Fondy's solutions are available through two distinct APIs:
These APIs employ different security and interaction approaches, summarized on this page. Check how to start using each API in the following sections:
Fondy Flow API
The Fondy Flow API is designed to provide a secure and streamlined method for onboarding partners, creating wallets, and creating payments and payouts. It includes a single endpoint, the Encrypted Request, which requires the encryption of all requests and responses to ensure data security and integrity.
The Fondy Flow API has the following characteristics:
- Encryption: All data is encrypted using a combination of AES and RSA encryption to ensure maximum security.
- Digital Signing: Requests and responses are digitally signed for authenticity and integrity.
- Secure Communication: The API ensures secure communication between your application and Fondy’s servers.
The basic steps to use the Encrypted Request endpoint are the following:
- Encryption: Encrypt your requested data using the required encryption standards.
- Digital Signing: Sign the encrypted data to ensure authenticity.
- Send Request: Send the signed and encrypted request to the Encrypted Endpoint.
- Decryption: Decrypt the response data to access the required information.
For a complete guide on integrating the Fondy Flow API, visit the How to Integrate Fondy API page.
Fondy Gateway API
The Fondy Gateway API is a complete solution for implementing various online payment scenarios. It provides multiple endpoints, each designed for specific operations, enabling you to build payment flows of any complexity.
The Fondy Gateway API has the following characteristics:
- Versatile Payment Options: Support for card payments, 3D Secure, subscriptions, splits, mobile wallets (Apple Pay, Google Pay), Open Banking, local payment methods (iDEAL, Klarna, Blik, Sofort), and more.
- Flexible Data Format: Choose between FORM-encoded or JSON-encoded request and response bodies based on your preference.
- Custom Payment Flows: Create custom payment workflows tailored to your business needs.
The Gateway API authenticates via signatures. Every request must include a valid signature to ensure secure communication. To learn more about creating and using signatures, visit the Signatures page. For additional details on authentication, access the Authentication page.
To use the Gateway API, you must follow a specific structure for sending data and interpreting responses. For detailed instructions on the request structure, visit the Request Structure page.