Construisez avec Inopay

Soumettez le formulaire « Demande d'accès » et recevez sous 24 h une paire client_id / client_secret de test (préfixe sk_test_).

# 1. Submit access request from /developers/sandbox
# 2. Within 24h you receive credentials by email:

INOPAY_CLIENT_ID="ino_client_8XK9R2"
INOPAY_CLIENT_SECRET="sk_test_4bX9...redacted...PqW2"

Échangez vos clés contre un access token Bearer OAuth 2.0 (durée 15 min, scopes explicites).

curl -X POST https://sandbox.getinopay.com/v1/auth/token \
  -H "Content-Type: application/json" \
  -d '{
    "grant_type": "client_credentials",
    "client_id": "$INOPAY_CLIENT_ID",
    "client_secret": "$INOPAY_CLIENT_SECRET",
    "scope": "kyc:read orders:write"
  }'

# Returns: { "access_token": "eyJ...", "expires_in": 900 }
# Use as: Authorization: Bearer sk_test_eyJ...

Récupérez une attestation KYC signée Ed25519 par son identifiant et vérifiez la signature hors-ligne.

curl -X GET https://sandbox.getinopay.com/v1/kyc/attestations/att_4XK9RZ \
  -H "Authorization: Bearer $TOKEN"

# Response 200 OK:
# {
#   "id": "att_4XK9RZ",
#   "version": "1.0",
#   "subject_id": "ino_sub_8a2f",
#   "level": "KYC2",
#   "issued_at": "2026-04-25T08:00:00Z",
#   "expires_at": "2027-04-25T08:00:00Z",
#   "signature": "MEUCIQDk...base64...",
#   "key_id": "staging-2026-04"
# }

Soumettez un ordre vers une SGI partenaire identifiée par rcpt_to. Idempotent par défaut.

curl -X POST https://sandbox.getinopay.com/v1/orders \
  -H "Authorization: Bearer $TOKEN" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "rcpt_to": "sgi_partner_001",
    "kyc_attestation_id": "att_4XK9RZ",
    "instrument": "SNTS.BRVM",
    "side": "buy",
    "qty": 10,
    "limit_price_cents": 1250000
  }'

# 201 Created → { "id": "ord_9Pk2X", "status": "routed" }