Developers
OVAAL for developers.
Production SDK and REST API for building against the OVAAL stack. Versioned from day one. Non-custodial by design. Self-host path for enterprise partners. New capabilities land every two weeks.
What we ship.
| Surface | Status | Notes |
|---|---|---|
| TypeScript / JavaScript SDK | v1 · Production | NPM: @ovaal/sdk. Node 18+, browser-compatible. |
| REST API | v1 · Production | OpenAPI 3.1 spec published. |
| Webhook event stream | v1 · Production | Signed events, retries, idempotency keys. |
| React component library | v1 | Partner-brandable UI components. Optional. |
| Python SDK | Q3 2026 | Server-side partners preferring Python. |
| Go SDK | Q4 2026 | REST API is feature-complete meanwhile. |
API versioning.
- Current API:
v1. Production. - Version in URL:
https://api.ovaal.io/v1/... - Deprecation policy: 12-month minimum before any breaking change. Both versions run in parallel during the window.
- Minor changes (additive fields, new endpoints) ship without a version bump.
- Major changes ship as
v2. Partners migrate on their own timeline. - Changelog: published to every partner via RSS and email on each release.
Core API surfaces.
/v1/wallets: create, retrieve, and manage smart-contract wallets for your end-users./v1/ramps: quote, execute, and track on/off-ramp sessions./v1/bill-pay: create and manage recurring bill payment rules./v1/automation: define, simulate, deploy, and revoke automation rules./v1/audit: export audit-log events for your compliance team.
Signed partners get the full API reference, OpenAPI spec, and sandbox credentials on day one of integration.
Self-host path.
Self-host is available for Enterprise-tier partners that need full data residency, air-gapped audit-log retention, or custom sub-processor configurations. Architecture spec available under NDA. Migration from managed to self-host preserves partner identifiers and audit continuity.
Deliberate scope.
- REST + Webhooks, not GraphQL. Simpler surface area, better tooling, easier to audit. Every partner we've scoped has said the same.
- Signed partners, not public docs. API reference, OpenAPI spec, and sandbox are delivered on paperwork. Keeps our surface private and lets partners talk to a human on day one.
- TypeScript SDK first. Covers 90% of integration surface (browser, Node, React Native via WebView). Python and Go follow on partner-demand signal.