If you are not using our Credit Core or our Authorizer, you will need to implement and expose the “Authorization“ and “Adjustment“ endpoints on your backend so we can communicate.
You can test your backend implementation with some typical operations we will send using a Postman collection included in our public example repository. You can import the collection into a Postman instance and simulate real requests to your backend, including the signature generation and validation algorithm.
We will send you two CSV files daily via SFTP (Secure File Transfer Protocol) so you can reconcile all transactions between your system and ours.
The /transactions/authorizations endpoint allows you to authorize transactions.
A request to authorize or reject the transaction will be sent.
We expect a quick response to ensure a good experience. If the response is delayed, reject the transaction.
In addition to validating the signature we send, when generating the response, you must sign your body along with the timestamp and response endpoint with your api-secret after processing the operation. Keep in mind that we will validate the signature and reject the transaction if the signature does not match or has expired.
You can find more information in the Webhooks Configuration.
The /transactions/authorizations/credit
endpoint allows you to authorize or reject credit transactions.
We expect a quick response to ensure a good experience. If the response is delayed, reject the transaction.
In addition to validating the signature we send, when generating the response, you must sign your body along with the timestamp and response endpoint with your api-secret after processing the operation. Keep in mind that we will validate the signature and reject the transaction if the signature does not match or has expired.
You can find more information in the Webhooks Configuration.
The /transactions/adjustments/{type}
endpoint allows you to make credit and debit adjustments to transactions.
A request informing you that the network (MC, VISA) forced an authorization will be sent.
This endpoint is used during reconciliation and online flows, mainly to make adjustments during the settlement process and also in the event of returns.
In addition to validating the signature we send, when generating the response, you must sign your body along with the timestamp and response endpoint with your api-secret after processing the operation. Keep in mind that we will validate the signature and reject the transaction if the signature does not match or has expired.
You can find more information in the Webhooks Configuration.
This service allows notifications when a transaction is resolved, either by Pomelo or by the brand (Mastercard, Visa, etc.).
We are waiting for a 2XX response to ensure the notification was received. Otherwise, we will send it again.
You can find more information in the Webhooks Configuration.