/api/v1/p2p/merchant/banksСтейджThe tenant's canonical bank reference (bank routing). bank_name is
the platform's MACHINE bank code (not a display name): pass it in
target_bank on requests and use it to render 1click buttons.
Availability (payin_available / payout_available) is computed from
actual coverage — a "dead button" is impossible.
Authorization
MerchantToken MerchantSignature MerchantTimestamp The merchant's public token (64 hex characters), issued at onboarding.
In: header
HMAC-SHA256 signature (a single scheme for all endpoints).
Format: t=<unix_seconds>,v1=<hex_hmac_sha256>
where hex_hmac = HMAC-SHA256(webhook_secret, "<unix_seconds>.<raw_body>").
Replay window: 5 minutes (a 60-second drift into the future is allowed).
In: header
Unix time of the request in seconds. Signature window: 5 minutes back / 60 seconds forward.
In: header
Query Parameters
ISO 3166-1 alpha-2 country code (for example RU).
ISO 4217 currency code (for example RUB).
A method UUID or slug — "banks available for a SPECIFIC method"
(the source of buttons for sbp_rub, iban_try, ...). Without
the parameter — the tenant's full reference.
Direction: PAY_IN (deposit buttons) or PAY_OUT (payout
banks). Without the parameter — both sides; tell them apart
by the payin_available / payout_available flags.
Value in
- "PAY_IN"
- "PAY_OUT"
Response Body
application/json
application/problem+json
curl -X GET "https://example.com/api/v1/p2p/merchant/banks?country=RU¤cy=RUB&method=sbp_rub&direction=PAY_IN" \ -H "X-Merchant-Token: <MERCHANT_TOKEN>" \ -H "X-Timestamp: <UNIX_TIMESTAMP>" \ -H "X-Signature: t=<UNIX_TIMESTAMP>,v1=<HEX_HMAC_SHA256>"{ "data": [ { "bank_name": "sber", "display_name": "Sberbank", "country": "RU", "methods": [ "SBP" ], "payin_available": true, "payout_available": false }, { "bank_name": "tbank", "display_name": "T-Bank", "country": "RU", "methods": [ "SBP", "BANK_CARD" ], "payin_available": true, "payout_available": false } ]}{ "type": "../dictionary", "title": "string", "status": 0, "detail": "string", "instance": "../dictionary", "errors": [ { "field": "amount", "message": "must be greater than 0", "code": "POSITIVE_REQUIRED" } ]}Create a whitelist pass POST POST
Creates a new whitelist pass in the `ACTIVE` status. Passes bypass the standard cascade routing when all non-empty fields match the incoming deal.
List the tenant's active payment methods GET GET
Returns payment methods in the ACTIVE status configured for the authenticated merchant's tenant: `id` (UUID), `slug`, `name`, `requisite_types`, `currency_code`, and `status`. This is the **canonical method catalog**: a single method reference — a UUID (`id`) or a slug (`slug`) — is accepted by both `POST /deals/payin` (`payment_method_id`) and `POST /deals/payout` (`payment_method`); both formats resolve to the same row. The method currency must match the deal currency (PayOut rejects a mismatch with HTTP 400). `GET /banks` does NOT return method identifiers — its `methods` field contains only `RequisiteType` values.