Getting Started

API Access

Create a sandbox key in the dashboard after registration. Live keys (sk_live_) are created after live verification and a signed production agreement.

Paste your merchant secret key in ⚙ Environment (sk_test_… only — no Bearer). The console sends Authorization: Bearer sk_test_… for you.

How checkout works

1. 1Complete KYB in the dashboard for the same mode as your API key.
2. 2Create a store, product, and price (amounts in cents).
3. 3Call POST /api/v1/checkout-sessions — get hosted url + payment.
4. 4Redirect the payer to url. Listen for payment.succeeded webhooks or poll GET /api/v1/payments/{id}.

Webhooks

Register via POST /api/v1/webhook-endpoints. Verify StixFlow-Signature: t=…,v1=… (HMAC-SHA256 of t.body with whsec_…).

Events: payment.succeeded, payment.failed, payment.canceled, payment.refunded.

Flow