One REST API for catalog, checkout and payments.
Create a checkout session from your server and redirect the buyer. Authenticate with a secret key, receive signed webhooks, and test everything in the sandbox first.
A payment in four steps.
Create a sandbox account, generate a test key, open a checkout session and send the buyer to the URL you receive. Your server learns the result through a webhook.
- Bearer authentication with sk_test_ or sk_live_ keys
- Amounts in cents, prices taken from your catalog
- Idempotency-Key header on creation requests
- JSON in, JSON out
What you can do from your backend.
Catalog and pricing
Create stores, products, variants and prices, one-off or recurring.
Checkout and payments
Open a hosted checkout session, list payments, then refund or cancel from the same API.
Webhook endpoints
Register endpoints and receive payment succeeded, failed, canceled and refunded events.
Signed events you can trust.
Each event carries a StixFlow-Signature header with a timestamp and an HMAC-SHA256 signature of the body. Verify it with your endpoint secret before acting.
- Reject events with an old timestamp
- Answer with a 2xx status once the event is stored
- Replay a delivery from the dashboard when needed
Everything you need to integrate.
Documentation and API console
Guides and a console to call the API with your own test key.
Open the documentation →API reference
Every endpoint, parameter and response, with the OpenAPI specification.
Open the reference →Security
How keys, webhooks and data are protected, and how to report a vulnerability.
Read the security page →Get your test keys.
Create a sandbox account and make your first API call in a few minutes. Live keys follow once your business is verified.