Merchant API

Endpoints

GET  /api/v1/balance
GET  /api/v1/transactions
GET  /api/v1/payments/{reference}
POST /api/v1/payments
POST /api/v1/invoices

POST /api/v1/payments
Idempotency-Key: malam-order-1042
{
  "amount": "5000.00",
  "description": "Course enrolment",
  "customer": { "name": "Ada", "email": "ada@school.ng" },
  "sourceApp": "malam"
}

Amounts under ₦100 are refused because that is the documented minimum for a temporary cNGN virtual account. If the provider is not connected, the payment is created as pending with no account number. Do not treat that as paid.

Your webhooks

We POST JSON and sign the raw body with HMAC-SHA256. Compare it to the header X-AIHub-Signature: sha256=… using the secret shown once when you add the endpoint. Events: payment.paid, payment.failed.

cNGN webhooks we accept

Point cNGN at /api/webhooks/cngn. We reject bodies that fail X-cNGN-Signature. Bridge callbacks at /api/webhooks/bridge are unsigned hints and never credit a merchant. Network IDs come from Get Networks, not from the table below.