Here you find an easy and quick way to integrate with our API.
Suggested Integration Checklist
Authentication
Is the digital certificate being used during the connection?
Is the token expiration time being monitored?
Has a caching strategy been developed for token usage within its validity period?
Does the caching strategy account for the architecture of the platform being integrated (e.g., distributed architecture with multiple instances)?
Has the token’s security been considered?
Are appropriate measures in place to handle potential authentication failures?
Webhook
Is the callback URL exclusively operating over HTTPS?
Have measures been put in place to mitigate a potential DoS attack targeting the callback URL?
Are failures in the process appropriately handled and reported?
Is there a monitoring and logging strategy in place?
Charges and Payments
Is the authorization token being consumed from the cache?
Is the digital certificate being used during the connection?
Is the charge/payment status being validated?
Is the txId/e2eId being stored as an association reference?
Queries
Is the authorization token being consumed from the cache?
Is the digital certificate being used during the connection?
Is there a refund associated with the transaction being queried?
Is the payment amount being validated?
Compliance
Is the token limit being respected?
Is the number of operations per minute within the expected range?
Is the number of Pix operation queries equal to the number of charges created?