Technical Aspects

Learn about the technical and security aspects of our API.

Technical Considerations

• All API requests must be made over HTTPS. Calls made over plain HTTP will fail.

• API calls without Authentication will also fail.

• You will only be able to make hits to our APIs from IPs that you have previously whitelisted from the Tupay Panel (or STG Tupay Panel).

Environments

All integration must be performed from our STG environment, where you can test without risk of any kind.

When you register with us, we will generate an account in the STG environment where you will be able to do the following:

• View transactions created

• Approve and cancel transactions

• Whitelist your IPs, and more

Endpoint domains

Each environment has its own domain. The path of the endpoints doesn't change.

Environment	Domain
Testing	https://api-stg.tupayonline.com/
Production	Provided once you complete the testing

Notes

• You must use the STG Endpoint to integrate.

• The STG and Production environments are not communicated in any way.

• No transaction performed in the STG environment will be reflected in Production and vice versa.

• API Credentials and configurations between environments are also different.