Partners
Authentication
Partner API keys, test vs live, whoami, and idempotency.
API keys
Orqpay issues Partner API keys. Authenticate with:
Authorization: Bearer pt_test_...| Prefix | Environment |
|---|---|
pt_test_ | Test |
pt_live_ | Live (partner must be active) |
Environment comes from the key prefix. Do not send environment in request bodies.
Suspended partners cannot use any key.
Whoami
curl http://api.localhost:4000/v1/partner/whoami \
-H "Authorization: Bearer pt_test_..."Returns partnerId, name, status, environment, and apiKeyId.
Idempotency
Creates that change state (merchants, invoices, …) require an Idempotency-Key header. Replays with the same key and same body return the original result. A different body with the same key returns IDEMPOTENCY_CONFLICT.
Rate limits
100 requests/minute per Partner API key. Exhaustion returns 429 with code RATE_LIMITED.