1. Authentication and Security
- Requirements
- Signature
| Requirement | Description |
|---|---|
| HTTPS | All requests must be sent over HTTPS. |
| JSON | Requests and responses use JSON. |
| API key | A valid API key issued to the merchant is required. |
| API prefix | External endpoints use the /api/v1 prefix. |
| Money format | Monetary fields use decimal strings, for example "250000". |
message = X-Timestamp + raw_request_body
signature = HMAC_SHA256(api_secret, message)
For GET requests, use an empty request body. Send the result in X-Signature with the X-Timestamp value used to calculate it.
Use an ISO-8601 UTC value for X-Timestamp, for example 2026-09-21T10:00:00Z.