it IT en EN
Login
REST JSON Webhooks SDK

Payment APIs for
Fintech Developers

Integrate payments, KYC and open banking into your product in 30 minutes. A single REST API, free sandbox, zero complexity.

Start for free API Documentation
transaction.js 
const roxpay = new Roxpay('sk_test_123');

const payment = await roxpay.charges.create({
  amount: 2000,
  currency: 'eur',
  source: 'tok_visa',
  description: 'Ordine #12345'
});

console.log(payment.status); // 'succeeded'
Partner Central Server master_token_xyz
Affiliate A companyId: 101
Affiliate B companyId: 102
Affiliate C companyId: 103
Partner Architecture

A single integration, infinite sub-merchants

Designed for SaaS platforms, marketplaces, and agencies: our infrastructure allows you to manage payments for tens, hundreds, or thousands of affiliates through a single Master API credential.

There is no need to configure separate credentials for each affiliate. Simply add the companyId={MERCHANT_ID} parameter in the headers or payload of your centralized API requests to operate on behalf of the correct merchant.
Discover how to structure partner payloads
API Security

Robust Authentication with Bearer Token

Security is at the core of RoxPay API v4. Every request to our APIs requires a valid Bearer Token generated using your current API credentials.

  • Exchange client_id and client_secret to get the token.
  • Generated tokens have a strict 12-hour validity (TTL) to reduce exposure risks.
  • Include the token in the Authorization: Bearer <token> header in all subsequent API calls.
Read the OAuth2 authentication guide
Your Server
POST /auth/token
200 OK (Token)
RoxPay Auth
Response 
{
  "access_token": "eyJhbGci...",
  "token_type": "Bearer",
  "expires_in": 43200, // 12 hours
}
Skills

Technology stack for enterprise payments

Native SDKs, managed PCI-DSS security and a complete sandbox. Everything you need to integrate online payments into your product.

Multi-language SDK

Node.js Stable Python Stable PHP Stable Go Stable Java Stable .NET Beta

Built-in PCI-DSS Security

PCI-DSS Level 1: card data never passes through your servers

Automatic client-side tokenisation with end-to-end encryption

Dynamic 3D Secure 2.0 with strong authentication (SCA)

OAuth2 + Bearer Token with automatic key rotation

Learn more about security and anti-fraud

Instant Tokenization

**** **** **** 8785
Cardholder Name
12/26
CT-20260122-01F77C9F7121431
Verified Token

Integrate payments into your product in 30 minutes

Free sandbox. No credit card. First results on the same day.

Activate the free sandbox Talk to an engineer