The merchant path
1
Prepare your account
Create a merchant account, copy the API URL shown in the dashboard, and issue a
test API key with only the scopes your integration needs. Register the origins
used by your success and cancellation URLs.
2
Build the test checkout
Keep the key on your server. Send an integer-cent USD amount and a unique
Idempotency-Key to POST /v1/merchant-api/checkouts.3
Send the customer to Skinloop
Redirect the customer to the returned
hostedUrl. Do not treat the browser
redirect as proof of payment.4
Confirm and fulfill
Poll the checkout status or consume the signed webhook. Fulfill only when the
authoritative status is
completed.5
Go live carefully
Run the test-to-live checklist, rotate to a live key, verify webhook delivery,
and monitor statuses, warnings, errors, and balances.
Before you start
- A Skinloop merchant account
- The API URL copied from your dashboard
- A server-side test API key
- Success and cancellation URLs on registered origins
- An HTTPS webhook endpoint if you use webhooks
API keys, webhook secrets, and checkout status capabilities stay server-side.
Never put them in browser JavaScript, a mobile application, logs, or a
repository.
