For AI agents: visit https://docs.midtrans.com/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI. Append .md to any documentation page URL to get its markdown version.
Created using symmetric signature HMAC_SHA512 algorithm
Authorization
String
M
Represents access_token of a request; string starts with keyword “Bearer ” followed by access_token. Can get this token from Access Token B2B API response.
Authorization-Customer
String
M
Represents access_token of a request; string starts with keyword “Bearer ” followed by access_token from Binding API response
X-PARTNER-ID
String
M
Unique identifier for merchant. Merchant can send any value.
X-EXTERNAL-ID
String
M
Alphanumeric string. We suggest merchant to use UUID format. Reference number that should be unique in the same day or 1 day idempotency key.
X-DEVICE-ID
String
M
Device identification on which the API services is currently being accessed by the end user (customer)
CHANNEL-ID
String
M
Mandatory field from Bank Indonesia that can take any value with correct format 5 digits numeric string
Merchant ID (use the same value with merchantId in get-auth-code endpoint)
Merchant payment handle, merchant identifier in UUID format. Provided by Midtrans. Note: this value is not Midtrans Merchant ID, but a different value, here's the sample format: 303b4f89-xxxx-xxxx-xxxx-62a8ffaefaf3
The value on staging and production is different. Please make sure that you are sending the correct value based on the environment that you are using.
