API examples

curl https://merchant-demo.zahlo.eu/api/v1/payment-methods \
  -H 'x-api-key: ${ZAHLO_API_KEY}'

const response = await fetch("https://merchant-demo.zahlo.eu/api/v1/payment-methods", {
  headers: { "x-api-key": process.env.ZAHLO_API_KEY },
});

import os
import requests

response = requests.get(
    "https://merchant-demo.zahlo.eu/api/v1/payment-methods",
    headers={"x-api-key": os.environ["ZAHLO_API_KEY"]},
    timeout=10,
)
response.raise_for_status()

const response = await fetch("https://merchant-demo.zahlo.eu/api/v1/checkout-sessions", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "x-api-key": process.env.ZAHLO_API_KEY,
    "Idempotency-Key": `checkout-${order.id}`,
  },
  body: JSON.stringify({
    amountMinor: order.totalMinor,
    currency: "EUR",
    method: "card",
    orderId: order.id,
    successUrl: "https://store.example/checkout/success",
    cancelUrl: "https://store.example/checkout/cancel",
    metadata: { orderId: order.id },
  }),
});

checkout = requests.post(
    "https://merchant-demo.zahlo.eu/api/v1/checkout-sessions",
    headers={
        "x-api-key": os.environ["ZAHLO_API_KEY"],
        "Idempotency-Key": f"checkout-{order_id}",
    },
    json={
        "amountMinor": 4990,
        "currency": "EUR",
        "method": "bank",
        "orderId": order_id,
        "successUrl": "https://store.example/checkout/success",
        "cancelUrl": "https://store.example/checkout/cancel",
    },
    timeout=10,
)
checkout.raise_for_status()

curl -X POST https://merchant-demo.zahlo.eu/api/v1/subscriptions \
  -H 'x-api-key: ${ZAHLO_API_KEY}' \
  -H 'Idempotency-Key: subscription-account-1001' \
  -H 'Content-Type: application/json' \
  -d '{"customerId":"cus_1001","priceId":"price_pro_monthly","trialDays":14}'

const link = await fetch("https://merchant-demo.zahlo.eu/api/v1/payment-links", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "x-api-key": process.env.ZAHLO_API_KEY,
    "Idempotency-Key": "campaign-summer-2026",
  },
  body: JSON.stringify({
    lineItems: [{ priceId: "price_basic", quantity: 1 }],
    metadata: { campaign: "summer-2026" },
  }),
});

import hashlib
import hmac

def valid_signature(raw_body: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature)

curl -X POST https://merchant-demo.zahlo.eu/api/v1/refunds \
  -H 'x-api-key: ${ZAHLO_API_KEY}' \
  -H 'Idempotency-Key: refund-order-1001' \
  -H 'Content-Type: application/json' \
  -d '{"paymentId":"pay_1001","amountMinor":4990,"reason":"requested_by_customer"}'