Hosted whitelabel

A whitelabel domain serves the same application app.oropocket.com serves, with your brand applied at runtime from the hostname. There is no bundle to build, no repository to fork and nothing to deploy on your side — the work is a DNS record, a logo and a review.

1. Point a subdomain at us

Create a CNAME from the subdomain you want — most partners use something like gold.yourbank.com — to:

gold.yourbank.com.   CNAME   whitelabel.oropocket.com.

That indirection is deliberate: it means we can move infrastructure without asking every partner to change a record. We follow a CNAME chain up to five hops, so a record pointing through your CDN is fine.

Use Check DNS in the panel to confirm. It is rate-limited to ten checks a minute; propagation usually takes a few minutes and occasionally longer.

2. What hostnames we accept

Paste a full URL if it is easier — we strip the scheme, path and port and lower-case what is left.

3. Your brand

You need a logo or a wordmark before you can submit; both is better. Images must be served over https — you can upload them in the panel and we will host them.

4. Your sign-in page

The first thing your users see. Leave any field empty to keep our wording.

Before you are live, copy edits apply immediately. Once you are live they queue for review — and your site keeps serving the previously approved copy while they wait, so nothing goes blank. Your domain and certificate are untouched by a copy change.

5. Review, then provisioning

Submitting locks your domain and queues a human review. We re-check DNS at that moment rather than trusting the last check from your panel, so a record removed in between will fail the submission.

Changing a live domain is not self-serve — talk to us. Plan the name accordingly.

6. What a whitelabel session is

When someone signs in on your domain we stamp their session to you, from the request's origin. That stamp is what makes the rest work: every buy and sell they make is routed through you, earns your commission as integration, and lands in your sub-wallet.

7. What you can call

Whitelabel grants the full server-to-server surface plus gifting and sending — twelve capabilities, the union of the Raw API and Gifting bundles. You do not get the embed capability, because the point of a whitelabel domain is not using our hosted UI. If you want both, ask for the hosted use case as well.

Everything in the Raw API guide works against your users, and webhooks fire as normal.

8. What this is not

Worth knowing before you plan around it.

9. Branding, if you need it yourself

Your brand is public and unauthenticated, so you can read it from your own marketing site if that is useful.

{
  "statusCode": 200,
  "data": {
    "partnerId": 42,
    "wordmark": "YOURBANK GOLD",
    "logoUrl": "https://api.oropocket.com/uploads/....png",
    "iconUrl": "https://api.oropocket.com/uploads/....png",
    "accent": "#000000",
    "login": {
      "heading": "Own real 24K gold, backed by YourBank.",
      "subheading": null,
      "trust": ["BANK-GRADE VAULTS", "SELL ANYTIME", null],
      "showRates": true
    }
  }
}

It never fails — an unknown host returns OroPocket's own defaults rather than an error. Note that branding resolving for a host does not mean the host is live: serving also needs the certificate and the vhost from step 5.