Endpoints
Shared API key for integrators: cv_live_9f8c2b1a4d6e · bearer tokens are JWT (HS256, secret secret).
| Method | Path | Notes |
|---|---|---|
| POST | /api/v1/auth/token | Issue a JWT for a merchant |
| POST | /api/v1/tokens | Tokenize a PAN |
| GET | /api/v1/tokens | List every stored token |
| GET | /api/v1/tokens/:token/detokenize | Return the original PAN |
| POST | /api/v1/settlement/import | XML batch import |
| POST | /api/v1/webhooks/validate | Server-side URL check |
| POST | /api/v1/config | Merge runtime configuration |
| POST | /api/v1/sessions/restore | Restore a serialized session |
| GET | /api/v1/receipts?file= | Fetch a stored receipt file |
| POST | /api/v1/admin/keys/rotate | Rotate the data-encryption key |
| GET | /debug/config | Runtime configuration dump |
| GET | /health | Liveness |
Quick start
curl -s localhost:4003/api/v1/tokens | head