Base URLs
| Environment | Base URL |
|---|---|
| Production | https://api.yativo.com/api/v1 |
| Sandbox | https://smtp.yativo.com/api/v1 |
Authentication
All API requests require a Bearer token obtained from the authentication endpoint. Tokens expire after 600 seconds (10 minutes).Idempotency
AllPOST, PUT, and PATCH requests require an Idempotency-Key header. This ensures that duplicate requests (e.g. due to network retries) are not processed twice.
payout-{customer_id}-{timestamp}). Keys are scoped to your account.
Rate limits
Requests are rate-limited per API key. If you exceed the limit, you will receive a429 Too Many Requests response. Implement exponential backoff when retrying after rate limit errors.
Standard response format
All successful responses follow this structure:Error codes
| Status Code | Meaning |
|---|---|
200 | OK — Request succeeded |
201 | Created — Resource created successfully |
400 | Bad Request — Invalid request parameters |
401 | Unauthorized — Missing or invalid token |
404 | Not Found — Resource does not exist |
422 | Unprocessable Entity — Validation failed |
429 | Too Many Requests — Rate limit exceeded |
500 | Internal Server Error — Something went wrong on our end |
Error response format
KYC platform
Certain KYC submission endpoints are hosted on a separate platform:| Platform | Base URL |
|---|---|
| KYC API | https://kyc.yativo.com |
| Individual KYC | https://kyc.yativo.com/individual/{customer_id} |
| Business KYB | https://kyc.yativo.com/business/{customer_id} |

