Skip to main content
GET

Authorizations

Authorization
string
header
required

Bearer API Key, for example Bearer sk_live_xxx.

X-StablePay-Timestamp
string
header
required

Unix timestamp in seconds. Must be within 5 minutes of the server time.

X-StablePay-Nonce
string
header
required

Random string for replay protection, 16–64 characters.

X-StablePay-Signature
string
header
required

HMAC-SHA256 signature computed using the merchant API Secret, encoded as lowercase hex.

Headers

X-StablePay-Timestamp
string
required

Unix timestamp in seconds. Must be within 5 minutes of the server time.

X-StablePay-Nonce
string
required

Random string for replay protection, 16–64 characters. A new UUID is recommended for each request.

Required string length: 16 - 64
X-StablePay-Signature
string
required

Compute HMAC-SHA256 over {timestamp}.{nonce}.{requestBody} using the merchant API Secret and encode the result as lowercase hex. For GET requests, requestBody is an empty string.

Path Parameters

deposit_session_id
string
required

Deposit session ID.

Minimum string length: 1

Response

Query successful.

deposit_session_id
string
required

Deposit session ID.

customer_id
string
required

StablePay customer ID.

status
enum<string>
required

Deposit session status.

Available options:
active,
closed,
expired
allow_multiple_deposits
boolean
required

Whether multiple deposits are allowed using the same link.

expires_at
integer<int64> | null
required

Expiration time in Unix seconds. Always null when the link never expires.

url
string<uri>
required

Hosted checkout URL.

metadata
object
required

Merchant-defined metadata.

created
integer<int64>
required

Creation time in Unix seconds.

Last modified on October 13, 2026