), lalu simpan $e['status'] & $e['sn']
http_response_code(200);
echo 'OK';

// npm i express
const express = require('express');
const crypto = require('crypto');
const app = express();

app.post('/mg-webhook', express.raw({ type: '*/*' }), (req, res) => {
  const sign = crypto.createHmac('sha256', process.env.MG_API_KEY).update(req.body).digest('hex');
  const dari = req.get('X-Signature') || '';
  if (dari.length !== sign.length || !crypto.timingSafeEqual(Buffer.from(dari), Buffer.from(sign))) {
    return res.status(401).send('tanda tangan salah');
  }
  const e = JSON.parse(req.body.toString());
  console.log(e.ref_id, e.order_id, e.status, e.sn);
  res.send('OK'); // balas 2xx secepatnya, kerjakan hal berat setelahnya
});
app.listen(3000);

# pip install flask
import hmac, hashlib, os
from flask import Flask, request, abort

app = Flask(__name__)

@app.post("/mg-webhook")
def mg_webhook():
    raw = request.get_data()
    sign = hmac.new(os.environ["MG_API_KEY"].encode(), raw, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(sign, request.headers.get("X-Signature", "")):
        abort(401)
    e = request.get_json()
    print(e["ref_id"], e["order_id"], e["status"], e["sn"])
    return "OK"

// Bot WhatsApp: Node.js 18+  |  npm i whatsapp-web.js qrcode-terminal express
// Jalankan: MG_API_KEY=API_KEY_KAMU node bot-wa.js  -> scan QR dari aplikasi WhatsApp
const { Client, LocalAuth } = require('whatsapp-web.js');
const qrcode = require('qrcode-terminal');
const express = require('express');
const crypto = require('crypto');

const API = 'https://limitzstore.com/api/v2';
const KEY = process.env.MG_API_KEY;
const rupiah = n => 'Rp ' + Number(n).toLocaleString('id-ID');
async function mg(endpoint, data = {}) {
  const r = await fetch(`${API}/${endpoint}`, {
    method: 'POST',
    headers: { 'X-API-Key': KEY, 'Content-Type': 'application/json' },
    body: JSON.stringify(data),
  });
  return r.json();
}

const wa = new Client({ authStrategy: new LocalAuth() });
const chatDariRef = new Map(); // ref_id -> nomor chat (pakai database di produksi)
wa.on('qr', qr => qrcode.generate(qr, { small: true }));
wa.on('ready', () => console.log('Bot WhatsApp siap'));

wa.on('message', async msg => {
  const [perintah, ...a] = msg.body.trim().split(/\s+/);
  switch (perintah.toLowerCase()) {
    case '!saldo': {
      const r = await mg('balance');
      return msg.reply(r.status ? `Saldo: ${rupiah(r.data.balance)}` : r.message);
    }
    case '!produk': { // !produk mobile-legends
      const r = await mg('products', { game: a[0] || '' });
      if (!r.status) return msg.reply(r.message);
      return msg.reply(r.data.slice(0, 40).map(p => `${p.product_id} | ${p.product} | ${rupiah(p.price)}`).join('\n') || 'Produk tidak ditemukan');
    }
    case '!cekid': { // !cekid 1201 12345678 1234
      const r = await mg('check-id', { product_id: a[0], user_id: a[1], zone_id: a[2] || '' });
      return msg.reply(r.status && r.data.valid ? `ID valid: ${r.data.nickname}` : (r.data?.message || r.message));
    }
    case '!beli': { // !beli 1201 12345678 1234
      const ref = 'WA' + Date.now();
      chatDariRef.set(ref, msg.from);
      const r = await mg('order', { product_id: a[0], user_id: a[1], zone_id: a[2] || '', ref_id: ref });
      return msg.reply(r.status
        ? `Pesanan ${r.data.order_id} diterima (${r.data.product}, ${rupiah(r.data.price)}). Tunggu notifikasi ya.`
        : `Gagal: ${r.message}`);
    }
    case '!status': { // !status MG123456271026
      const r = await mg('status', { order_id: a[0] });
      return msg.reply(r.status ? `${r.data.order_id}: ${r.data.status_text}${r.data.sn ? '\nSN: ' + r.data.sn : ''}` : r.message);
    }
  }
});
wa.initialize();

// Callback URL di Pengaturan Akun = https://domain-bot-kamu.com/mg-webhook
const app = express();
app.post('/mg-webhook', express.raw({ type: '*/*' }), async (req, res) => {
  const sign = crypto.createHmac('sha256', KEY).update(req.body).digest('hex');
  const dari = req.get('X-Signature') || '';
  if (dari.length !== sign.length || !crypto.timingSafeEqual(Buffer.from(dari), Buffer.from(sign))) return res.sendStatus(401);
  res.send('OK');
  const e = JSON.parse(req.body.toString());
  const chat = chatDariRef.get(e.ref_id);
  if (chat && e.status !== 'Processing') {
    await wa.sendMessage(chat, `Pesanan ${e.order_id}: ${e.status_text}${e.sn ? '\nSN: ' + e.sn : ''}`);
  }
});
app.listen(3000, () => console.log('Webhook di port 3000'));

// Bot Telegram: Node.js 18+  |  npm i telegraf express
// Jalankan: BOT_TOKEN=token_dari_BotFather MG_API_KEY=API_KEY_KAMU node bot-tg.js
const { Telegraf } = require('telegraf');
const express = require('express');
const crypto = require('crypto');

const API = 'https://limitzstore.com/api/v2';
const KEY = process.env.MG_API_KEY;
const rupiah = n => 'Rp ' + Number(n).toLocaleString('id-ID');
async function mg(endpoint, data = {}) {
  const r = await fetch(`${API}/${endpoint}`, {
    method: 'POST',
    headers: { 'X-API-Key': KEY, 'Content-Type': 'application/json' },
    body: JSON.stringify(data),
  });
  return r.json();
}

const bot = new Telegraf(process.env.BOT_TOKEN);
const arg = ctx => ctx.message.text.trim().split(/\s+/).slice(1);

bot.command('saldo', async ctx => {
  const r = await mg('balance');
  ctx.reply(r.status ? `Saldo: ${rupiah(r.data.balance)}` : r.message);
});
bot.command('produk', async ctx => { // /produk free-fire
  const r = await mg('products', { game: arg(ctx)[0] || '' });
  if (!r.status) return ctx.reply(r.message);
  ctx.reply(r.data.slice(0, 40).map(p => `${p.product_id} | ${p.product} | ${rupiah(p.price)}`).join('\n') || 'Produk tidak ditemukan');
});
bot.command('beli', async ctx => { // /beli 1201 12345678 1234
  const [pid, uid, zone] = arg(ctx);
  const ref = `TG${ctx.chat.id}-${Date.now()}`; // chat id ikut di ref -> webhook tahu harus balas ke mana
  const r = await mg('order', { product_id: pid, user_id: uid, zone_id: zone || '', ref_id: ref });
  ctx.reply(r.status ? `Pesanan ${r.data.order_id} diterima, sedang diproses.` : `Gagal: ${r.message}`);
});
bot.command('status', async ctx => { // /status MG123456271026
  const r = await mg('status', { order_id: arg(ctx)[0] });
  ctx.reply(r.status ? `${r.data.order_id}: ${r.data.status_text}${r.data.sn ? '\nSN: ' + r.data.sn : ''}` : r.message);
});
bot.launch();

// Callback URL di Pengaturan Akun = https://domain-bot-kamu.com/mg-webhook
const app = express();
app.post('/mg-webhook', express.raw({ type: '*/*' }), async (req, res) => {
  const sign = crypto.createHmac('sha256', KEY).update(req.body).digest('hex');
  const dari = req.get('X-Signature') || '';
  if (dari.length !== sign.length || !crypto.timingSafeEqual(Buffer.from(dari), Buffer.from(sign))) return res.sendStatus(401);
  res.send('OK');
  const e = JSON.parse(req.body.toString());
  const m = /^TG(-?\d+)-/.exec(e.ref_id || '');
  if (m && e.status !== 'Processing') {
    await bot.telegram.sendMessage(m[1], `Pesanan ${e.order_id}: ${e.status_text}${e.sn ? '\nSN: ' + e.sn : ''}`);
  }
});
app.listen(3000);

# Bot Telegram (Python)  |  pip install python-telegram-bot requests
import os, time, requests
from telegram import Update
from telegram.ext import ApplicationBuilder, CommandHandler, ContextTypes

API = "https://limitzstore.com/api/v2"
def mg(endpoint, data=None):
    return requests.post(f"{API}/{endpoint}", json=data or {},
                         headers={"X-API-Key": os.environ["MG_API_KEY"]}, timeout=30).json()

async def saldo(update: Update, ctx: ContextTypes.DEFAULT_TYPE):
    r = mg("balance")
    await update.message.reply_text(f"Saldo: Rp {r['data']['balance']:,}".replace(",", ".") if r["status"] else r["message"])

async def beli(update: Update, ctx: ContextTypes.DEFAULT_TYPE):  # /beli 1201 12345678 1234
    pid, uid, *zone = ctx.args
    ref = f"TG{update.effective_chat.id}-{int(time.time() * 1000)}"
    r = mg("order", {"product_id": pid, "user_id": uid, "zone_id": zone[0] if zone else "", "ref_id": ref})
    await update.message.reply_text(f"Pesanan {r['data']['order_id']} diterima" if r["status"] else f"Gagal: {r['message']}")

app = ApplicationBuilder().token(os.environ["BOT_TOKEN"]).build()
app.add_handler(CommandHandler("saldo", saldo))
app.add_handler(CommandHandler("beli", beli))
app.run_polling()

// Google Sheets > Extensions > Apps Script. Simpan API key di Project Settings > Script properties: MG_API_KEY
function mg(endpoint, data) {
  const res = UrlFetchApp.fetch('https://limitzstore.com/api/v2/' + endpoint, {
    method: 'post',
    contentType: 'application/json',
    headers: { 'X-API-Key': PropertiesService.getScriptProperties().getProperty('MG_API_KEY') },
    payload: JSON.stringify(data || {}),
    muteHttpExceptions: true,
  });
  return JSON.parse(res.getContentText());
}

// Isi sheet "Produk" dengan daftar produk Mobile Legends + harga level kamu
function tarikProduk() {
  const r = mg('products', { game: 'mobile-legends' });
  const sh = SpreadsheetApp.getActive().getSheetByName('Produk') || SpreadsheetApp.getActive().insertSheet('Produk');
  sh.clear().appendRow(['ID', 'Produk', 'Harga']);
  r.data.forEach(p => sh.appendRow([p.product_id, p.product, p.price]));
}