Do primeiro request ao webhook em poucos minutos.

Authorization: Bearer SUA_API_KEY

curl https://api.nexorapay.me/v1/auth/check \
  -H "Authorization: Bearer SUA_API_KEY"

{
  "data": {
    "object": "api_key_connection",
    "authenticated": true,
    "environment": "LIVE",
    "tenant_id": "00000000-0000-4000-8000-000000000001",
    "merchant_id": "00000000-0000-4000-8000-000000000002",
    "api_version": "v1"
  }
}

curl -X POST https://api.nexorapay.me/v1/payments \
  -H "Authorization: Bearer SUA_API_KEY" \
  -H "Idempotency-Key: pedido_123_pix" \
  -H "Content-Type: application/json" \
  -d '{
    "payment_method": "PIX",
    "amount_minor": 15000,
    "currency": "BRL",
    "payer": {"name": "Cliente Exemplo", "tax_id": "12345678901"},
    "client_reference": "pedido_123"
  }'

{
  "data": {
    "payment_id": "4b4550f0-e42d-4e88-a0d4-c0580f55a121",
    "payment_method": "PIX",
    "status": "CREATED",
    "environment": "TEST",
    "card_experience": null
  }
}

curl -X POST https://api.nexorapay.me/v1/payments \
  -H "Authorization: Bearer SUA_API_KEY" \
  -H "Idempotency-Key: pedido_124_boleto" \
  -H "Content-Type: application/json" \
  -d '{
    "payment_method": "BOLETO",
    "amount_minor": 25990,
    "currency": "BRL",
    "payer": {"name": "Cliente Exemplo", "tax_id": "12345678901"},
    "due_date": "2026-12-15",
    "client_reference": "pedido_124"
  }'

curl -X POST https://api.nexorapay.me/v1/payments \
  -H "Authorization: Bearer SUA_API_KEY" \
  -H "Idempotency-Key: pedido_125_card" \
  -H "Content-Type: application/json" \
  -d '{
    "payment_method": "CARD",
    "amount_minor": 39990,
    "currency": "BRL",
    "payer": {"name": "Cliente Exemplo", "tax_id": "12345678901"},
    "due_date": "2026-12-15",
    "card_installments": 3,
    "client_reference": "pedido_125"
  }'

curl https://api.nexorapay.me/v1/payments/{payment_id} \
  -H "Authorization: Bearer SUA_API_KEY"

{
  "data": {
    "payment_id": "4b4550f0-e42d-4e88-a0d4-c0580f55a121",
    "payment_method": "PIX",
    "amount_minor": 15000,
    "currency": "BRL",
    "status": "PAID",
    "succeeded_refund_amount_minor": 0,
    "open_refund_amount_minor": 0,
    "client_reference": "pedido_123",
    "due_date": null,
    "card_installments": null,
    "created_at": "2026-10-05T18:30:00Z",
    "updated_at": "2026-10-05T18:31:04Z",
    "paid_at": "2026-10-05T18:31:04Z",
    "artifacts": [],
    "card_experience": null
  }
}

curl https://api.nexorapay.me/v1/balances \
  -H "Authorization: Bearer SUA_API_KEY"

curl -X POST https://api.nexorapay.me/v1/withdrawals \
  -H "Authorization: Bearer SUA_API_KEY" \
  -H "Idempotency-Key: saque_12345678" \
  -H "Content-Type: application/json" \
  -d '{
    "requested_amount_minor": 10000,
    "currency": "BRL",
    "destination": {"type":"PIX_KEY","pix_key_type":"EVP","pix_key":"sua-chave-pix"},
    "client_reference": "saque_123"
  }'

Idempotency-Key: pedido_123_pix

GET https://api.nexorapay.me/v1/payments?limit=50

Resposta:
{"data":{"object":"payment_list","items":[...],"next_cursor":"<cursor_opaco>"}}

GET https://api.nexorapay.me/v1/payments?limit=50&cursor=<cursor_opaco>

X-Arche-Event-Id: <uuid>
X-Arche-Delivery-Id: <uuid>
X-Arche-Timestamp: <unix_seconds>
X-Arche-Signature: v1=<hex_hmac_sha256>

signing_input = X-Arche-Timestamp + '.' + raw_request_body

import {createHmac,timingSafeEqual} from "node:crypto";

function verifyWebhook({secret,timestamp,rawBody,signature}) {
  const ts = Number(timestamp);
  if (!Number.isSafeInteger(ts) || Math.abs(Date.now()/1000-ts)>300) return false;
  if (!/^v1=[0-9a-f]{64}$/.test(signature) || !Buffer.isBuffer(rawBody)) return false;
  const expected = createHmac("sha256", secret)
    .update(timestamp + ".").update(rawBody).digest();
  const received = Buffer.from(signature.slice(3), "hex");
  return received.length === expected.length
    && timingSafeEqual(received, expected);
}

{
  "error": {
    "code": "permission_denied",
    "message": "The API key does not have permission for this operation.",
    "request_id": "req_01H..."
  }
}