API Reference

Base URLs

All API requests should be made to one of the following base URLs:

• Sandbox Environment: https://sandbox.api.moneybag.com.bd/api/v2
• Production Environment: https://api.moneybag.com.bd/api/v2

Authentication

All API requests require authentication using your merchant API key:

X-Merchant-API-Key: your_api_key_here

Learn more about Authentication →

Available Endpoints

API Playground

Test our API endpoints interactively with real responses:

The playground allows you to:

• Test endpoints with your sandbox credentials
• See real-time request and response data
• Export code snippets in multiple languages
• Debug integration issues quickly

Request & Response Format

Request Headers

All API requests should include these headers:

X-Merchant-API-Key: your_api_key
Content-Type: application/json
Accept: application/json

Response Format

All responses follow a consistent JSON structure:

Success Response

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    // Response data specific to the endpoint
  }
}

Error Response

{
  "success": false,
  "error": {
    "code": "ERROR_CODE",
    "message": "Human-readable error message",
    "field": "field_name" // Optional, for validation errors
  }
}

HTTP Status Codes

Security Best Practices

API Key Security

• Store keys in environment variables
• Never expose keys in client-side code
• Rotate keys regularly
• Use different keys for different environments

Data Protection

• Always use HTTPS
• Implement webhook signature verification
• Validate all input data
• Log security events

PCI Compliance

• Never store card details
• Use tokenization when possible
• Follow PCI DSS guidelines
• Regular security audits

Support Resources

Next Steps

Ready to start integrating? Here's what to do:

1. Create a Sandbox Account
2. Get Your API Keys
3. Make Your First API Call
4. Test Your Integration
5. Go Live with Production