Developers

One API surface across the entire stack.

Everything an operator can do in the console can be automated. REST endpoints, signed webhooks, a full sandbox and parameter-driven product configuration.

Request sandbox access Browse solutions

Overview

Every module in the WOW Finstack stack is fully configurable through REST APIs and parameter-driven processing rules. The same API surface powers our own portals, so anything an operator can do in the console can be automated by your systems.

Authentication

APIs use OAuth 2.0 client credentials over mutual TLS. Access tokens are short-lived and scoped per product and per environment. Sandbox and production credentials are issued separately during onboarding.

Environments

A sandbox environment mirrors production behaviour with simulated scheme responses, allowing full journey testing — onboarding, issuing, authorisation, settlement — before certification.

Webhooks & events

Subscribe to lifecycle events — customer verified, card issued, transaction authorised, settlement completed, sanction alert raised — delivered as signed JSON payloads with automatic retry and replay.

Errors & idempotency

All mutating endpoints accept an Idempotency-Key header. Errors return a stable machine-readable code, an HTTP status and a human-readable message with a correlation ID for support.

Sample request

POST /v1/cards HTTP/1.1
Host: api.wowfinstack.com
Authorization: Bearer {access_token}
Idempotency-Key: 0f7a1c8e-92d4-4f1b-b0a7-6c2f2a1d9e11
Content-Type: application/json

{
  "customer_id": "cus_8h2k91",
  "product_code": "DEBIT_VISA_STD",
  "form_factor": "virtual",
  "currency": "SGD",
  "limits": { "daily_purchase": 500000, "atm_daily": 100000 }
}

Endpoint reference

Customer onboarding

ONBOARDING

POST/v1/customersCreate a customer record and start an onboarding case.
POST/v1/customers/{id}/documentsUpload an identity document for OCR and authenticity checks.
POST/v1/customers/{id}/livenessSubmit a liveness/selfie capture for facial matching.
GET/v1/customers/{id}/screeningRetrieve KYC, AML, PEP and sanctions screening results.
GET/v1/customers/{id}/decisionFetch the decision engine outcome and risk rating.

Merchant onboarding (KAMP™)

KAMP™

POST/v1/merchantsSubmit a merchant application with company and beneficial owner data.
POST/v1/merchants/{id}/screeningTrigger sanctions, PEP and adverse media screening.
GET/v1/merchants/{id}/riskRetrieve risk rating, settlement caps and next review date.
PATCH/v1/merchants/{id}/statusApprove, suspend or offboard a merchant.

Cards (WOWCARD™)

WOWCARD™

POST/v1/cardsIssue a physical or virtual card against a product profile.
GET/v1/cards/{id}Retrieve card status, limits and linked account.
PATCH/v1/cards/{id}/statusActivate, block, replace or terminate a card.
POST/v1/cards/{id}/limitsSet or override velocity, channel and value limits.
GET/v1/accounts/{id}/transactionsList authorisations, postings and disputes.

Payment gateway (WOWGATE™)

WOWGATE™

POST/v1/paymentsCreate a payment, hosted page or direct API sale with 3D Secure.
POST/v1/payments/{id}/captureCapture a previously authorised payment.
POST/v1/payments/{id}/refundRefund a captured payment in full or in part.
GET/v1/payments/{id}Retrieve payment status, scheme response and acquirer routing.
GET/v1/payment-methodsList enabled card schemes and alternative payment methods.

Acquiring & switching (WOWPOS™ / WOWSWITCH™)

WOWPOS™

POST/v1/terminalsProvision a SoftPOS terminal for a merchant outlet.
POST/v1/terminals/{id}/saleInitiate a contactless or QR sale from a mobile device.
GET/v1/settlementsRetrieve settlement batches, fees and exception reports.
GET/v1/switch/routesInspect ISO 8583 / NDC+ routing and interchange configuration.