Phylax iGPhylax sends signed, idempotent webhook events to your Player Account Management system. Add Profit Shield, P2P loyalty swaps and instant claim insurance by building one receiver endpoint. Phylax never holds player funds — your PAM stays the system of record.
One signed round-trip. A player action becomes an HMAC-signed event, delivered to your PAM, which performs the real wallet action and returns 200.
A player triggers a feature in the embeddable widget — e.g. lock part of their balance with Profit Shield.
Phylax emits an HMAC-SHA256 signed, idempotent webhook event with an X-Phylax-Signature header.
Your receiver verifies the signature, maps event_type to a wallet action, and returns 200. Done.
You don't replace your PAM — you extend it. Your engineers build one receiver endpoint using our OpenAPI spec and copy-paste verification snippets. Test against our Sandbox PAM, then flip a single switch from sandbox to production.
Every event is signed with HMAC-SHA256; receivers verify before acting.
Unique event IDs mean a retry never double-fires a payout.
Durable retry queue with exponential backoff and a delivery-health cockpit.
Transparent per-interaction settlement, exportable per operator per month.
What you'll see is not a mockup. It's the actual production system running in sandbox mode — going live is the same system, one switch flipped.