Base URLs
Both environments expose the same endpoints. Use sandbox for development and testing — no real funds are involved.
Authentication
All requests require a Bearer token in theAuthorization header:
Request format
- Request bodies use
Content-Type: application/json - All IDs are prefixed strings (e.g.,
acct_,bene_,quote_,txn_) - Amounts are decimal strings in major units (e.g.,
"10.50")
Response format
- Successful responses return the resource directly (single object) or a paginated list
- Error responses follow a standard envelope with
code,message, andrequestId - Every object includes an
objectfield identifying its type