API reference
Signing
POST signing endpoints — sign, confirm, and wildcard.
Base path: /api/v2/signing · Billing: signature
The gateway picks the request schema from action and whether seeds is present:
| Condition | Schema | Fields |
|---|---|---|
action: sign, no seeds | Sign | nin (min 11), payload, webhook |
action: confirm, no seeds | Confirm | nin, payload — no webhook |
Wildcard + sign | Wildcard sign | payload, seeds (1–10), webhook — no nin |
Wildcard + confirm | Wildcard confirm | payload, seeds — no webhook |
Track completion with flow ping/SSE. For sign, also handle your webhook.
SDK: pasby.signing.sameDevice, differentDevice, wildcard — TypeScript SDK.
POST /api/v2/signing/same-device
Headers: x-api-key, x-access-secret
curl -sS -X POST "https://s.pasby.africa/api/v2/signing/same-device" \
-H "x-api-key: bk-test_YOUR_KEY" \
-H "x-access-secret: YOUR_APP_SECRET" \
-H "Content-Type: application/json" \
-d '{
"nin": "12345678901",
"payload": "txn-001",
"action": "sign",
"webhook": {
"host": "https://your-app.com/pasby/events",
"reference": "txn-001"
}
}'POST /api/v2/signing/different-device
Same body rules as same-device. Typical for web apps where the user completes on their phone.
curl -sS -X POST "https://s.pasby.africa/api/v2/signing/different-device" \
-H "x-api-key: bk-test_YOUR_KEY" \
-H "x-access-secret: YOUR_APP_SECRET" \
-H "Content-Type: application/json" \
-d '{
"nin": "12345678901",
"payload": "order-789",
"action": "sign",
"webhook": {
"host": "https://your-app.com/pasby/events",
"reference": "order-789"
}
}'POST /api/v2/signing/wildcard
v2 only — omit nin; include seeds (1–10). Webhook required for action: sign.
curl -sS -X POST "https://s.pasby.africa/api/v2/signing/wildcard" \
-H "x-api-key: bk-test_YOUR_KEY" \
-H "x-access-secret: YOUR_APP_SECRET" \
-H "Content-Type: application/json" \
-d '{
"payload": "wildcard-sign-001",
"action": "sign",
"seeds": 5,
"webhook": {
"host": "https://your-app.com/pasby/events",
"reference": "wildcard-sign-001"
}
}'Legacy v1
| Suffix | v1 auth | Notes |
|---|---|---|
same-device | key + secret + token | |
different-device | key + token | |
wildcard | — | Not available on v1 |
Full walkthroughs: Signing guide.