Skip to main content

Developer Guidelines

Build integrations that are secure, predictable, and safe to retry.

  • Validate required fields before sending a request.
  • Keep API keys server-side and redact them from diagnostics.
  • Use the issued voucher id, not a merchant voucher-template identifier.
  • Check allowPartialRedemption and remainingValue before a partial redemption.
  • Omit amount only when you intend to redeem the full remaining voucher value.
  • Record request outcomes so operators can reconcile orders and redemptions.
  • Use timeouts and bounded retries with exponential backoff.
  • Avoid logging customer names, email addresses, voucher codes, or PDF contents unnecessarily.