● 01
Authentication
Get an API key from Profile → API Keys. All Services API calls use Bearer auth.
Authorization: Bearer sk_live_...
● 02
Create a payment link
One POST returns a hosted checkout URL. Send the customer to it.
curl -X POST https://merchant.codegotech.com/api/service-links \
-H "Authorization: Bearer $KEY" \
-H "Content-Type: application/json" \
-d '{
"amount": 19.90,
"currency": "EUR",
"reference": "ord_12345",
"redirect_url": "https://app.com/ok"
}'● 03
Verify the webhook
Compute HMAC-SHA256 over ts + "." + raw_body and constant-time compare with v1 in the signature header.
// Node.js
const sig = req.headers['x-codego-signature'];
const [t, v1] = sig.split(',').map(p => p.split('=')[1]);
const expected = crypto
.createHmac('sha256', SECRET)
.update(`${t}.${rawBody}`)
.digest('hex');
// crypto.timingSafeEqual(...)● 04
Withdraw to bank
Off-ramp via the dashboard or programmatically. SEPA settles in 1 business day in EUR with FX-locked rate at request.
POST /api/merchant/withdraw-requests
{
"method": "sepa",
"amount": 1000,
"destination": "IT60X..."
}