commercial · PUBLIC_SANDBOX
Payments Engine
Existing BondMako engine — externalised, not rebuilt.
commercial family · current maturity PUBLIC SANDBOX.
What it does
Reuses the working internal engine. Target maturity: PRODUCTION_API. Gaps: stripe checkout session proof on v1 create; payment.succeeded customer webhook fanout.
Public API routes
- /api/v1/payments
- /api/v1/invoices/*/payment-links
- /api/invoices/public/*/pay
Sample request
curl -X POST https://bondmako.com/api/v1/payments \
-H "Authorization: Bearer bm_test_..." \
-H "Idempotency-Key: pay_001" \
-H "Content-Type: application/json" \
-d '{"invoiceId":"..."}'Sample response
{ "data": { "id": "...", "url": "https://...", "status": "active" } }Authentication · Security · Sandbox
Bearer API credentials scoped per sandbox/production environment. Scopes and organisation entitlements both must pass. This engine is PUBLIC_SANDBOX — self-serve activate is unlocked in the developer console.
Live pricing reference
Pricing reference: payments offering / payment_link_created meter. Public documentation exposes customer-safe pricing fields only.