SiloDrive NFT integration API
The v1 testnet gateway provisions SiloID-bound wallets, returns short-lived fee quotes, accepts explicitly confirmed image mints, and provides reconciliation and public verification. Protected routes are backend-to-backend only.
Protected endpoints
| Method | Route | Scope | Purpose |
|---|---|---|---|
| POST | /api/testnet-wallet-ensure.php | wallet:ensure | Idempotently provision a testnet wallet. |
| POST | /api/testnet-mint-quote.php | quote:create | Create a hash- and edition-bound fee quote. |
| POST | /api/testnet-nft-mint.php | nft:mint | Confirm and atomically finalize a testnet mint. |
| GET | /api/testnet-nft-status.php?idempotency_key=… | nft:read | Reconcile an uncertain submission. |
Request signing
Send X-Silo-Key-Id, Unix-seconds X-Silo-Timestamp, a unique X-Silo-Nonce, and lowercase HMAC-SHA256 X-Silo-Signature. Sign:
METHOD\nPATH_WITHOUT_QUERY\nTIMESTAMP\nNONCE\nSHA256(EXACT_BODY_BYTES)
Requests expire after 120 seconds. Reused nonces are rejected. SiloDrive must resolve ownership, tenant, immutable version, clean scan state, MIME type, byte size, and asset hash on its server. The browser must never receive the signing secret.
Confirmation and recovery
A quote does not charge tokens. Only Confirm testnet mint may submit the mint. Use a unique persistent idempotency key. After a timeout show Verification pending, query the status endpoint, and never report failure until a terminal response is known.
Public verification
/verify-testnet-nft.php?id={nft_id} exposes only the TESTNET record, canonical owner SiloID, hashes, edition, ledger transaction, timestamp, and validation status. It never exposes private SiloDrive URLs, tenant IDs, metadata text, or sessions.