Authenticate on the server
Send a secret API key as a Bearer token. Never expose an
sk_ key in browser or mobile code.Make retries safe
Add an
Idempotency-Key to create and update requests that might be retried.Handle errors consistently
Branch on the stable error
type and code, and retain the request ID for support.Check service status
See current PayBridgeNP and provider availability before investigating an integration failure.
Request conventions
Pagination
List endpoints use offset pagination:data array and a meta object with total, limit, and offset. Increase offset by limit until you have read the required range. Do not assume that a short page is permanent when new records can be created during pagination.
Rate limits and retries
Rate-limited API responses return429. Read Retry-After before retrying. Public API responses may also include:
X-RateLimit-LimitX-RateLimit-RemainingX-RateLimit-Reset
429 and 5xx responses with bounded exponential backoff. Use an idempotency key so retrying a write does not create a second resource.
Request IDs
Every response includesX-Request-Id. Error responses repeat the same value as error.request_id. Record it with your application logs and include it when contacting support.
Versioning
The current API is namespaced under/v1. Additive response fields and new enum values may appear without changing the URL, so ignore fields you do not use and handle unknown enum values safely. Breaking request or response changes require a new version or a documented deprecation period.
Start building
Create a checkout
Create a hosted payment session and redirect the customer to its checkout URL.
Confirm a payment
Verify a signed webhook and match status, amount, and currency before fulfillment.