Reference

API documentation

Authenticate with an X-API-Key header. One API key per account. Secrets are hashed and shown once.

Authentication

header
X-API-Key: hk_your_secret

GET /api/v1/account

Returns the key prefix, remaining checks, and VIP status.

curl https://brightchecker.online/api/v1/account \
  -H "X-API-Key: YOUR_API_KEY"

Response example

json
{
  "success": true,
  "key": "hk_live_a1b",
  "checks": 50,
  "vip": true
}

GET /api/v1/check

List available endpoints.

curl https://brightchecker.online/api/v1/check

Response example

json
{
  "success": true,
  "endpoints": [
    {
      "name": "ff-create",
      "display": "Free Fire account create (free)",
      "endpoint": "/api/v1/ff/create"
    },
    {
      "name": "bin-lookup",
      "display": "BIN lookup (free)",
      "endpoint": "/api/v1/bin-lookup"
    },
    {
      "name": "bin-search",
      "display": "BIN search (free)",
      "endpoint": "/api/v1/bin-search"
    }
  ]
}

POST /api/v1/ff/create

Free Fire guest account create. Free. Limit 10 requests per second per key. Proxy required.

curl -X POST https://brightchecker.online/api/v1/ff/create \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"proxy":"http://user:pass@host:port","region":"ME","name":"You"}'

Response example

json
{
  "success": true,
  "uid": 7664160959,
  "password": "You_Public-XXXX",
  "name": "You",
  "id": 18008055384,
  "access_token": "...",
  "jwt_token": "...",
  "region": "ME",
  "status_code": 200
}

POST /api/v1/bin-lookup

Look up a 6-digit BIN. Free. Limit 10 requests per second per key.

curl -X POST https://brightchecker.online/api/v1/bin-lookup \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"bin":"424242"}'

Response example

json
{
  "success": true,
  "found": true,
  "bin": "424242",
  "brand": "VISA",
  "type": "CREDIT",
  "level": "CLASSIC",
  "bank": "STRIPE PAYMENTS UK LTD",
  "country": "UNITED KINGDOM",
  "iso": "GB",
  "flag": "🇬🇧"
}

POST /api/v1/adyen/encrypt

Encrypt card fields with an Adyen public key (e|n). Body: adyenKey = e|n, card = number|mm|yyyy|cvc.

curl -X POST https://brightchecker.online/api/v1/adyen/encrypt \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"adyenKey":"10001|MODULUS","card":"4111111111111111|03|2030|737"}'
json
{
  "success": true,
  "generationtime": "2026-09-16T16:13:00.000Z",
  "encryptedCardNumber": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJ2ZXJzaW9uIjoiMSJ9....",
  "encryptedExpiryMonth": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJ2ZXJzaW9uIjoiMSJ9....",
  "encryptedExpiryYear": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJ2ZXJzaW9uIjoiMSJ9....",
  "encryptedSecurityCode": "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJ2ZXJzaW9uIjoiMSJ9...."
}

POST /api/v1/bin-search

Search BINs by brand, type, bank, country, or BIN. Free. Max 50 results.

curl -X POST https://brightchecker.online/api/v1/bin-search \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"visa turkey"}'

Response example

json
{
  "success": true,
  "qury": "visa turkey",
  "count": 2,
  "results": [
    {
      "BIN": "454360",
      "Brand": "VISA",
      "Type": "CREDIT",
      "Level": "CLASSIC",
      "Bank": "EXAMPLE BANK",
      "Country": "🇹🇷 TURKEY",
      "iso": "TR"
    }
  ]
}

POST /api/v1/stripe/sk-info

Returns name, domain, country, balance, and status for a Stripe account. Body: sk = your Stripe secret key.

curl -X POST https://brightchecker.online/api/v1/stripe/sk-info \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"sk":"sk_live_..."}'

Response example

json
{
  "success": true,
  "name": "Acme Corp",
  "domain": "acme.com",
  "account_id": "acct_1AbcXYZ",
  "country": "US",
  "default_currency": "usd",
  "charges_enabled": true,
  "payouts_enabled": true,
  "livemode": true,
  "balance": {
    "available": { "USD": 1234.56 },
    "pending":   { "USD": 89.00 }
  }
}

Telegram Mini App

Open Bright from your account in telegram it will sign in automatically. The public site still works in a normal browser.