Base URLs & Request Format

Base URLs

api-card.inflowpay.com is a separate base URL documented on the server-to-server payment endpoints in the API reference — use it only when your backend sends raw card data to Inflow. Hosted checkout (POST /api/payment), balance, payouts, Connect, and webhooks use the standard API host (api.inflowpay.com / sandbox.api.inflowpay.com). If you use the Inflow SDK for cards, keep the default API URL.

Sandbox: use https://sandbox.api.inflowpay.com with sandbox keys. See Sandbox Environment for access and key prefixes.

URL Prefixes by Resource

Note: Subscription endpoints use a different path prefix than payment endpoints.

Identify the Account Behind a Key

GET /api/me returns the id of the Inflow account that owns the API key making the request, and nothing else. Use it when your platform connects several Inflow accounts and needs to tell them apart, for example to refuse connecting the same account to two of your customers. A sandbox key returns the sandbox account id. The X-On-Behalf-Of header is ignored on this endpoint: the id is always the key owner's.

curl https://api.inflowpay.com/api/me \
  -H "Accept: application/json" \
  -H "X-Inflow-Api-Key: inflow_prod_your_key"

{
  "userId": "usr_AbCdEfGhIjKlMnOpQrStU"
}

Request Format

All API requests use JSON for both request and response bodies.

Headers

Example Request

curl -X POST https://api.inflowpay.com/api/payment \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -H "X-Inflow-Api-Key: inflow_prod_your_key" \
  -d '{
    "products": [{ "name": "Product", "price": 4999, "quantity": 1 }],
    "currency": "EUR",
    "customerEmail": "[email protected]",
    "successUrl": "https://yoursite.com/success",
    "cancelUrl": "https://yoursite.com/cancel"
  }'

Example Response

{
  "paymentId": "pay_abc123",
  "purchaseUrl": "https://checkout.inflowpay.com/pay/pay_abc123"
}

HTTP Methods

HTTP Status Codes

Error Response Format

All errors return a consistent JSON structure:

{
  "statusCode": 400,
  "message": "Validation failed",
  "error": "Bad Request"
}

For validation errors, message may be an array of error strings:

{
  "statusCode": 400,
  "message": [
    "currency must be one of the following values: EUR, USD",
    "customerEmail must be an email"
  ],
  "error": "Bad Request"
}