Payment Gateway API overview

Base URLs

SePay Payment Gateway provides two environments for integration, Sandbox for testing and Production for live transactions:

Environment	Base URL
Production	`https://pgapi.sepay.vn`
Sandbox	`https://pgapi-sandbox.sepay.vn`

API Authentication

All SePay APIs use Basic Authentication for authentication.

Headers

Authorization: Basic base64(merchant_id:secret_key)
Content-Type: application/json

After you regenerate the Secret Key

The new key works immediately and the old key stops working at the same moment; there is no transition period. Any request still using the old key returns 401. See how to regenerate the key.

Common Error Codes

200Success

Request processed successfully

400Bad Request

Invalid request data

401Unauthorized

Authentication failed

403Forbidden

No access to this API

404Not Found

Requested resource not found

422Unprocessable Entity

Valid data but cannot be processed (validation errors)

429Too Many Requests

Rate limit exceeded

500Internal Server Error

Server error

Pagination

APIs returning lists support pagination:

per_pageinteger

Number of results per page (default: 20, max: 100)

pageinteger

Current page (default: 1)

Response Format

RESPONSE

{
  "data": "[...]",
  "meta": {
    "per_page": 20,
    "total": 100,
    "has_more": false,
    "current_page": 1,
    "page_count": 5
  }
}