TopBoostZim developer center

Build with your growth workspace.

Use the dashboard to fund your wallet, choose a package, submit an order, and monitor delivery from one secure workspace.

Live packages

Browse the latest packages and pricing synced into your workspace.

Secure orders

Every order is scoped to your account and checked before submission.

Your API access

Create one personal API key from Settings. Keep it private and rotate it if you suspect it was exposed.

Quick start

1. Fund your wallet. Open Add funds in the dashboard and complete secure hosted checkout.

2. Choose a package. Open New Order, search the live catalog, review the displayed price and quantity limits, then add the target link and quantity.

3. Estimate safely. Prices are calculated from the selected live service and quantity before submission. The server validates the service, rate, quantity, balance, and account ownership again.

4. Track delivery. Order History shows status, service, amount, provider order ID, and creation time for each order.

5. API security. API keys are generated and stored server-side, returned only once, scoped to your account, and should never be committed to client-side code.

6. Need help? Use the Support link in the dashboard or contact the TopBoostZim team.

API reference

Base URL: https://topboostzim.co.zw. Use HTTPS and keep your bearer token server-side.

Authentication

Create an API key in Settings. Send it as a bearer token over HTTPS. Keys are shown only once and must never be placed in browser code, public repositories, or support messages.

Authorization: Bearer tbz_your_api_key

Create an order

Use the service ID from the live catalog, then submit the target URL and quantity. The server validates ownership, limits, balance, pricing, and provider delivery.

curl -X POST https://topboostzim.co.zw/api/orders \
  -H "Authorization: Bearer tbz_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"serviceId":"SERVICE_ID","link":"https://example.com/post","quantity":1000}'

const response = await fetch("https://topboostzim.co.zw/api/orders", {
  method: "POST",
  headers: {
    Authorization: "Bearer tbz_your_api_key",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({ serviceId: "SERVICE_ID", link: "https://example.com/post", quantity: 1000 })
});
const result = await response.json();

import requests

response = requests.post(
    "https://topboostzim.co.zw/api/orders",
    headers={"Authorization": "Bearer tbz_your_api_key"},
    json={"serviceId": "SERVICE_ID", "link": "https://example.com/post", "quantity": 1000},
    timeout=30,
)
print(response.json())

<?php
$ch = curl_init("https://topboostzim.co.zw/api/orders");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_HTTPHEADER => ["Authorization: Bearer tbz_your_api_key", "Content-Type: application/json"], CURLOPT_POSTFIELDS => json_encode(["serviceId" => "SERVICE_ID", "link" => "https://example.com/post", "quantity" => 1000]), CURLOPT_RETURNTRANSFER => true]);
echo curl_exec($ch);

Response and safety guide

Success: HTTP 200/201 returns the created order or API-key metadata. Store the returned API key immediately because the full secret is not shown again.

Validation errors: HTTP 400 means the service, link, or quantity is invalid. HTTP 402 means the wallet balance is too low. HTTP 401 means authentication is missing or invalid.

Rate limits: HTTP 429 means retry with exponential backoff. Do not retry rapidly or create duplicate orders.

Security: Use HTTPS, keep keys server-side, validate webhook/provider responses, redact secrets from logs, and rotate a key immediately if it may be exposed.