{"activeVersionTag":"latest","latestAvailableVersionTag":"latest","collection":{"info":{"_postman_id":"da2993b8-ff4b-4d4a-9b2e-87941c0077f9","name":"MVP Payments - Client API","description":"<img src=\"https://www.mvp-payments.com/brand/mvp-logo-primary.svg\" alt=\"MVP Payments\" width=\"340\" height=\"138\">\n\n## Pay by bank, across Europe and the UK.\n\nMVP Payments moves money straight from your customer's bank account to yours, over Open Banking. Create a payment, send your customer to our hosted payment page, and receive the outcome as a signed webhook.\n\n| | |\n| --- | --- |\n| **Base URL** | `https://api.mvp-payments.com/v1` |\n| **API version** | `2026-08-01` |\n| **Currencies** | `EUR` · `SEK` · `RON` · `GBP` |\n| **Environments** | Sandbox and Live, on the same base URL — the client secret you send decides which |\n\n### Choose your route\n\n**Hosted payment page — recommended.** One call creates the payment; you send your customer to its `sessionUrl`; the outcome comes back to you. Everything in between is ours: the bank picker, the payer's consent, each bank's own way of approving a payment, desktop-to-phone QR, 20 languages, retries and expiry — under your brand. Every bank we connect is in your checkout, and new banks arrive with no change on your side. See **Hosted payment page**.\n\n**API-only path.** For a business that runs its own checkout: you show the bank picker, collect the payer's consent and hand the payer to their bank yourself. More to build, and more to own. See **API-only path**.\n\nBoth routes share the same payments, statuses, webhooks and errors.\n\n### Quick start\n\n1. **Credentials.** When your application is approved you receive an API key and a client secret for each environment. Your client id is on your dashboard at [dashboard.mvp-payments.com](https://dashboard.mvp-payments.com).\n2. **Environment.** Import the **MVP Payments - Sandbox** environment, select it, and enter your sandbox `apiKey`, `clientId` and `clientSecret` as *Current values*. Current values stay on your computer — never put real credentials in *Initial value*.\n3. **Create a payment.** Send **Hosted payment page › Create a payment › Create payment - EUR / SEPA Instant**. The new `mvpId` is saved for the later calls, and the payment's `sessionUrl` is printed in the Postman Console.\n4. **Pay.** Open the `sessionUrl` in a browser and choose **Mock Bank (Redirect)** — the amount decides the outcome (see **Test banks**). Or walk the same journey from Postman with **Hosted payment page › The payer's journey**.\n5. **Get the outcome.** Set a webhook endpoint on your dashboard and receive the outcome signed, or send **Payment status updates › Polling › Get payment status**.\n\nPrefer to click first? Our [live demo](https://demo.mvp-payments.com) runs a sandbox payment and shows each API call as it happens.\n\n### Authentication\n\nEvery server-to-server call sends three headers:\n\n| Header | Value |\n| --- | --- |\n| `x-api-key` | Your API key for the environment |\n| `x-mvp-client-id` | Your client id |\n| `x-mvp-client-secret` | A client secret for the environment — a sandbox secret makes the call a sandbox call, a live secret a live one |\n\n- Credentials are never accepted in a request body, and none of them belongs in a web page or a mobile app: call the API from your server.\n- Each environment has one API key and up to five active client secrets (*sets*), so you can rotate without downtime: create a new set on the **API credentials** page of your dashboard, move your systems to it, then revoke the old one. The API key stays the same.\n- Three reads work without credentials: `GET /banks` and `GET /banks/{bankId}/branches` when you name the environment (`?environment=sandbox` or `?environment=live`), and `GET /payments/{mvpId}`, which then answers a redacted view.\n- The hosted payment page's own calls (`/session/…`) need no credentials either: the payment's `mvpId` is the session.\n\n### Sandbox and Live\n\nThe sandbox behaves exactly like live — same statuses, same signed webhooks, same errors — against our mock banks and the banks' own sandboxes. Live calls answer `403 MVP-4301` until live payments are enabled on your account after your go-live review; then you switch to your Live API key and a Live client secret. Same base URL, same code.\n\n### Conventions\n\n- **JSON** in and out — send `Content-Type: application/json`. Request bodies are validated strictly: an unknown field is a `400`.\n- **Amounts** are strings with exactly two decimals: `\"12.02\"`.\n- **The currency decides the account form.** EUR, SEK and RON accounts are IBANs; GBP accounts are a 6-digit `sortCode` plus an 8-digit `accountNumber`. One form is never converted into the other.\n- **`mvpId`** identifies every payment: 18 letters and digits, such as `aB3dEfGh1JkLmN0pQr`.\n- **Times** are ISO 8601, in UTC.\n- **Retries are safe** with an `Idempotency-Key` header on `POST /payments`.\n- **Lists grow.** New currencies, rails, statuses and error codes can be added — never switch on them exhaustively.\n\n### Errors\n\nEvery error has the same shape. Branch on `code`, never on `message`, and quote the `requestId` when you contact us:\n\n```json\n{\n    \"message\": \"Invalid client credentials\",\n    \"code\": \"MVP-4102\",\n    \"requestId\": \"5f0c6a52-7d1e-4b0a-9a51-2f3c8e6d1b47\"\n}\n```\n\nA validation error adds an `errors` array naming each offending field. Every code is listed in **Errors**. Too many requests answer `429 MVP-4290`: back off, then retry.\n\n### Learn more\n\n[Developer guide](https://www.mvp-payments.com/developers/) · [API reference](https://www.mvp-payments.com/developers/api/) · [Verifying webhooks](https://www.mvp-payments.com/developers/webhooks/) · [Bank connections](https://www.mvp-payments.com/connections/) · [support@mvp-payments.com](mailto:support@mvp-payments.com)","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","isPublicCollection":false,"owner":"25102001","team":4494738,"collectionId":"da2993b8-ff4b-4d4a-9b2e-87941c0077f9","publishedId":"2sBYHSzgxD","public":true,"publicUrl":"https://docs.mvp-payments.com","privateUrl":"https://go.postman.co/documentation/25102001-da2993b8-ff4b-4d4a-9b2e-87941c0077f9","customColor":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"76A661"},"documentationLayout":"classic-single-column","customisation":{"metaTags":[{"name":"description","value":""},{"name":"title","value":""}],"appearance":{"default":"light","themes":[{"name":"dark","logo":"https://content.pstmn.io/c91e1d25-ee11-43a3-876a-9c85289afb58/U2NyZWVuc2hvdCAyMDI2LTEwLTIxIGF0IDExLjQzLjQyLnBuZw==","colors":{"top-bar":"212121","right-sidebar":"303030","highlight":"76A661"}},{"name":"light","logo":"https://content.pstmn.io/c91e1d25-ee11-43a3-876a-9c85289afb58/U2NyZWVuc2hvdCAyMDI2LTEwLTIxIGF0IDExLjQzLjQyLnBuZw==","colors":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"76A661"}}]}},"version":"8.12.8","publishDate":"2026-10-21T08:55:48.000Z","activeVersionTag":"latest","documentationTheme":"light","metaTags":{"title":"","description":""},"logos":{"logoLight":"https://content.pstmn.io/c91e1d25-ee11-43a3-876a-9c85289afb58/U2NyZWVuc2hvdCAyMDI2LTEwLTIxIGF0IDExLjQzLjQyLnBuZw==","logoDark":"https://content.pstmn.io/c91e1d25-ee11-43a3-876a-9c85289afb58/U2NyZWVuc2hvdCAyMDI2LTEwLTIxIGF0IDExLjQzLjQyLnBuZw=="}},"statusCode":200},"environments":[{"name":"MVP Payments - Sandbox","id":"8365da2c-ae9a-4554-a270-4543db0d4d8d","owner":"25102001","values":[{"key":"baseUrl","value":"https://api.mvp-payments.com/v1","type":"default","enabled":true},{"key":"apiKey","value":"your-sandbox-api-key","type":"default","enabled":true},{"key":"clientId","value":"your-client-id","type":"default","enabled":true},{"key":"clientSecret","value":"your-sandbox-client-secret","type":"default","enabled":true},{"key":"callbackUrl","value":"https://www.mvp-payments.com/finished/","type":"default","enabled":true},{"key":"webhookUrl","value":"https://your-server.example/webhooks/mvp","type":"default","enabled":true},{"key":"mvpId","value":"aB3dEfGh1JkLmN0pQr","type":"default","enabled":true},{"key":"sessionUrl","value":"","type":"default","enabled":true}],"published":true}],"user":{"authenticated":false,"permissions":{"publish":false}},"run":{"button":{"js":"https://run.pstmn.io/button.js","css":"https://run.pstmn.io/button.css"}},"web":"https://www.getpostman.com/","team":{"logo":"https://res.cloudinary.com/postman/image/upload/t_team_logo_pubdoc/v1/team/c838f128bbf850a5ecbe40bdfbfd14b3b6d4c3c54b1689c8794a22fbdbe0f0a4","favicon":"https://mvp-payments.com/favicon.ico"},"isEnvFetchError":false,"languages":"[{\"key\":\"csharp\",\"label\":\"C#\",\"variant\":\"HttpClient\"},{\"key\":\"csharp\",\"label\":\"C#\",\"variant\":\"RestSharp\"},{\"key\":\"curl\",\"label\":\"cURL\",\"variant\":\"cURL\"},{\"key\":\"dart\",\"label\":\"Dart\",\"variant\":\"http\"},{\"key\":\"go\",\"label\":\"Go\",\"variant\":\"Native\"},{\"key\":\"http\",\"label\":\"HTTP\",\"variant\":\"HTTP\"},{\"key\":\"java\",\"label\":\"Java\",\"variant\":\"OkHttp\"},{\"key\":\"java\",\"label\":\"Java\",\"variant\":\"Unirest\"},{\"key\":\"javascript\",\"label\":\"JavaScript\",\"variant\":\"Fetch\"},{\"key\":\"javascript\",\"label\":\"JavaScript\",\"variant\":\"jQuery\"},{\"key\":\"javascript\",\"label\":\"JavaScript\",\"variant\":\"XHR\"},{\"key\":\"c\",\"label\":\"C\",\"variant\":\"libcurl\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Axios\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Native\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Request\"},{\"key\":\"nodejs\",\"label\":\"NodeJs\",\"variant\":\"Unirest\"},{\"key\":\"objective-c\",\"label\":\"Objective-C\",\"variant\":\"NSURLSession\"},{\"key\":\"ocaml\",\"label\":\"OCaml\",\"variant\":\"Cohttp\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"cURL\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"Guzzle\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"HTTP_Request2\"},{\"key\":\"php\",\"label\":\"PHP\",\"variant\":\"pecl_http\"},{\"key\":\"powershell\",\"label\":\"PowerShell\",\"variant\":\"RestMethod\"},{\"key\":\"python\",\"label\":\"Python\",\"variant\":\"http.client\"},{\"key\":\"python\",\"label\":\"Python\",\"variant\":\"Requests\"},{\"key\":\"r\",\"label\":\"R\",\"variant\":\"httr\"},{\"key\":\"r\",\"label\":\"R\",\"variant\":\"RCurl\"},{\"key\":\"ruby\",\"label\":\"Ruby\",\"variant\":\"Net::HTTP\"},{\"key\":\"shell\",\"label\":\"Shell\",\"variant\":\"Httpie\"},{\"key\":\"shell\",\"label\":\"Shell\",\"variant\":\"wget\"},{\"key\":\"swift\",\"label\":\"Swift\",\"variant\":\"URLSession\"}]","languageSettings":[{"key":"csharp","label":"C#","variant":"HttpClient"},{"key":"csharp","label":"C#","variant":"RestSharp"},{"key":"curl","label":"cURL","variant":"cURL"},{"key":"dart","label":"Dart","variant":"http"},{"key":"go","label":"Go","variant":"Native"},{"key":"http","label":"HTTP","variant":"HTTP"},{"key":"java","label":"Java","variant":"OkHttp"},{"key":"java","label":"Java","variant":"Unirest"},{"key":"javascript","label":"JavaScript","variant":"Fetch"},{"key":"javascript","label":"JavaScript","variant":"jQuery"},{"key":"javascript","label":"JavaScript","variant":"XHR"},{"key":"c","label":"C","variant":"libcurl"},{"key":"nodejs","label":"NodeJs","variant":"Axios"},{"key":"nodejs","label":"NodeJs","variant":"Native"},{"key":"nodejs","label":"NodeJs","variant":"Request"},{"key":"nodejs","label":"NodeJs","variant":"Unirest"},{"key":"objective-c","label":"Objective-C","variant":"NSURLSession"},{"key":"ocaml","label":"OCaml","variant":"Cohttp"},{"key":"php","label":"PHP","variant":"cURL"},{"key":"php","label":"PHP","variant":"Guzzle"},{"key":"php","label":"PHP","variant":"HTTP_Request2"},{"key":"php","label":"PHP","variant":"pecl_http"},{"key":"powershell","label":"PowerShell","variant":"RestMethod"},{"key":"python","label":"Python","variant":"http.client"},{"key":"python","label":"Python","variant":"Requests"},{"key":"r","label":"R","variant":"httr"},{"key":"r","label":"R","variant":"RCurl"},{"key":"ruby","label":"Ruby","variant":"Net::HTTP"},{"key":"shell","label":"Shell","variant":"Httpie"},{"key":"shell","label":"Shell","variant":"wget"},{"key":"swift","label":"Swift","variant":"URLSession"}],"languageOptions":[{"label":"C# - HttpClient","value":"csharp - HttpClient - C#"},{"label":"C# - RestSharp","value":"csharp - RestSharp - C#"},{"label":"cURL - cURL","value":"curl - cURL - cURL"},{"label":"Dart - http","value":"dart - http - Dart"},{"label":"Go - Native","value":"go - Native - Go"},{"label":"HTTP - HTTP","value":"http - HTTP - HTTP"},{"label":"Java - OkHttp","value":"java - OkHttp - Java"},{"label":"Java - Unirest","value":"java - Unirest - Java"},{"label":"JavaScript - Fetch","value":"javascript - Fetch - JavaScript"},{"label":"JavaScript - jQuery","value":"javascript - jQuery - JavaScript"},{"label":"JavaScript - XHR","value":"javascript - XHR - JavaScript"},{"label":"C - libcurl","value":"c - libcurl - C"},{"label":"NodeJs - Axios","value":"nodejs - Axios - NodeJs"},{"label":"NodeJs - Native","value":"nodejs - Native - NodeJs"},{"label":"NodeJs - Request","value":"nodejs - Request - NodeJs"},{"label":"NodeJs - Unirest","value":"nodejs - Unirest - NodeJs"},{"label":"Objective-C - NSURLSession","value":"objective-c - NSURLSession - Objective-C"},{"label":"OCaml - Cohttp","value":"ocaml - Cohttp - OCaml"},{"label":"PHP - cURL","value":"php - cURL - PHP"},{"label":"PHP - Guzzle","value":"php - Guzzle - PHP"},{"label":"PHP - HTTP_Request2","value":"php - HTTP_Request2 - PHP"},{"label":"PHP - pecl_http","value":"php - pecl_http - PHP"},{"label":"PowerShell - RestMethod","value":"powershell - RestMethod - PowerShell"},{"label":"Python - http.client","value":"python - http.client - Python"},{"label":"Python - Requests","value":"python - Requests - Python"},{"label":"R - httr","value":"r - httr - R"},{"label":"R - RCurl","value":"r - RCurl - R"},{"label":"Ruby - Net::HTTP","value":"ruby - Net::HTTP - Ruby"},{"label":"Shell - Httpie","value":"shell - Httpie - Shell"},{"label":"Shell - wget","value":"shell - wget - Shell"},{"label":"Swift - URLSession","value":"swift - URLSession - Swift"}],"layoutOptions":[{"value":"classic-single-column","label":"Single Column"},{"value":"classic-double-column","label":"Double Column"}],"versionOptions":[],"environmentOptions":[{"value":"0","label":"No Environment"},{"label":"MVP Payments - Sandbox","value":"25102001-8365da2c-ae9a-4554-a270-4543db0d4d8d"}],"canonicalUrl":"https://docs.mvp-payments.com/view/metadata/2sBYHSzgxD"}