# BLOX Documentation

BLOX Documentation

- [Welcome to BLOX](/index): Malaysia's gateway to MYRC — deposit, withdraw, and manage with Payment Gateway (FPX).
- [Getting Started](/user/getting-started): End-user getting started guide for depositing, withdrawing, and managing MYRC in the BLOX wallet.
- [Frequently Asked Questions](/user/faq): Answers to common questions about using BLOX and MYRC.
- [Wallet Basics](/user/wallet-basics): Fundamentals of the BLOX wallet and managing digital assets safely.
- [Deposit MYRC](/user/mint-myrc): Deposit MYRC via Malaysian Internet Banking or an external blockchain transfer.
- [Withdraw MYRC](/user/burn-myrc): Withdraw MYRC to a Malaysian bank account or an external blockchain wallet.
- [Paying with Checkout](/user/checkout-payments): How to pay a merchant BLOX Checkout link from your BLOX wallet.
- [Address Book](/user/address-book): Save frequent wallet addresses to speed up transfers and avoid typos.
- [Bank Accounts](/user/bank-accounts): Manage linked Malaysian bank accounts for MYRC withdrawals.
- [NFT Rewards](/user/nft-rewards): BLOX Beta NFT rewards for early adopters and membership benefits.
- [Leaderboard](/user/referrals): Leaderboard progress and referral invites for the BLOX community.
- [Getting Started](/api/getting-started): What BLOX APIs do, product overview, and a first authenticated call in five minutes.
- [Integration Flows](/api/guide-on-off-ramp): End-to-end sequence diagrams for Wallet transfer/withdrawal, Onramp checkout, and Payout.
- [Authentication](/api/authentication/overview): How to authenticate BLOX merchant API requests with API keys and request signing.
- [API Keys](/api/authentication/api-keys): API key access, blox_pk_ format, headers, and signer public key requirements.
- [Request Signing](/api/authentication/signature): RFC 9421 request signing with Content-Digest, freshness windows, and language samples.
- [Environments & Supported Chains](/api/environments): Sandbox and production base URLs, plus live chains and MYRC tokens from wallet/networks.
- [Error Responses](/api/errors): HTTP error response shape and real auth, signature, and feature-not-enabled messages.
- [Idempotency](/api/idempotency): How the Idempotency-Key header works across every BLOX write endpoint — statuses, the replay window, and when a retry is safe.
- [Webhooks](/api/webhooks): Shared webhook delivery: registration, X-Blox-Signature verification, retries, and URL rules.
- [Rate Limits](/api/rate-limits): Policy rate limits for sandbox and production, including 429 guidance.
- [Wallet API](/api/wallet-api/overview): Read a BLOX wallet, transfer MYRC on-chain, and withdraw MYR to a linked bank account.
- [API Reference](/api/wallet-api/endpoints): Complete Wallet API reference with request and response examples in six languages.
- [Webhook Events](/api/wallet-api/webhooks): Account-level wallet webhook events: credited deposits and the bank transfers they trigger.
- [Onramp API](/api/onramp-api/overview): Accept MYR through a Blox account or FPX and settle MYRC on-chain.
- [API Reference](/api/onramp-api/endpoints): Complete Onramp API endpoint reference for Blox-account, hosted FPX, and direct FPX checkout.
- [Webhook Events](/api/onramp-api/webhooks): CHECKOUT webhook events: the checkout.updated payload and how to handle it.
- [Errors](/api/onramp-api/errors): Onramp error codes and retry rules for every checkout type.
- [Sandbox Testing](/api/onramp-api/sandbox): End-to-end sandbox checks for hosted and direct Onramp checkout.
- [Payout API](/api/payout-api/overview): Fund a prefund balance, create Malaysian bank payouts, and track their outcome.
- [API Reference](/api/payout-api/endpoints): Complete Payout API endpoint reference with request and response examples in six languages.
- [Webhook Events](/api/payout-api/webhooks): Account-level payout webhook events: payout lifecycle and prefund balance changes.
- [Errors](/api/payout-api/errors): Payout error codes; the shared HTTP envelope lives under Errors.
- [Sandbox Testing](/api/payout-api/sandbox): Sandbox payout testing rules driven by the last four digits of the account number.