Stable route prefix
All current endpoints live under /api/v1. Breaking changes will use a new version prefix instead of silently changing v1 behavior.
Important
The Nakroteck Client API is versioned under /api/v1. V1 is designed for first-party client apps and integrations.
All current endpoints live under /api/v1. Breaking changes will use a new version prefix instead of silently changing v1 behavior.
Orders create Nakroteck invoices. Payment completion and provisioning still run through the existing invoice lifecycle and webhooks.
Use Sanctum bearer tokens. Revoke tokens from the client area when a device, app, or integration is no longer trusted.
Protected client endpoints use the route client ID and may also receive X-Client-Id. If both are present, they must match.
Order creation and native payment-start endpoints require Idempotency-Key so retries do not create duplicate orders or payment sessions.
API clients should poll the invoice payment-status endpoint after starting Stripe or Paystack payment. Webhooks remain the source of truth for completion.
Non-breaking additions may ship anytime. Deprecated fields will remain for a practical migration window before removal in a future version.