Process payments with Ryft: authorizations, voids, captures, refunds etc.
Ryft Payment API (1.1.0)
Ryft provides a collection of APIs that you can use to accept and process payments + marketplace functionality (payouts). We have a testing environment called sandbox, which you can sign up for to test API calls without affecting live data.
When you sign up for an account, you are given a secret and public API key pair. You authenticate with our API by providing the appropriate key in the request Authorization header. Never share your secret keys. Keep them guarded and secure.
Public keys should only be used in JavaScript or native applications. This key is solely used to identify the partner making requests. Supply this key in the Authorization header.
Your secret key should always be supplied in the Authorization header. Make sure this key is stored securely on your backend and never surfaced client-side.
We use rate limiting on a per-user basis to protect our APIs against abuse. Our Sandbox environment is limited to 5 requests per second. Our production environment is limited to 50 requests per second.
We also allow a brief burst above this limit to accommodate a sudden increase in traffic.
If you exceed the above quota then the API will respond with a 429 status code and you will need to retry the API call (we recommend implementing a retry policy with an exponential back-off).
Events
Events are persisted throughout the lifecycle of a payment/action as you use our API. We use events to notify you when something important happens in your account (or a linked sub account). The most commonly used event occurs when a payment is captured, in which case we persist a PaymentSession.captured event and then (optionally) send it to any webhooks you have registered that are listening for that event type.
Note that if you are taking payments as a platform (for sub accounts), events are saved against the sub account accountId, but will be sent to any webhooks that your account has configured.
Request
This is for creating persons under your or your sub accounts account, required for verification of businesses. The following limits apply: - Maximum of 9 persons - Maximum of 5 persons with a role of Director - Maximum of 4 persons with a role of UltimateBeneficialOwner - Maximum of 1 person with a role of BusinessContact
The email address of the person
The date of birth of the person, in format YYYY-MM-DD
The two-character ISO 3166 country code of birth of the person
The gender of the person. International regulations require either Female or Male
The countries of citizenship or nationality of the person
The phone number of the person, in E.164 format
The role(s) in the business that the person performs. This must contain at least one value.
The KYC documents. Note that a maximum of 1 of each document type can exist at any time, if you add a new document of a type that already exists then it will be replaced, regardless of it's status.
- Sandbox environmmenthttps://sandbox-api.ryftpay.com/v1/accounts/{id}/persons
- Production environmenthttps://api.ryftpay.com/v1/accounts/{id}/persons
- cURL
- Node
- Python
curl -i -X POST \
https://sandbox-api.ryftpay.com/v1/accounts/ac_b83f2653-06d7-44a9-a548-5825e8186004/persons \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"firstName": "Fred",
"middleNames": "David",
"lastName": "Jones",
"email": "fred.jones@example.com",
"dateOfBirth": "1990-01-20",
"countryOfBirth": "GB",
"gender": "Male",
"nationalities": [
"GB"
],
"address": {
"lineOne": "123 Test Street",
"lineTwo": null,
"city": "Manchester",
"country": "GB",
"postalCode": "SP4 7DE",
"region": null
},
"phoneNumber": "+447900000000",
"businessRoles": [
"BusinessContact",
"Director"
],
"documents": [
{
"type": "BankStatement",
"front": "fl_01G0EYVFR02KBBVE2YWQ8AKMGJ",
"back": "fl_01G0EYVFR02KBBVE2YWQ8AKMGJ",
"country": "GB"
}
],
"metadata": {
"accountId": "1"
}
}'The person was created successfully
The ID of the person
The two-character ISO 3166 country code of birth of the person
The gender of the person. International regulations require either Female or Male
The countries of citizenship or nationality of the person
The role(s) in the business that the person performs
use this parameter to attach key-value data to the person. These will be sent with any associated account events on your webhooks. You can have a maximum of 5 pieces of metadata.
The epoch timestamp (seconds) when the person was created
{ "id": "per_01G0EYVFR02KBBVE2YWQ8AKMGJ", "firstName": "Fred", "middleNames": "David", "lastName": "Jones", "email": "fred.jones@example.com", "dateOfBirth": "1990-01-20", "countryOfBirth": "GB", "gender": "Male", "nationalities": [ "GB" ], "address": { "lineOne": "123 Test Street", "lineTwo": null, "city": "Manchester", "country": "GB", "postalCode": "SP4 7DE", "region": null }, "phoneNumber": "+447900000000", "businessRoles": [ "BusinessContact", "Director" ], "verification": { "status": "Required", "requiredFields": [ … ], "requiredDocuments": [ … ], "errors": [ … ] }, "documents": [ { … } ], "metadata": { "accountId": "1" }, "createdTimestamp": 1470989538, "lastUpdatedTimestamp": 1470989538 }
- Sandbox environmmenthttps://sandbox-api.ryftpay.com/v1/accounts/{id}/persons
- Production environmenthttps://api.ryftpay.com/v1/accounts/{id}/persons
- cURL
- Node
- Python
curl -i -X GET \
https://sandbox-api.ryftpay.com/v1/accounts/ac_b83f2653-06d7-44a9-a548-5825e8186004/persons \
-H 'Authorization: YOUR_API_KEY_HERE'{ "items": [ { … } ], "paginationToken": "per_01FCTS1XMKH9FF43CAFA4CXT3P_1641912473" }
- Sandbox environmmenthttps://sandbox-api.ryftpay.com/v1/accounts/{id}/persons/{personId}
- Production environmenthttps://api.ryftpay.com/v1/accounts/{id}/persons/{personId}
- cURL
- Node
- Python
curl -i -X GET \
https://sandbox-api.ryftpay.com/v1/accounts/ac_b83f2653-06d7-44a9-a548-5825e8186004/persons/per_01FCTS1XMKH9FF43CAFA4CXT3P \
-H 'Authorization: YOUR_API_KEY_HERE'Successfully retrieved the given Person
The ID of the person
The two-character ISO 3166 country code of birth of the person
The gender of the person. International regulations require either Female or Male
The countries of citizenship or nationality of the person
The role(s) in the business that the person performs
use this parameter to attach key-value data to the person. These will be sent with any associated account events on your webhooks. You can have a maximum of 5 pieces of metadata.
The epoch timestamp (seconds) when the person was created
{ "id": "per_01G0EYVFR02KBBVE2YWQ8AKMGJ", "firstName": "Fred", "middleNames": "David", "lastName": "Jones", "email": "fred.jones@example.com", "dateOfBirth": "1990-01-20", "countryOfBirth": "GB", "gender": "Male", "nationalities": [ "GB" ], "address": { "lineOne": "123 Test Street", "lineTwo": null, "city": "Manchester", "country": "GB", "postalCode": "SP4 7DE", "region": null }, "phoneNumber": "+447900000000", "businessRoles": [ "BusinessContact", "Director" ], "verification": { "status": "Required", "requiredFields": [ … ], "requiredDocuments": [ … ], "errors": [ … ] }, "documents": [ { … } ], "metadata": { "accountId": "1" }, "createdTimestamp": 1470989538, "lastUpdatedTimestamp": 1470989538 }
The email address of the person
The date of birth of the person, in format YYYY-MM-DD
The two-character ISO 3166 country code of birth of the person
The gender of the person. International regulations require either Female or Male
The countries of citizenship or nationality of the person
The phone number of the person, in E.164 format
The role(s) in the business that the person performs. This must contain at least one value.
The KYC documents. Note that a maximum of 1 of each document type can exist at any time, if you add a new document of a type that already exists then it will be replaced, regardless of it's status.
- Sandbox environmmenthttps://sandbox-api.ryftpay.com/v1/accounts/{id}/persons/{personId}
- Production environmenthttps://api.ryftpay.com/v1/accounts/{id}/persons/{personId}
- cURL
- Node
- Python
curl -i -X PATCH \
https://sandbox-api.ryftpay.com/v1/accounts/ac_b83f2653-06d7-44a9-a548-5825e8186004/persons/per_01FCTS1XMKH9FF43CAFA4CXT3P \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"firstName": "Fred",
"middleNames": "David",
"lastName": "Jones",
"email": "fred.jones@example.com",
"dateOfBirth": "1990-01-20",
"countryOfBirth": "GB",
"gender": "Male",
"nationalities": [
"GB"
],
"address": {
"lineOne": "123 Test Street",
"lineTwo": null,
"city": "Manchester",
"country": "GB",
"postalCode": "SP4 7DE",
"region": null
},
"phoneNumber": "+447900000000",
"businessRoles": [
"BusinessContact",
"Director"
],
"documents": [
{
"type": "BankStatement",
"front": "fl_01G0EYVFR02KBBVE2YWQ8AKMGJ",
"back": "fl_01G0EYVFR02KBBVE2YWQ8AKMGJ",
"country": "GB"
}
],
"metadata": {
"accountId": "1"
}
}'Successfully updated the given Person
The ID of the person
The two-character ISO 3166 country code of birth of the person
The gender of the person. International regulations require either Female or Male
The countries of citizenship or nationality of the person
The role(s) in the business that the person performs
use this parameter to attach key-value data to the person. These will be sent with any associated account events on your webhooks. You can have a maximum of 5 pieces of metadata.
The epoch timestamp (seconds) when the person was created
{ "id": "per_01G0EYVFR02KBBVE2YWQ8AKMGJ", "firstName": "Fred", "middleNames": "David", "lastName": "Jones", "email": "fred.jones@example.com", "dateOfBirth": "1990-01-20", "countryOfBirth": "GB", "gender": "Male", "nationalities": [ "GB" ], "address": { "lineOne": "123 Test Street", "lineTwo": null, "city": "Manchester", "country": "GB", "postalCode": "SP4 7DE", "region": null }, "phoneNumber": "+447900000000", "businessRoles": [ "BusinessContact", "Director" ], "verification": { "status": "Required", "requiredFields": [ … ], "requiredDocuments": [ … ], "errors": [ … ] }, "documents": [ { … } ], "metadata": { "accountId": "1" }, "createdTimestamp": 1470989538, "lastUpdatedTimestamp": 1470989538 }
- Sandbox environmmenthttps://sandbox-api.ryftpay.com/v1/accounts/{id}/persons/{personId}
- Production environmenthttps://api.ryftpay.com/v1/accounts/{id}/persons/{personId}
- cURL
- Node
- Python
curl -i -X DELETE \
https://sandbox-api.ryftpay.com/v1/accounts/ac_b83f2653-06d7-44a9-a548-5825e8186004/persons/per_01FCTS1XMKH9FF43CAFA4CXT3P \
-H 'Authorization: YOUR_API_KEY_HERE'Successfully deleted the given Person
The ID of the person
The two-character ISO 3166 country code of birth of the person
The gender of the person. International regulations require either Female or Male
The countries of citizenship or nationality of the person
The role(s) in the business that the person performs
use this parameter to attach key-value data to the person. These will be sent with any associated account events on your webhooks. You can have a maximum of 5 pieces of metadata.
The epoch timestamp (seconds) when the person was created
{ "id": "per_01G0EYVFR02KBBVE2YWQ8AKMGJ", "firstName": "Fred", "middleNames": "David", "lastName": "Jones", "email": "fred.jones@example.com", "dateOfBirth": "1990-01-20", "countryOfBirth": "GB", "gender": "Male", "nationalities": [ "GB" ], "address": { "lineOne": "123 Test Street", "lineTwo": null, "city": "Manchester", "country": "GB", "postalCode": "SP4 7DE", "region": null }, "phoneNumber": "+447900000000", "businessRoles": [ "BusinessContact", "Director" ], "verification": { "status": "Required", "requiredFields": [ … ], "requiredDocuments": [ … ], "errors": [ … ] }, "documents": [ { … } ], "metadata": { "accountId": "1" }, "createdTimestamp": 1470989538, "lastUpdatedTimestamp": 1470989538 }
Payouts
A payout represents the transfer of money from Ryft to a connected payout method (bank account), i.e. when we send money you're owed. Typically this is automated.
However, the payouts API allows you to explicitly create payouts for your sub accounts. Generally we'd recommend this if you are a marketplace who wants to control exactly when payouts should be sent out.
Transfers
A Transfer represents the movement of money between Ryft accounts.
This API allows platforms/marketplaces to transfer money from/to particular sub accounts, useful when:
- you owe a sub account money from a particular transaction and want to explicitly send it after the fact
- you want to recoup funds from a sub account, such as when dealing with disputes
- you want to collect additional/new commission from the sub account
Subscriptions
The subscriptions API allows you to automatically have Ryft schedule and charge recurring payments for a specific day and time. This API is not required to process recurring payments. After additional configuration, you can use our payment-sessions API to create and charge the recurring payments yourself.