Metod Type:GET

Sample Response Body:

{ "status": "Success", "statusCode": 0, "statusDesc": "Merchant Onboarded successfully", "data": { "results": { "success": { "merchantOnboardingDetails": { "merchantId": 20250526131940433, "apiOperation": "87", "programType": "PG", "programName": "PayFac", "requestId": "000000000000000000", "merchantName": "Ecom Holdings Online Inc", "iosAppStoreUrl": "https://appstoretest.com", "googlePlayStoreUrl": "https://playtest.com", "vat": "1234567890123Z1", "tin": "4545CC8787897", "merchantLogoUri": "https://example.com/ecom-online-ltd/images/ecom-logo.png", "merchantUri": "https://example.com/ecom-online-ltd/basket.html", "refundReturnsPolicyUrl": "https://test.com/refund&return.html", "companyDbaName": "FieldTestMerchant01_update12", "corporateTax": "78687678", "paymentProcessor": "ISU", "cardAcceptance": "MC", "acceptanceCurrency": "AED", "settlementCurrency": "AED", "maximumTransactionSize": 999999.00, "annualVolume": 999999999.00, "integrationMode": "API", "threeDsRequired": "Y", "tokenizationRequired": "Y", "merchantCountryCode": "356", "recurringBy": "Merchant", "sale": "Y", "preauth": "Y", "preauthcomp": "Y", "refund": "Y", "voidTransaction": "N", "isDcc": "N", "multiClearingCapture": "N", "isInternationalCardAcceptance": "N", "merchantCategoryCodes": "1234", "merchantAccount": "{\"accountType\":\"CURRENT\",\"bankName\":\"CITI\",\"accountNumber\": \"0987654321\",\"swiftOrBicCode\":\"CITI7878\"}", "merchantAddress": "{\"zip\":\"41321\",\"city\":\"Metropolis\",\"countryCode\":\"US\",\"state\":\"MH\", \"line3\":\"Address line 3\",\"line2\":\"Address line 2\",\"line1\":\"100 Avenue Lane Street\"}", "schemeMerchantId": "329846328746236", "onboardStatus": true, "tandCUrl": "https://test.com/t&C.html" } }, "failed": { "errorDescription": "", "errorCode": "" } } } }

The last part

• HMAC ensures authenticity and integrity of API requests and responses.
• AES ensures confidentiality of payloads with symmetric encryption.
• Base64 encoding allows secure transmission of encrypted binary data over text-based protocols.

For best practices:

• Always validate Server-Authorization in responses.
• Use a new Traceid per request
• Protect and securely store the secretkey and symmetric key.