Built for builders.

One versioned REST API for payments, accounts, payouts, settlement and compliance. Built so that retries are safe, events are verifiable and the sandbox tells you the truth about production.

Request documentation access

Full API reference and sandbox credentials are available to clients and partners under agreement.

Create a paymentv1

POST /v1/payments
Idempotency-Key: 7f1c2e0a-9b54-4d0e-a3c1

{
  "amount": 12500,
  "currency": "EUR",
  "method": "card",
  "routing": { "strategy": "approval", "cascade": true },
  "settlement": { "account": "acc_eur_main" },
  "reference": "order_48213"
}

Design principles

Predictable by design.

Idempotent writes

Every write accepts an idempotency key, so a network retry can never create a second payment or payout.

Signed webhooks

Events are signed and timestamped. Verify the signature and reject replays with a few lines of code.

Versioned and stable

Breaking changes ship as a new version. Your integration keeps working on the version you built against.

Sandbox parity

The sandbox simulates declines, 3-D Secure challenges, cascading retries, settlement and returns.

Traceable requests

Every response carries a request ID that our support team can trace end to end.

Scoped credentials

API keys are scoped by environment and permission, and can be rotated without downtime.

Resources

One API, every resource.

Every resource follows the same conventions for pagination, errors, metadata and events.

Core resourcesREST, JSON

Resource	Purpose
/payments	Authorise, capture, refund and route
/payment-methods	Tokenised cards, accounts and wallets
/accounts	Balances and account details
/transfers	Movements between accounts
/payouts	Funds out to banks, cards and wallets
/settlements	Settlement batches and line items
/conversions	Foreign exchange quotes and trades
/disputes	Chargebacks and evidence
/onboarding	KYB cases, documents and decisions
/events	Every state change, replayable

From sandbox to production.

Sandbox: Full-featured test environment with simulated providers, declines, challenges, settlement and returns. No real funds move.
Production: Opened after due diligence and a go-live review of your integration.
Authentication: Secret API keys over TLS, scoped by environment and permission. Optional IP allow-listing.
Webhooks: Signed with HMAC-SHA256 and retried with exponential backoff until acknowledged.
Hosted components: Hosted checkout and card fields keep card data out of your environment and reduce your PCI DSS scope.

Get access to the full reference.

Documentation, sandbox keys and a technical contact are shared once we have scoped your integration.

Request access Platform overview