- Received
merchant_id,client_id, andclient_secretfrom platform admin - Stored
client_secretin a secrets manager (not in source code or environment variables) - Tested token generation via the client credentials flow
- Created at least one counter (POS terminal) via
POST /merchant/api/v1/counters - Saved the counter’s
webhook_secretin your secrets manager
- Implemented token refresh logic (refresh at least 30 s before expiry)
- Implemented webhook endpoint with HMAC-SHA256 signature verification
- Implemented retry/backoff logic for
5xxresponses
- Tested Standard QR flow end-to-end in sandbox
- Tested Reverse QR flow end-to-end in sandbox
- Verified webhook delivery and signature validation
- Contact platform admin to activate your live environment
For sandbox access, base URLs, or credential issues, contact your platform administrator.
