TrieOH
PayssageAPIOauth

Revoke a payment-provider connection

Revokes a connected provider credential (collector or seller).

POST/providers/{provider}/revoke

Revokes a connected provider credential (collector or seller).

Authorization

bearerAuth
AuthorizationBearer <token>

JWT issued by IdentityX, signed with Ed25519

In: header

Path Parameters

provider*string

Payment provider slug (e.g. mercadopago).

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Request body for revoking a provider connection. Mirrors models.RevokeRequest.

Response Body

application/problem+json

application/problem+json

application/problem+json

application/problem+json

curl -X POST "https://example.com/providers/string/revoke" \  -H "Content-Type: application/json" \  -d '{    "flow": "collector",    "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6"  }'
Empty
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 400,
  "title": "Validation Failed"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 401,
  "title": "Unauthenticated"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 404,
  "title": "Not Found"
}
{
  "detail": "string",
  "instance": "../dictionary",
  "errors": [
    {
      "field": "string",
      "message": "string"
    }
  ],
  "type": "http://example.com",
  "status": 500,
  "title": "Internal Server Error"
}

Payment-provider OAuth callback GET

Browser redirect target: the provider lands here after the user authorizes. Payssage exchanges the code, stores the provider credential, and redirects the browser to the `final_redirect_url` captured at connect time. Public — the provider's OAuth flow cannot send an Authorization header.

Receive a provider webhook POST

Ingestion endpoint called by the payment provider (e.g. MercadoPago) when a payment event occurs. Payssage verifies the provider signature, normalizes the event, stores it, and dispatches deliveries to every webhook endpoint on the event's wallet. Returns 200 even for expected-and-ignored cases (unknown event types, duplicate deliveries) so the provider does not retry; bad signatures return an error. Public — providers cannot send an Authorization header.