Idempotent writes
Transactional creates accept a unique idempotency key so safe retries resolve to the original intent.
Build against consistent tenant-scoped resources, explicit status models and signed events. Bank-specific adapters remain isolated behind the orchestration layer.
POST /api/v1/payoutsIdempotency-Key: unique_request_idX-Experia-Organization-Id: org_uuid{
"amount_paise": 125000,
"mode": "IMPS",
"beneficiary_id": "..."
}Financial integrations need safe behavior at failure boundaries—not merely attractive endpoint names.
Transactional creates accept a unique idempotency key so safe retries resolve to the original intent.
Every response carries a request identifier that follows the operation across application boundaries.
Webhook endpoints receive verifiable signatures and use one-time signing secrets at configuration.
API client secrets are displayed once; browser sessions remain behind HttpOnly session cookies.
Bank timeouts do not become success. Unknown execution state requires status inquiry before retry.
Resources remain scoped to the selected organization and the caller's granted capabilities.
Register HTTPS endpoints, retain signing secrets in controlled custody and verify every payload before updating internal state.
{
"event_id": "evt_...",
"organization_id": "org_...",
"data": {
"status": "PROCESSING",
"bank_reference": "..."
}
}Request APIHub and relevant financial products.
Generate an API client and store its secret once.
Implement idempotency, request tracking and event verification.
Supply the bank-issued UAT pack and security material.
Test failure paths and receive independent production approval.