Resources and endpoints
A resource is an API object. Each resource has an endpoint, and an individual object is identified using its unique ID.
/v1/orders/:id/FiatPe APIs follow RESTful principles and return all API responses in JSON format, making integrations simple, consistent, and easy to manage. Explore the available APIs, understand request and response formats, and test your integration directly from the documentation.
FiatPe APIs are resource-oriented REST APIs. Requests use standard HTTP methods, parameters, headers, and JSON payloads to work with resources such as orders, payments, refunds, and customers.
A resource is an API object. Each resource has an endpoint, and an individual object is identified using its unique ID.
/v1/orders/:id/Request bodies and responses use JSON. Send the documented content type and validate every response before using its data.
Content-Type: application/jsonUse this base URL for all FiatPe API requests. Append the documented endpoint path to this URL when making an API call.
https://api.fiatpe.com/Follow this recommended flow to begin testing FiatPe APIs in the Test environment and prepare your integration for Live.
Receive your API Key and Salt Key from FiatPe for the required environment.
Build and validate your integration using the FiatPe API base URL with your Test credentials before moving to Live.
Combine your API Key and Salt Key as api_key:salt_key, Base64 encode the complete value, and prefix it with Basic.
Select an API from the sidebar, enter the required headers and parameters, and test the request directly from the documentation.
After successful Test integration validation, replace the Test credentials with your Live credentials to go live.
Build and validate your complete API workflow using Test credentials before enabling Live transactions. Keep credentials and data isolated between the two environments.
Use Test API credentials to develop your integration, validate request payloads, and check success and error responses safely.
Switch to Live credentials only after the Test workflow has been reviewed and validated. Live credentials must remain server-side.
Use the test card details assigned to your FiatPe Test account to validate these common payment outcomes.
Complete a standard card payment and verify the success response, transaction ID, and final payment status.
Expected: successful paymentTrigger the decline scenario assigned to your Test account and confirm that the checkout displays a recoverable error.
Expected: payment declinedValidate the OTP or 3DS challenge flow when it is enabled for your integration, including cancellation and timeout paths.
Expected: authentication challengeSubmit an invalid expiry, CVV, or incomplete card form and verify that validation errors are handled without creating a payment.
Expected: validation errorUse only the test PAN, expiry date, CVV, and authentication values supplied with your FiatPe Test credentials. Contact FiatPe Support if these values are not included in your onboarding details.
Complete these checks before switching to Live credentials.
Use only Test credentials while developing and validating the integration.
Verify successful requests, validation errors, and failed-response handling.
Confirm that duplicate requests, retries, and timeouts are handled safely.
Replace Test credentials with Live credentials only after validation is complete.
Use the HTTP status code and response body together when deciding whether a request succeeded, should be corrected, or can be retried.
The request was accepted and processed.
Review authentication, parameters, or request data.
Retry safely or contact FiatPe Support if the issue continues.
Protect your FiatPe API credentials and integration by following these recommended security practices across Test and Live environments.
Never expose your API Key, Salt Key, or Authorization value in frontend applications, browser code, mobile app bundles, or public repositories.
Keep credentials in environment variables, a secrets manager, or another protected server-side configuration system instead of hardcoding them in source code.
Maintain separate credentials for Test and Live and ensure requests are sent only to the matching environment.
Avoid logging full API keys, Salt Keys, Authorization headers, or other sensitive authentication values in application logs.
Send FiatPe API requests only over secure HTTPS connections to protect credentials and transaction data in transit.
Common terms used throughout the FiatPe API documentation.
Our team is available to help you with API integration, request and response formats, authentication, testing, and Live go-live support.