Getting started
Trovewall has two sides. Which pages you need depends on whether you have users to monetise or an action you want performed.
If you have users — publisher
- Create an account and choose Publisher. You can add the advertiser side later from your account settings; it is the same login.
- Create an app. An app is one placement: one offerwall, one pair of keys, one postback URL. A website and its mobile app are two apps even if they share users, because they report different devices.
-
Copy your
app_keyfrom the app page. It is public — it travels in the wall URL — so it identifies, it does not authenticate. Theapp_secretalongside it is what signs API requests and must never leave your server. - Embed the wall or call the offer API.
- Set your postback URL so we can tell your server when to credit a user. Without it nothing reaches your economy.
-
Test end to end with the postback tester in the dashboard,
which sends a signed call with
test=1against real signing.
If you want an action performed — advertiser
- Create an account and choose Advertiser.
- Fund your wallet. Offers do not serve on an empty balance. Top-ups are by SEPA transfer against a reference code — see payments.
-
Create an offer: the action, the price per conversion, the
instructions the user must follow, and your tracking URL with the
{click_id}macro in it. - Target it — countries, devices, operating systems. An untargeted offer serves everywhere, which is rarely what anyone wants.
- Report conversions to your postback URL. See postbacks.
Environments
There is no separate sandbox host. Instead, any conversion carrying
test=1 is recorded, signed and delivered exactly like a real one but
is excluded from billing, from payouts and from every report. That way you test
the real signing path rather than a mock of it.
Rate limits
| Endpoint | Limit | On exceeding |
|---|---|---|
/api/v1/* | 120 requests / minute / key | 429 with Retry-After |
/wall/* | 60 renders / minute / user | Cached wall is served |
/postback/in/* | Not limited | Retry freely; duplicates are safe |
The inbound postback endpoint is deliberately unlimited. Rate-limiting the way an advertiser tells us they owe us money would be a strange thing to do.