Skip to content

API Overview

Protocol Rules

Request data format: application/x-www-form-urlencoded

Response data format: JSON

Character encoding: UTF-8

Signature algorithm: SHA256WithRSA

V2 Upgrade Notes

  • V2 APIs use the RSA signature algorithm. V1 APIs use the MD5 signature algorithm.
  • V2 APIs use new endpoint URLs and support refunds, transfers and more. V1 APIs use submit.php and mapi.php to submit orders.
  • V2 APIs add the timestamp parameter in requests and responses for timestamp validation.

Get an RSA Key Pair

In the merchant dashboard, open Profile -> API Information and click Generate Merchant RSA Key Pair. Save the merchant private key carefully. You only need the platform public key and the merchant private key when integrating APIs.

Legacy API Documentation