If you do not use our Credit Core or our Authorizer, you will need to implement and expose the “Authorization” and “Adjustments” endpoints in your backend so that we can communicate.
You can test your backend implementation with some typical operations that we will send with a Postman collection included in our public examples repository. You will be able to import the collection into a Postman instance and simulate real requests to your backend, including the signature generation and verification algorithm.
Daily we will send you two files in CSV format via SFTP (Secure File Transfer Protocol) so you can reconcile all transactions between your system and ours.
The endpoint /transactions/authorizations/{type}
allows authorizing debit or credit transactions that come through the online flow to the Authorization stage.
We will send you a request to authorize or reject the transaction.
We expect a quick response to ensure a good experience. If the response is delayed, we will reject the transaction.
In addition to validating the signature we sent you, when generating the response you must sign your body along with the timestamp and the response endpoint with your api-secret after impacting the operation. Please note that we will validate the signature and reject the transaction if the signature does not match or has expired.
You can find more information in Webhook Configuration.
The endpoint /transactions/adjustments/{type}
allows us to make credit and debit adjustments on transactions.
Additionally, through this endpoint, we will send you an adjustment request when the networks (Mastercard or Visa) force a transaction. You may also receive Payments that come to us through the offline flow Compensation stage.
It is not possible to reject transactions from this endpoint. We will always consider them effective and financially impactful, regardless of the response we receive. We will wait for you to inform us of the transaction result in your system. It will not generate changes in our operations, but it may be useful for cases of manual review.
This endpoint is used during reconciliation and online flows, mainly to make adjustments during the settlement process and also in case of refunds.
In addition to validating the signature we sent you, when generating the response you must sign your body along with the timestamp and the response endpoint with your api-secret after impacting the operation. Please note that we will validate the signature and reject the transaction if the signature does not match or has expired.
You can find more information in Webhook Configuration.
This service allows notifying when a transaction is resolved, either by Pomelo or by the network (Mastercard, Visa, etc.).
We expect a response of type 2XX to ensure that the notification was received. Otherwise, we will resend it.
You can find more information in Webhook Configuration.