DEVELOPERS

API yang sederhana.
Lifecycle yang jelas.

Public contract dirancang eksplisit, mudah diaudit, dan aman untuk retry.

PAYMENTS API

Create once.
Track predictably.

Merchant membuat payment intent, mendapat payment ID, lalu menerima status melalui API atau webhook.

Server-only keys Idempotent writes Signed webhook Explicit auth
POST /api/v1/paymentsJSON
{
  "externalId": "ORDER-1001",
  "amount": 50000,
  "method": "QRIS"
}
WEBHOOK

Callback harus
bisa diverifikasi.

Payload nantinya memiliki event ID, timestamp, dan signature.

Verify signature
Validate timestamp
Deduplicate event ID
Return 2xx after processing
Allow retry safely
Audit delivery attempts