Documentation

Getting started

Bitstac Merchant API lets you onboard your business customers through KYB, then receive status updates over signed webhooks.

What is Merchant API?

Merchant API is Bitstac's machine-facing interface for partners who need to submit business-customer KYB on behalf of the businesses they serve. You authenticate with a secret API key, create customer records, upload documents and stakeholders, submit for review, and listen for approve/reject webhooks.

1. Get access

  1. Your Bitstac business must be enabled, and Merchant API must be turned on (by Bitstac).
  2. Sign in to the Bitstac app as the workspace owner and open Developers.
  3. Create a test key first. Copy the full secret immediately — it is shown once.

2. Call ping

Confirm your key works against https://api.bitstac.io/api/v1/merchant:

curl -X GET "https://api.bitstac.io/api/v1/merchant/ping" \
  -H "Authorization: Bearer $BITSTAC_API_KEY" \
  -H "Accept: application/json"

A successful response includes your business id, name, and key environment:

{
  "success": true,
  "data": {
    "ok": true,
    "business_id": "…",
    "business_name": "Acme Imports Ltd",
    "environment": "test",
    "key_prefix": "bst_test_abcd1234…"
  }
}

3. Create your first customer

Next, create a draft business customer and walk through documents → stakeholders → submit. See the Customers (KYB) guide and the Customers API reference.

4. Receive webhooks

Register an HTTPS endpoint in Developers → Webhooks, store the whsec_ signing secret, and verify every delivery. Full details: Webhooks.

Where next