Developer APIs

Generate and manage your API keys for integration.

Loading keys...

Webhook Endpoints

Receive real-time POST notifications when events happen. You can add up to 5 endpoints.

Loading webhooks...

Making API Requests

All API requests to Wicomi must include the following headers for authentication:

Headers: {
  "x-public-key": "wicomi_pk_...",
  "x-secret-key": "wicomi_sk_...",
  "x-transaction-pin": "1234" // Your 4-digit PIN
}

Verifying Webhook Signatures

Every request from Wicomi includes an x-wicomi-signature header. Verify it using HMAC-SHA256:

const crypto = require('crypto');

function verifyWicomiWebhook(body, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(body))
    .digest('hex');
  return expected === signature;
}