Developers
Workbench for API keys, signed requests, webhook delivery, and go-live readiness for the merchant integration.
OverviewWebhooksEventsLogsHealthAPI keys
Your integration
API requests43 passed signature checks
API error distribution1Denied or failed signed requests
Event deliveries43 delivered attempts
Event response time200 OKLatest webhook response
Credential controls
activeActive keyepk_live_51Nf7x_demo_checkout
IP allowlist185.62.75.24/32, 185.62.75.25/32
Last security action
{}Merchant integration handoff
fulfilledWhat happens after the customer pays?
Developer sees the checkout request, captured payment, signed webhook, fulfillment action, and support trace as one business handoff.
int_handoff_school_2026_001Paymentpay_scenario_001
Webhookevt_payment_captured_001
Credentialcred_demo_live_01
Fulfillmentfulfill_school_fee_reference_00041
Merchant backendCreate checkout sessionCan the school create a payable tahsil page?int_step_checkout_sessionreq_school_checkout_001passedCustomer checkoutCapture payment after customer approvalDid customer money move?int_step_customer_capturepay_scenario_001capturedMerchant developerVerify signed payment.captured webhookCan merchant system trust the event?int_step_webhook_verifysha256:8f1d6c0f0f9f1d1a6a7f9c93dd4f0b1d55fb6c4d4f2e2f0a91c1c6f5e8a3a102deliveredMerchant operationsMark student reference paidCan the school stop reminders?int_step_fulfillmentfulfill_school_fee_reference_00041fulfilledSupport and developer opsTrace webhook and request logsCan support prove delivery if merchant asks?int_step_support_tracewha_payment_captured_001customer safe
Integration handoff
| Step ID | Actor | Action | Business question | Result | Evidence | Status |
|---|---|---|---|---|---|---|
| int_step_checkout_session | Merchant backend | Create checkout session | Can the school create a payable tahsil page? | cs_school_2026_001 | req_school_checkout_001 | passed |
| int_step_customer_capture | Customer checkout | Capture payment after customer approval | Did customer money move? | 125,000 IQD | pay_scenario_001 | captured |
| int_step_webhook_verify | Merchant developer | Verify signed payment.captured webhook | Can merchant system trust the event? | 200 OK | sha256:8f1d6c0f0f9f1d1a6a7f9c93dd4f0b1d55fb6c4d4f2e2f0a91c1c6f5e8a3a102 | delivered |
| int_step_fulfillment | Merchant operations | Mark student reference paid | Can the school stop reminders? | SCH-2026-00041 | fulfill_school_fee_reference_00041 | fulfilled |
| int_step_support_trace | Support and developer ops | Trace webhook and request logs | Can support prove delivery if merchant asks? | whend_school_2026 | wha_payment_captured_001 | customer safe |
HealthyYes
Installed5 / 5
Legacy Issues0
| Rule | Table | Type | Status | Enforcement |
|---|---|---|---|---|
| api_keys_no_plaintext_secret | api_credentials | check | installed | block |
| api_keys_unique_hash | api_credentials | unique | installed | block |
| webhook_secrets_hashed | webhook_endpoints | check | installed | block |
| credential_scope_required | api_credentials | check | installed | block |
| ip_allowlist_valid_cidr | api_credentials | check | installed | warn |
| Issue | Rows | Blocks Future |
|---|---|---|
| Plaintext credential audit | 0 | yes |
Statusready for approval
Score92%
Blocking issuesnone
Latest reviewrequested
| Item | Status | Mode | Evidence | Detail |
|---|---|---|---|---|
| Business profile | passed | live | ev_business_profile | Legal name, MCC, and support contacts verified. |
| API keys | passed | live | ev_api_keys | Live key active with scoped permissions and IP allowlist. |
| Webhook delivery | passed | live | ev_webhook_delivery | Destination returns 200 in two consecutive attempts. |
| Payout destination | passed | live | ev_payout_destination | Rafidain destination approved for IQD settlement. |
| Test payment | passed | test | ev_test_payment | Hosted checkout capture and webhook received. |
| Status | Readiness | Score | Requested | Decided |
|---|---|---|---|---|
| requested | ready_for_approval | 92% | Jun 15, 11:30 AM | - |
| Version | Status | Support | Upgrade |
|---|---|---|---|
| 2026-06-14.basra | latest | Current | Upgrade available |
| 2025-12-01.tigris | current | Supported | Current |
API key
Modelive
Tokenepk_live_51Nf7x_demo_checkout
Scopespayments:create, payments:read +2
Last usedJun 15, 2026, 1:42 PM
Request signing
Latest request/v1/checkout/sessions
Statuspassed
Clock drift2s
Endpointapi.eticaretik.example
Test mode+ Date+ Status+ Event type
| Name | Token | Status | Mode | Permissions | Last used | Created |
|---|---|---|---|---|---|---|
| Live checkout server | epk_live_51Nf7x_demo_checkout | active | live | payments:create, payments:read +2 | Jun 15, 1:42 PM | Jun 10, 9:15 AM |
| Test integration key | epk_test_51Nf7x_demo_sandbox | active | test | payments:create, payments:read +1 | Jun 15, 12:58 PM | Jun 9, 3:20 PM |
| Request | Status | Rate limit | Drift | Body hash | Idempotency | Created |
|---|---|---|---|---|---|---|
| /v1/checkout/sessions | passed | allowed | 2 | 9ca2f0e9b1f5a3d2 | checkout_20260615_001 | Jun 15, 1:42 PM |
| /v1/payments/pay_scenario_001/capture | passed | allowed | 1 | 7ed83fb434ff229a | capture_pay_scenario_001 | Jun 15, 1:36 PM |
| /v1/payment_links | passed | allowed | 0 | cce90f98f3a19011 | plink_counter_112 | Jun 15, 1:21 PM |
| /v1/refunds | denied | blocked | 412 | 33b33dfba06d9f20 | refund_test_clock_drift | Jun 15, 12:58 PM |
| Status | Response | Attempt | Created |
|---|---|---|---|
| delivered | 200 | 1 | Jun 15, 1:42 PM |
| delivered | 200 | 1 | Jun 15, 1:42 PM |
| delivered | 200 | 1 | Jun 15, 1:36 PM |
| retry scheduled | 502 | 2 | Jun 15, 12:58 PM |
| Env | Event | Status | Attempts | Created |
|---|---|---|---|---|
| live | payment.captured | delivered | 1 | Jun 15, 1:42 PM |
| live | checkout.session.completed | delivered | 1 | Jun 15, 1:42 PM |
| live | payment.captured | delivered | 1 | Jun 15, 1:36 PM |
| test | refund.created | retry scheduled | 2 | Jun 15, 12:58 PM |