Environment & credentials

Credentials

Field	Purpose
tenant_id	Merchant ID, sent as a string
app_key	Application identifier belonging to that merchant
app_secret	Used server-side for signing and webhook verification; never included in the request JSON

A mismatched merchant and application may return 202003. After a secret reset, sign with the new secret. Never expose real secrets in chat, logs or client-side pages.

Network & time

Confirm your account’s request-IP requirements with the integration team and send requests from an approved server IP.

Send Unix timestamps in seconds, not milliseconds. Timestamps older than 60 seconds are rejected.

Business dates use YYYY-MM-DD HH:mm:ss; the default business timezone is Asia/Kolkata (UTC+05:30). Confirm the timezone before going live. Unix timestamps do not have a timezone offset appended.