Getting started

All requests are made over HTTPS to the base URL issued with your merchant account. Requests without a valid API key return 401.

1. Get your keys

Sign in to the merchant dashboard and create a sandbox key. Keys are shown once; store them in a secret manager.

2. Create a checkout session

curl -X POST "$BASE_URL/v1/checkout/sessions" \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"amount": 2500, "currency": "USD", "return_url": "https://example.com/done"}'

3. Handle the webhook

Listen for checkout.session.completed and verify the PWM-Signature header before fulfilling the order.