Two-step authentication
Mandatory authenticator setup, one-use recovery codes and limited sessions.
One considered workspace for bank transfers, gateways and merchant operations. Separate flows. Precise access. A connected view.
One reference. One request.
Merchant view + signed notifications
Give each team a focused environment while keeping the operational picture connected.
Keep deposits and withdrawals in a dedicated workspace. Track pending requests, require an independent approver and inspect the full event history.
Inspect test payment connections and routing rules without mixing them into your bank transfer workflow. Follow a payment from creation to its terminal result.
Define what a team member can see and do. Give merchants their own portal, scoped records and server-side integration keys.
Security controls belong in the workflow, from the first login to the final notification.
Mandatory authenticator setup, one-use recovery codes and limited sessions.
Server-enforced permissions, merchant isolation and origin-checked browser requests.
Append-only journals, an audit hash chain and independent withdrawal approval.
HMAC-signed events, durable retry records and stable event identifiers.
Clear request examples, a versioned API contract and a practical notification guide.
Read the integration guide ↗POST /v1/payments
{
"reference": "order-0001",
"amount": "1250.50",
"currency": "TRY",
"method": "BANK_TRANSFER",
"direction": "DEPOSIT"
}Sandbox only · Server-side credentials