Docs

Free Fire Auto Topup API

The Free Fire Auto Topup API is a Free Fire automatic top-up processing solution developed by Hexabot Technologies. It completes orders at the highest average speed that no other API can match. It is primarily built for those who want to set up automated top-up processing through their own stock. You send your Vouchers and UID and it instantly completes the transaction. You send your Garena Shell account details and UID, and it instantly processes your Free Fire UID top-up to the targeted player using your shell accounts. Designed mainly for top-up websites, bots, and apps — with both sync and async endpoints for maximum reliability.

This page covers authentication, every endpoint, every callback format, and every error code the API returns.

বাংলা

Free Fire Auto Topup API হলো Hexabot Technologies কর্তৃক তৈরি একটি Free Fire স্বয়ংক্রিয় টপ-আপ প্রক্রিয়াকরণ সমাধান। এটি সবচেয়ে দ্রুততম গড় গতিতে অর্ডার সম্পন্ন করে — বাজারের অন্য কোনো API এই গতির সাথে পেরে উঠতে পারে না। এটি মূলত তাদের জন্য তৈরি করা হয়েছে যারা নিজেদের স্টকের মাধ্যমে অটোমেটিক টপ-আপ প্রসেসিং চালু করতে চান। আপনি আপনার Voucher এবং UID পাঠালে এটি তাৎক্ষণিকভাবে ট্রানজেকশন সম্পন্ন করে। আপনি আপনার Garena Shell অ্যাকাউন্টের বিস্তারিত তথ্য এবং UID পাঠালে, এটি আপনার Shell অ্যাকাউন্ট ব্যবহার করে নির্ধারিত খেলোয়াড়ের Free Fire UID-এ তাৎক্ষণিকভাবে টপ-আপ প্রক্রিয়া সম্পন্ন করে। এটি মূলত টপ-আপ ওয়েবসাইট, বট এবং অ্যাপের জন্য তৈরি। নির্ভরযোগ্যতার জন্য উভয় Sync এবং Async এন্ডপয়েন্ট সমর্থিত।

Base URL

base url

http://api.hexabot.shop

Authentication

Every request must include your API key in the Authorization header. No Bearer prefix — send the key as-is.

header

Authorization: your_api_key_here

Errors & Status Codes

Auth, limit, and validation failures return JSON with an error message and a machine-readable code.

Authentication errors

Status	Code	Meaning
401	TOKEN_MISSING	Missing API token
401	TOKEN_INVALID	Invalid token
403	TOKEN_EXPIRED	Token expired
429	TOKEN_BANNED	Token temporarily banned due to abuse
429	IP_BANNED	Too many requests — IP temporarily banned
429	BURST_BANNED	Burst limit exceeded — banned temporarily

Limit & server errors

Status	Code	Meaning
401	TOKEN_ERROR	Insufficient limit (need N, have M)
401	TOKEN_ERROR	Token expired on a given date
500	REDIS_ERROR	Token verification error (internal)
503	SHELL_UNAVAILABLE	Shell top-up unavailable
503	OVERLOADED	Server overloaded (high CPU/RAM)
503	QUEUE_FULL	Queue full — try again shortly
503	SERVER_BUSY	Instant endpoint busy — use /topup instead
409	VOUCHER_CONSUMED	Voucher already consumed (permanently banned)

Request validation errors

Status	Code	Meaning
400	INVALID_PLAYERID	Invalid playerid
400	INVALID_VOUCHER	Invalid code — must be SERIAL:PIN format
400	INVALID_VOUCHER	Max 5 vouchers per request exceeded
400	INVALID_VOUCHER	Duplicate voucher in the same request
400	MISSING_PACKAGE	'package' is required for shell orders
400	INVALID_PACKAGE	Unknown package for the chosen shop
400	REGION_UNSUPPORTED	Player region not supported by this shop

POST /topup

Unipin Voucher Top-up

Redeems one or more Unipin voucher codes for a Free Fire player. This is the async endpoint — it accepts the order, responds immediately with processing, then sends the final result to your url as a webhook callback.

Body parameters

Field	Type	Required
orderid	string	required
playerid	string	required
code	string	required
url	string	required

orderid — your own ID, used to track this order and match the callback.
playerid — the Free Fire player UID being topped up.
code — one or more Unipin voucher codes, comma-separated (max 5). Each code is SERIAL PIN.
url — your webhook URL. The order result is POSTed here when processing finishes.

Example request

curl

curl -X POST http://api.hexabot.shop/topup \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "order-001",
    "playerid": "123456789",
    "code": "BDMB-T-S-01885045 6591-4164-9992-5148,BDMB-Q-S-12512238 3357-3436-4346-4621",
    "url": "https://your-webhook.com/callback"
  }'

Immediate response

The server accepts the order and starts processing in the background.

200 OK

status: processing

Callback — all success

Sent to your url once every voucher in the batch has been redeemed.

webhook POST

{
  "status": "success",
  "orderid": "test-001",
  "content": {
    "batch": [
      {
        "uc": "BDMB-Q-S-12513859 5265-6592-7735-1778",
        "ok": true,
        "detail": "✅ Success"
      },
      {
        "uc": "BDMB-Q-S-12513264 6642-2292-1792-2551",
        "ok": true,
        "detail": "✅ Success"
      }
    ],
    "callback_url": "https://testdummy.onrender.com/health"
  },
  "nickname": "KNGᴇꟙᗙᴀᴍᴘɪʀᴇ"
}

Callback — all failed

webhook POST

{
  "status": "failed",
  "orderid": "test-001",
  "content": {
    "batch": [
      {
        "uc": "BDMB-Q-S-12513859 5265-6592-7735-1778",
        "ok": false,
        "detail": "❌ Consumed Voucher"
      },
      {
        "uc": "BDMB-Q-S-12513264 6642-2292-1792-2551",
        "ok": false,
        "detail": "❌ Consumed Voucher"
      }
    ],
    "callback_url": "https://testdummy.onrender.com/health"
  },
  "nickname": "KNGᴇꟙᗙᴀᴍᴘɪʀᴇ"
}

Callback — partial success

Some vouchers redeemed, others failed. Check each batch item's ok field individually.

webhook POST

{
  "status": "partial",
  "orderid": "test-001",
  "content": {
    "batch": [
      {
        "uc": "BDMB-Q-S-12513859 5265-6592-7735-1778",
        "ok": true,
        "detail": "✅ Success"
      },
      {
        "uc": "BDMB-Q-S-12513264 6642-2292-1792-2551",
        "ok": false,
        "detail": "❌ Consumed Voucher"
      }
    ],
    "callback_url": "https://testdummy.onrender.com/health"
  },
  "nickname": "KNGᴇꟙᗙᴀᴍᴘɪʀᴇ"
}

Possible `detail` values

Detail	Meaning
❌ Consumed Voucher	Voucher was already used
Uid is invalid	The provided Player ID doesn't exist
Only BD region supported. Your region: SG	This shop only accepts Bangladesh-server UIDs

POST /topup-instant

Unipin Voucher Top-up — Instant

Same Unipin redemption, but synchronous: the full result comes back in the HTTP response itself. No url field, no callback — useful when you would rather wait on the request than handle a webhook.

Example request

Note the codes use a colon SERIAL:PIN format on this endpoint.

curl

curl -X POST http://api.hexabot.shop/topup-instant \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "order-002",
    "playerid": "123456789",
    "code": "BDMB-T-S-01885045:6591-4164-9992-5148,BDMB-Q-S-12512238:3357-3436-4346-4621,BDMB-I-S-03420017:2334-2751-3366-1131,BDMB-I-S-03421301:6497-3777-3756-4271,BDMB-I-S-03422906:1449-1937-9239-3661"
  }'

Response — all success

200 OK

{
  "status": "success",
  "orderid": "order-002",
  "content": {
    "batch": [
      { "uc": "BDMB-T-S-01885045 6591-4164-9992-5148", "ok": true, "detail": "✅ Success" },
      { "uc": "BDMB-Q-S-12512238 3357-3436-4346-4621", "ok": true, "detail": "✅ Success" },
      { "uc": "BDMB-I-S-03420017 2334-2751-3366-1131", "ok": true, "detail": "✅ Success" },
      { "uc": "BDMB-I-S-03421301 6497-3777-3756-4271", "ok": true, "detail": "✅ Success" },
      { "uc": "BDMB-I-S-03422906 1449-1937-9239-3661", "ok": true, "detail": "✅ Success" }
    ]
  },
  "nickname": "PlayerName"
}

Response — all failed / partial

Same batch shape as the async endpoint — see the /topup examples above for the all-failed and partial-success formats. The same detail values apply (Consumed Voucher, invalid UID, region mismatch).

Supported Vouchers

Each Unipin denomination has both a voucher and gift-card variant, both accepted by code.

Value	Voucher prefix	Gift card prefix
20UC / 25 Diamond	BDMB-T-S-xxxxxxxx	UPBD-Q-S-xxxxxxxx
36UC / 50 Diamond	BDMB-U-S-xxxxxxxx	UPBD-R-S-xxxxxxxx
80UC / 115 Diamond	BDMB-J-S-xxxxxxxx	UPBD-G-S-xxxxxxxx
160UC / 240 Diamond	BDMB-I-S-xxxxxxxx	UPBD-F-S-xxxxxxxx
161UC / Weekly	BDMB-Q-S-xxxxxxxx	UPBD-N-S-xxxxxxxx
405UC / 610 Diamond	BDMB-K-S-xxxxxxxx	UPBD-H-S-xxxxxxxx
800UC / Monthly	BDMB-S-S-xxxxxxxx	UPBD-P-S-xxxxxxxx
810UC / 1240 Diamond	BDMB-L-S-xxxxxxxx	UPBD-I-S-xxxxxxxx
1625UC / 2530 Diamond	BDMB-M-S-xxxxxxxx	UPBD-J-S-xxxxxxxx
2000UC	Wallet-loadable UC — no fixed prefix

POST /topup Garena Shell

Garena Shell Top-up

Tops up Garena Shell on the SG, MY, BD, or Indonesia shop backend. Same /topup endpoint as Unipin — the code field switches it into shell mode. Async: responds immediately, then calls your url with the result.

Body parameters

Field	Type	Required
orderid	string	required
playerid	string	required
code	string	required
package	string	required
qty	integer	required
username	string	required
password	string	required
autocode	string	required
url	string	required

code — which shop backend to use: shell (bdgamebazar.com), sgshell (shop.garena.sg), myshell (shop.garena.my), or indoshell (kiosgamer.co.id).
package — the package code for that shop (see the reference table below).
qty — quantity to purchase.
username / password — your Garena shop account credentials.
autocode — your secret OTP/auth key for that shop account.

Example request

curl

curl -X POST http://api.hexabot.shop/topup \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "shell-001",
    "playerid": "123456789",
    "code": "shell",
    "package": "lvl6",
    "qty": 1,
    "username": "your_username",
    "password": "your_password",
    "autocode": "your_secret_key",
    "url": "https://your-webhook.com/callback"
  }'

Immediate response

200 OK

status: accepted

Callback — single item, success

webhook POST

{
    "status": "success",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {
                "package": "LITE",
                "ok": true,
                "detail": "Success"
            }
        ]
    },
    "nickname": "PlayerName"
}

Callback — single item, failed

webhook POST

{
    "status": "failed",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {
                "package": "LITE",
                "ok": false,
                "detail": "Insufficient Garena shells"
            }
        ]
    },
    "nickname": "PlayerName"
}

Callback — multiple shells, all success

webhook POST

{
    "status": "success",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"},
            {"package": "LITE", "ok": true, "detail": "Success"}
        ]
    },
    "nickname": "PlayerName"
}

Callback — multiple shells, partial / all failed

When any item fails, status is "failed" at the top level even if some items succeeded — check each batch entry's ok field for the real per-item outcome.

webhook POST

{
    "status": "failed",
    "orderid": "ORDER123",
    "content": {
        "batch": [
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"},
            {"package": "LITE", "ok": false, "detail": "Insufficient Garena shells"}
        ]
    },
    "nickname": "PlayerName"
}

POST /topup-instant Garena Shell

Garena Shell — Instant Sync

Same Garena Shell payload as the async /topup endpoint, but synchronous. Drop the url field — the result comes back immediately in the HTTP response, no webhook callback needed.

Example request

curl

curl -X POST http://api.hexabot.shop/topup-instant \
  -H "Authorization: your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "orderid": "shell-001",
    "playerid": "123456789",
    "code": "shell",
    "package": "lvl6",
    "qty": 1,
    "username": "your_username",
    "password": "your_password",
    "autocode": "your_secret_key"
  }'

No url parameter. Response is immediate (no webhook). Formats are identical to the async callback examples above (single success/failed, multiple success/partial/failed). If server is busy, returns HTTP 503.

Response — single shell, success

200 OK

{
    "status": "success",
    "orderid": "shell-001",
    "content": {
        "batch": [
            {
                "package": "LVL6",
                "ok": true,
                "detail": "Success"
            }
        ]
    },
    "nickname": "PlayerName"
}

Response — single shell, failed

200 OK

{
    "status": "failed",
    "orderid": "shell-001",
    "content": {
        "batch": [
            {
                "package": "LVL6",
                "ok": false,
                "detail": "Wrong OTP"
            }
        ]
    },
    "nickname": "PlayerName"
}

Response — multiple shells (qty > 1)

200 OK

{
    "status": "success",
    "orderid": "shell-001",
    "content": {
        "batch": [
            {"package": "LVL6", "ok": true,  "detail": "Success"},
            {"package": "LVL6", "ok": true,  "detail": "Success"},
            {"package": "LVL6", "ok": false, "detail": "Insufficient Garena shells"}
        ]
    },
    "nickname": "PlayerName"
}

Response — server busy

If the instant endpoint is overloaded, use async /topup instead.

503

{
    "error": "Server busy — use /topup for queued processing.",
    "code": "SERVER_BUSY"
}

Shop & Package Reference

code: sgshell — shop.garena.sg backend

Category	Packages
Membership	weekly, monthly, Lite, 3D, 7D, 30D
Level Up	lvl6, lvl10, lvl15, lvl20, lvl25, lvl30, lvlall
Diamonds	25, 100, 310, 520, 1060, 2180, 5600, 11500

code: indoshell — kiosgamer.co.id backend

Category	Packages
Membership	weekly, monthly
Booyah Pass	bp
Diamonds	5, 50, 70, 140, 355, 720, 7290
Level Up	lvl6, lvl10, lvl15, lvl20, lvl25, lvl30, lvlall

code: myshell — shop.garena.my backend

Category	Packages
Membership	weekly, monthly
Diamonds	25, 100, 310, 520, 1060, 2180, 5600, 11500
Other	Lite, 3D, 7D, 30D, lvl6, lvl10, lvl15, lvl20, lvl25, lvl30

code: shell — bdgamebazar.com backend

Category	Packages
Membership	Lite, 3D, 7D, 30D
Level Up	108588 (Lvl 6), 108589 (Lvl 10), 108590 (Lvl 15), 108591 (Lvl 20), 108592 (Lvl 25), 108593 (Lvl 30)

Package names returned in the callback / response

Shop	Package names
BD Shell	LITE, EVO3, EVO7, EVO30, LVL6, LVL10, LVL15, LVL20, LVL25, LVL30
SG / MY Shell	LITE, EVO3, EVO7, EVO30, 25, 100, 310, 520, 1060, 2180, 5600, 11500, Weekly, Monthly
Indo Shell	5, 50, 70, 140, 355, 720, 7290, 36500, 73100, Weekly, Monthly, BP
All regions	LVL6, LVL10, LVL15, LVL20, LVL25, LVL30 (Level Up Pass)

Shell Detail Messages

Possible values for the detail field on shell top-up responses.

Detail
Insufficient garena shells
Wrong OTP
UID is invalid
Inaccurate region
UID region mismatch
Garena server error or wrong shell account
Garena transaction error
Level up pass not eligible

GET /search

Search Previous Orders

Look up any past order by order ID, player ID, or voucher code prefix.

By order ID

curl

curl -X GET "https://api.hexabot.shop/search?orderid=ORDER123" \
  -H "Authorization: your_token_here"

By player ID

curl

curl -X GET "https://api.hexabot.shop/search?playerid=123456789" \
  -H "Authorization: your_token_here"

By voucher code

curl

curl -X GET "https://api.hexabot.shop/search?code=BDMB-T" \
  -H "Authorization: your_token_here"

Example response — Unipin voucher order

200 OK

{
    "count": 1,
    "results": [
        {
            "orderid": "test-001",
            "playerid": "2716319203",
            "order_type": "voucher",
            "status": "success",
            "player_name": "PlayerName",
            "elapsed": 3.21,
            "success_count": 2,
            "total_count": 2,
            "source": "topup",
            "created_at": "2026-06-27T09:00:00",
            "result": {
                "results": [
                    {
                        "serial": "BDMB-Q-S-12513859",
                        "pin": "5265-6592-7735-1778",
                        "success": true,
                        "message": "",
                        "player_name": "PlayerName",
                        "product": "Weekly Membership",
                        "node": "VPS-01"
                    },
                    {
                        "serial": "BDMB-Q-S-12513264",
                        "pin": "6642-2292-1792-2551",
                        "success": true,
                        "message": "",
                        "player_name": "PlayerName",
                        "product": "Weekly Membership",
                        "node": "VPS-01"
                    }
                ]
            }
        }
    ]
}

Example response — Garena Shell order

200 OK

{
    "count": 1,
    "results": [
        {
            "orderid": "ORDER123",
            "playerid": "2716319203",
            "order_type": "shell",
            "status": "success",
            "player_name": "PlayerName",
            "elapsed": 4.32,
            "success_count": 1,
            "total_count": 1,
            "source": "topup",
            "created_at": "2026-06-27T09:00:00",
            "result": {
                "results": [
                    {
                        "package": "LITE",
                        "success": true,
                        "message": "",
                        "node": "VPS-01"
                    }
                ]
            }
        }
    ]
}

Free Fire Auto Topup API

Authentication

Errors & Status Codes

Authentication errors

Limit & server errors

Request validation errors

Unipin Voucher Top-up

Body parameters

Example request

Immediate response

Callback — all success

Callback — all failed

Callback — partial success

Possible detail values

Unipin Voucher Top-up — Instant

Example request

Response — all success

Response — all failed / partial

Supported Vouchers

Garena Shell Top-up

Body parameters

Example request

Immediate response

Callback — single item, success

Callback — single item, failed

Callback — multiple shells, all success

Callback — multiple shells, partial / all failed

Garena Shell — Instant Sync

Example request

Response — single shell, success

Response — single shell, failed

Response — multiple shells (qty > 1)

Response — server busy

Shop & Package Reference

code: sgshell — shop.garena.sg backend

code: indoshell — kiosgamer.co.id backend

code: myshell — shop.garena.my backend

code: shell — bdgamebazar.com backend

Package names returned in the callback / response

Shell Detail Messages

Search Previous Orders

By order ID

By player ID

By voucher code

Example response — Unipin voucher order

Example response — Garena Shell order

Possible `detail` values