Merchant integration

INTEGRATION

Payment acquiring integration

After contracting, merchants receive an ID and secret. Callback endpoints must validate HMAC-SHA256 signatures.

webhook
POST /api/pay/webhook
X-YF-Sign: sha256=...

Deprecated interfaces (do not use)

LEGACY

Debug endpoint (retired in December 2024)

The legacy /api/transfer/debug?simulate=true channel has been deprecated for security reasons and is scheduled for removal. Merchants must use the production acquiring API instead.