Link a PSP to a shop — captures the API key to the secret store, ref only persisted (API token, merchant:write)

POST /v1/integration/merchants/{id}/psps

Error

A valid request URL is required to generate request examples

201

{
  "ok": true,
  "pspId": "<string>",
  "credentialCheck": {},
  "credentialRef": "<string>"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

id · string · required

Body

application/json

psp · object · required

Show child attributes

rateBps · integer

isDefault · boolean

secret · string

Plaintext PSP secret key — captured to the secret store, never persisted or logged.

publishableKey · string

The PSP publishable key (pk_…) — public material for the card-capture iframe.

Response

201 - application/json

Default Response

ok · boolean · required

pspId · string · required

credentialCheck · object

Adyen only, when a secret was sent: Adyen's verdict on the key taken before vaulting — { status: 'verified' } or { status: 'unverified', cause, httpStatus?, errorCode? }. A key Adyen refuses is not saved (422 psp_credentials_rejected).

credentialRef · string

Opaque reference to the vaulted secret — the secret itself is NEVER returned.