API & SDK

An API built for builders

A REST API with OpenAPI 3.1, idempotency keys, cursor pagination, and SDKs in JavaScript, Python, PHP, Ruby, Go and C#.

Developer working with the Baynoy API

<150ms

P50 API latency

99.95%

Uptime SLA

6

Official SDKs

  • OpenAPI 3.1 spec
  • Idempotency keys
  • Cursor pagination
  • Bearer auth
  • HMAC webhooks
  • Sandbox + test cards
  • 6 official SDKs
  • 1,000 req/sec rate limit
  • 99.95% uptime SLA

Create a charge

One endpoint, thirty methods

POST a single resource and Baynoy figures out the rest — card, Apple Pay, Google Pay. Set the destination currency and we route the payout to your bank or wallet at settlement.

  • Idempotency-Key prevents double-charges on retry
  • Cursor pagination for high-volume reports
  • Inline 3DS challenge with checkout_url
  • Sandbox keys never touch real money

Request

POST /v1/payments
Authorization: Bearer sk_live_••••
Idempotency-Key: 7a1f2e

{
  "amount": 125000,
  "currency": "EUR",
  "payout":  { "type": "bank", "currency": "TRY" },
  "methods": ["card","usdc","sepa"],
  "metadata": { "patient_id": "p_8821" }
}

Response

{
  "id": "pmt_a7c91...",
  "status": "requires_action",
  "checkout_url": "https://pay.baynoy.com/c/a7c91"
}

Quickstart

# No SDK to install — it's a plain REST API.
# Create a payment link from any HTTP client:
curl https://baynoy.com/api/v1/payment-links \
  -H "Authorization: Bearer sk_live_..." \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{"title":"Invoice 0042","amount":2000,"currency":"USD"}'

REST API

Call it from any language

A plain REST API with Bearer auth — no SDK to install. Call it from curl, fetch, requests or any HTTP client. Built for production: versioned responses, idempotent retries, signed webhooks and cursor pagination.

  • Stable, versioned responses via the Baynoy-Version header
  • Idempotency-Key on every POST — retries never double-charge
  • HMAC-SHA256 signed webhooks (t=…,v1=…)
  • Cursor pagination on every list endpoint
Read the docs

Webhooks

Events you can trust

Every webhook is signed with HMAC SHA-256, retried with exponential backoff for up to 7 days, and browseable in your dashboard with full request / response history. Replay any past event with one click.

  • HMAC SHA-256 signed payloads
  • 8 event types covering the full payment lifecycle
  • Exponential backoff up to 7 days
  • One-click replay from dashboard
Manage endpoints

Signed event

POST /your-endpoint
Baynoy-Signature: t=1716210000,v1=8b3...
Content-Type: application/json

{
  "id": "evt_2zX...",
  "type": "payment.succeeded",
  "data": { "object": { "id": "pmt_a7c91..." } }
}

Get a key, send a charge

Sandbox keys ship immediately. Production unlocks after Tier 1 verification.