NineLogix

Developer Center

Integrate with NineLogix

Create test orders, use NineLogix-hosted checkout and confirm final status through the API. Production access is enabled only after merchant-specific approval.

Quick start

  1. Get your test Merchant ID, Store ID and one-time test key in Merchant Portal.
  2. Use a stable Idempotency-Key for every create request.
  3. Send customers to the returned NineLogix checkout_url.
  4. Confirm final status through the API or a verified webhook.
curl https://www.ninelogix.com/api/v1/checkout-sessions \
  -H "Authorization: Bearer nlx_test_..." \
  -H "Idempotency-Key: order-demo-001" \
  -H "Content-Type: application/json" \
  -d '{"order_id":"demo-001","amount_minor":100,"currency":"USD","payment_method":"alipay_plus","description":"Demo product"}'

Authentication & Environments

Use a Bearer API key. Test keys start with nlx_test_ and are limited to approved scopes. Plaintext is shown once and NineLogix stores only a hash. Production credentials require separate approval; test-key creation never opens live transactions.

Webhooks

Events include a unique event_id and timestamp. Compute HMAC-SHA256 over the raw body, reject stale timestamps and compare signatures in constant time. Browser returns never set final payment state. Automated delivery remains gated until recoverable signing-secret storage and delivery audit are enabled.

const expected = createHmac("sha256", secret)
  .update(timestamp + "." + rawBody)
  .digest("hex");
// Reject stale timestamps and compare signatures in constant time.

Errors and launch checklist

401 invalid or missing API credential · 403 scope, environment or production approval missing · 409 state/idempotency conflict · 422 invalid request · 429 rate limited.

Before launch: production credential approved, Store and capabilities active, return origins registered, webhook verification passed, idempotency replay passed and the merchant-specific production Gate opened by an administrator.

Current boundaries

One-time Alipay+ has controlled production evidence. Wallet, country and currency coverage depends on the approved merchant capability. Subscriptions, refunds and settlement are not implied by API access.