Developer integration overview

OpenAPI definitions and a read-only Swagger explorer exist for local engineering. A public merchant integration programme, production API keys and general webhook management are not yet released. This page does not grant API access.

Represent money as integer minor-unit strings with an explicit currency. Keep the same idempotency key for the same operation and do not reuse it for different parameters. Verify the authoritative payment state before fulfilling an order.

Keep server credentials on the server. Treat callback data as untrusted until its signature and scope have been verified. Deduplicate events and reconcile uncertain outcomes. Public integration documentation will describe the approved protocol once it is qualified.