LintasPay Environments
| Environment | Base URL | Notes |
|---|---|---|
| Sandbox | https://test.lintaspay.xyz | Test money only. Swagger "Try it out" is enabled. |
| Production | https://lintaspay.xyz | Real money. Use your production app_id and keys. |
Sandbox and production are separate. Each has its own app_id, its own key registration, its own orders and its own callbacks. Credentials from one environment don't work in the other.
This server is the production environment (https://lintaspay.xyz).
Paths
Endpoints are served from the root of the base URL, with no version prefix. For example: https://test.lintaspay.xyz/pay-in/create.
The path you sign must be exactly the path you request, including any query string. See Signing requests.
LintasPay public key
Use this key to verify response and callback signatures. It's also available at /keys/platform-public-key.pem.
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhotMZ2bOlYKgCgZ5VdLq
JvhXAMHiy1yHspsOJnq5+k7X0EZzQK9GYjQZAVJemA8LbG7UYIsdHf4BPXDAg4i1
/ac0+1QDWje39jQYJaARthT9Xi8/FZFnYkExUk1hxb2h5vLgX12KUHGe9koGkzYz
nnuqwvHfwbR526+aH9gnBPJ8NGwOZhpmk4U6ACCbnfsD4ZmNuvP6lSu1qe3lgNje
UmiFWUCgAK8MhB51PJGdwkt1lsxKxUZi7G16g/AjYPPU8lK38PXC1KOL5dOg2aLk
vtAc7bevgPuga2inBRORyMyP4XM+n93ZzmSdSh+EzsypG+Zc7sCkUlVl37k06CIc
uwIDAQAB
-----END PUBLIC KEY-----
Limits
| Limit | Value |
|---|---|
| Request body | 64 KB |
| Rate | 20 requests per second per merchant (HTTP 429, code 10011429, when exceeded) |
| Request timestamp | No older than 10 minutes, and no more than 5 minutes in the future |
| Nonce | Must not repeat within 5 minutes |
| Callback reply timeout | 5 seconds |
| IP allowlist | Optional per merchant. If one is set, calls from other IPs get HTTP 403. |