PayPM Platform Developers
PayPM Platform helps fintechs, enterprises, institutions, and networks build and operate branded wallet programmes for their own customers or members.
This portal is the developer-facing surface for:
- Mobile app integration and API contracts.
- Sandbox and staging hostnames.
- Authentication and session rules.
- Money-flow idempotency.
- Webhook subscriptions and replay.
- Contract vault records and milestone tracking.
- Operator API keys and audit controls.
Environments
| Environment | API | Portal | Backoffice |
|---|---|---|---|
| Sandbox | https://sandbox-heritagepay-api.paypm.net/api/v1 | https://sandbox-heritagepay.paypm.net | https://sandbox-heritagepay-backoffice.paypm.net |
| Staging | https://staging-heritagepay-api.paypm.net/api/v1 | https://staging-heritagepay.paypm.net | https://staging-heritagepay-backoffice.paypm.net |
The public developer documentation is served at https://developer.paypm.net.
Sandbox simulates money movement. Staging is wired for live money-flow validation and must be handled with production discipline.
API Planes
| Plane | Used by | Credential | Examples |
|---|---|---|---|
| Plane A | Mobile end users | JWT bearer token | OTP, PIN login, wallets, transfers, cards, savings, KYC, notifications |
| Plane B | Operators and integrators | Institution API key, and HMAC where required | API keys, audit, webhooks, manifest, contract vault admin |
| Platform OIDC | Interactive product clients | ZITADEL at auth.paypm.net | Partner Console and PayPM Business login; product authorization remains separate |
ZITADEL authenticates subjects only. Product identity, tenant membership, and roles are owned by PayPM Identity and each product. Standalone Marketplace is enrolled internally during a compatibility period while mobile Marketplace reads still come from the wallet backend — see Authentication and Marketplace Architecture.
Start with the Quickstart, then open the API Reference.
The live sandbox API does not currently serve Swagger at /api/v1/docs or
/api/v1/docs-json (both return 404). Use this portal's committed catalog.