Create a Pay-in Instance

This endpoint allows you to create a new payment instance and receive a URL that can be used to launch the Tylt CrossRamp Open Banking Pay-In widget. Through the widget, the merchant's end customer can make a deposit or payment to the merchant using Open Banking. The payment is settled in USDC into the merchants wallet.

Endpoint

POSThttps://api.tylt.money/v2/prime-fiat/instance/payin

Request Headers

First Tab

Name	Type	Example	Description
X-TLP-APIKEY	string	93ee3c5e133697251b5362bcf9cc8532476785t8768075616f58d88	Your Tylt API Key, used to identify your account in API requests.
X-TLP-SIGNATURE	string	d0afef3853dfc8489c8b9affa5825171fdd7y7685675e4966a05f66ed2b3eaf9462b3c9c0	HMAC SHA-256 signature generated using the API Secret Key to secure the request.

When using the API, ensure to include your API Key and generate the signature for the request payload using your API Secret. The tables provided above contain example values for illustration purposes only. Please refer to the code snippets for detailed instructions on how to sign the request and generate the signature properly.

Request Body

Body

Field Name	Type	Description
userDetails	JSON Object	Custom fields associated with the enduser, making a payment to the merchant. These fields are included in web-hook notifications and other API responses for easy reference and tracking. An empty object can be sent.
merchantOrderId	string	Mandatory. A UUID used by the merchant to reference this instance or any transaction related to it.
callBackUrl	string	Mandatory. The URL to which payment status updates are sent.
redirectUrl	string	Mandatory. The URL to redirect the user after completing the payment.
amount	number	Mandatory. This is the amount the user wants to deposit in EUR.
currencySymbol	string	Mandatory. Supported Currency is "EUR" only
merchantDetails	JSON Object	The merchantDetails object identifies the merchant on whose behalf the transaction is being processed. This information is required for transaction attribution, reconciliation, risk screening, and regulatory reporting. The following fields must be provided inside the merchantDetails object: merchantName The legal or DBA name of the merchant. merchantUrl The official website URL of the merchant. This must be a valid HTTPS URL representing the merchant’s active operating website. merchantInternalId A unique internal identifier assigned by the merchant. This identifier is used for reconciliation, reporting, and ongoing transaction tracking and must remain consistent across transactions. All fields within merchantDetails are mandatory. Transactions submitted without this object, or with incomplete merchant details, will be rejected.
skipPreview	number	This parameter controls whether the payment preview screen is displayed to the customer prior to payment authorization. When set to 0 (default), the preview screen is shown. When set to 1, the preview screen is bypassed and the customer is redirected directly to the payment authorization step. The ability to bypass the preview screen is subject to merchant risk controls. Merchants classified as high risk or with an elevated chargeback history are not permitted to bypass the preview screen. In such cases, the system will automatically enforce the preview screen regardless of the value provided.

Code Snippet

JavaScript (Axios)

const axios = require('axios');
const crypto = require('crypto');

// Replace with your API Key and Secret
const apiKey = 'your-api-key';
const apiSecret = 'your-api-secret';

// Request body
const requestBody = {
    userDetails: {},
    merchantOrderId: 'b73b73b-87wtbc-q36gbc-331n3',
    callBackUrl: 'https://www.test.com/callback',
    redirectUrl: 'https://www.test.com/callback',
    amount: 10.00,
    currencySybmol: 'EUR',
    merchantDetails: {
        merchantName: "Example Merchant Ltd",
        merchantUrl: "https://www.examplemerchant.com",
        merchantInternalId: "merchant-12345"
    },
    skipPreview:1
};

// Convert request body to JSON
const raw = JSON.stringify(requestBody);

// Function to create HMAC SHA-256 signature
const createSignature = (secret, data) => {
    return crypto.createHmac('sha256', secret)
                 .update(data)
                 .digest('hex');
};

// Generate signature
const signature = createSignature(apiSecret, raw);

// Define headers
const headers = {
    "X-TLP-APIKEY": apiKey,
    "X-TLP-SIGNATURE": signature
};

// Send the request
axios.post('https://api.tylt.money/v2/prime-fiat/instance/payin', raw, { headers })
    .then(response => console.log("Success:", response.data))
    .catch(error => console.error("Error:", error));

Response

200

{
  "msg": "Ivy instance created successfully",
  "data": {
    "instanceId": "467153bc-72a8-466d-8fb1-59b080250554",
    "merchantOrderId": "merchant-test-gWsQ1fiLmk",
    "url": "https://app.tylt.money/prime-eur-instance/467153bc-72a8-466d-8fb1-59b080250554",
    "userDetails": {},
    "merchantDetails": {
      "merchantName": "Test Merchant",
      "merchantUrl": "https://app.tylt.money"
    },
    "fiatAmount": 4000,
    "fiatCurrencySymbol": "EUR",
    "cryptoAmount": 4686.58,
    "cryptoCurrencySymbol": "USDC",
    "rate": 0.8535
  }
}

Response Fields