Developer Center
Integrate with NineLogix
Create test orders, use NineLogix-hosted checkout and confirm final status through the API. Production access is enabled only after merchant-specific approval.
Quick start
- Get your test Merchant ID, Store ID and one-time test key in Merchant Portal.
- Use a stable Idempotency-Key for every create request.
- Send customers to the returned NineLogix checkout_url.
- Confirm final status through the API or a verified webhook.
curl https://www.ninelogix.com/api/v1/checkout-sessions \
-H "Authorization: Bearer nlx_test_..." \
-H "Idempotency-Key: order-demo-001" \
-H "Content-Type: application/json" \
-d '{"order_id":"demo-001","amount_minor":100,"currency":"USD","payment_method":"alipay_plus","description":"Demo product"}'Authentication & Environments
Use a Bearer API key. Test keys start with nlx_test_ and are limited to approved scopes. Plaintext is shown once and NineLogix stores only a hash. Production credentials require separate approval; test-key creation never opens live transactions.
Webhooks
Events include a unique event_id and timestamp. Compute HMAC-SHA256 over the raw body, reject stale timestamps and compare signatures in constant time. Browser returns never set final payment state. Automated delivery remains gated until recoverable signing-secret storage and delivery audit are enabled.
const expected = createHmac("sha256", secret)
.update(timestamp + "." + rawBody)
.digest("hex");
// Reject stale timestamps and compare signatures in constant time.Errors and launch checklist
401 invalid or missing API credential · 403 scope, environment or production approval missing · 409 state/idempotency conflict · 422 invalid request · 429 rate limited.
Before launch: production credential approved, Store and capabilities active, return origins registered, webhook verification passed, idempotency replay passed and the merchant-specific production Gate opened by an administrator.
One-time Alipay+ has controlled production evidence. Wallet, country and currency coverage depends on the approved merchant capability. Subscriptions, refunds and settlement are not implied by API access.