Base URLs
Use the sandbox environment for development and testing. Sandbox transactions do not move real funds.
Authentication
All API requests require a Bearer token obtained from the authentication endpoint. Tokens expire after 600 seconds (10 minutes).Idempotency
AllPOST, PUT, and PATCH requests require an Idempotency-Key header. This ensures that duplicate requests (e.g. due to network retries) are not processed twice.
payout-{customer_id}-{timestamp}). Keys are scoped to your account.
Rate limits
Requests are rate-limited per API key. If you exceed the limit, you will receive a429 Too Many Requests response. Implement exponential backoff when retrying after rate limit errors.

