LintasPay Environments
| Environment | Base URL | Notes |
|---|---|---|
| Sandbox | https://test.lintaspay.xyz | Test money only. Swagger "Try it out" is enabled. |
| Production | https://lintaspay.xyz | Real money. Use your production app_id and keys. |
Sandbox and production are separate. Each has its own app_id, its own key registration, its own orders and its own callbacks. Credentials from one environment don't work in the other.
This server is the sandbox environment (https://test.lintaspay.xyz).
Paths
Endpoints are served from the root of the base URL, with no version prefix. For example: https://test.lintaspay.xyz/pay-in/create.
The path you sign must be exactly the path you request, including any query string. See Signing requests.
LintasPay public key
Use this key to verify response and callback signatures. It's also available at /keys/platform-public-key.pem.
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxglShw6rS4dyAZLSVG1X
9urfbwCH4QGgB0P4z7gFsxeUW8VVady81nu0iMJ9XDCZek7cpKi4S7MpK47K3dY+
MSDYEy7IwGsOAYYW1aiMNDBkq4G50G5P5ETzRfg6DFJWmRR4FfWF8Wc/3WYY5qmW
vNYZZ7b3ZV5iZWh4FJaJ1Z+mRNeY87aG001UUK7rdyTCSfhKj6pQHKetBnFhf6BH
IQs0LtcPOE4urEjwTGYmwvmyiGbSc7LERgOjyEBpfQrIyuIKOrHubxV9xp/EYj4j
dIDNQtZ2/t9S3UxmiWfdpOJwuz/RMt+HGaBG4SDvpgA4YkvICYJOM+KGrpOpzfcl
mwIDAQAB
-----END PUBLIC KEY-----
Limits
| Limit | Value |
|---|---|
| Request body | 64 KB |
| Rate | 20 requests per second per merchant (HTTP 429, code 10011429, when exceeded) |
| Request timestamp | No older than 10 minutes, and no more than 5 minutes in the future |
| Nonce | Must not repeat within 5 minutes |
| Callback reply timeout | 5 seconds |
| IP allowlist | Optional per merchant. If one is set, calls from other IPs get HTTP 403. |