LidyaDocs

Changelog

We never break a versioned endpoint without a deprecation cycle. The current major is /v1/. When we introduce /v2/, the old version stays live for at least 12 months.

2026-05-12

v0.2 — White-label checkout, international cards, full account self-service.

  • New paymentMethod: credit_card_international (the rail merchants without configured TR providers can use today). Validation accepts it alongside bank_transfer and credit_card_tr.
  • paymentPageUrl returned by POST /v1/charges now points at https://checkout.lidya.money/c/{paymentId} — Lidya-branded hosted checkout. The upstream URL is rewritten at response time; nothing in your DB changes.
  • GET /v1/charges/{id} now returns the customer block (name, email, phone, reference) and providerStatus. customerIdNumber stays encrypted at rest and is intentionally never echoed back.
  • New GET /v1/charges/{id}/webhook-deliveries — last 20 outbound webhook attempts for a single charge (matches payload.id, payload.paymentId, or payload.data.id).
  • Provider 4xx responses now surface as HTTP 502 with { code: "provider_rejected", message, details: { providerCode, providerStatus } } instead of the old generic 500. The upstream message is sanitised before it leaves Lidya (stack frames, internal paths, and long hex ids are stripped).
  • Auth: POST /v1/auth/forgot-password and POST /v1/auth/reset-password, plus the 2FA enrollment / verify / disable trio.
  • Dashboard: API keys list + revoke, webhook endpoints with secret rotation and per-endpoint delivery log + retry, events filter + payload modal, charge detail with timeline + webhook deliveries, payout detail with chain explorer links, EN/TR/RU language switcher.
  • Admin: organization detail (apiKeys, team, 30-day stats), per-row payout approve/reject, overview dashboard with daily-volume LineChart and monthly-new-merchants BarChart, global search, audit log with CSV export.
  • Apply form on lidya.money now POSTs to /v1/applications (was a mailto: link — no Application rows were being created, the welcome email + admin notification both depended on this).

2026-05-06

v0.1 — Initial public API.

  • POST /v1/charges, GET /v1/charges/{id}, GET /v1/charges
  • GET /v1/balance
  • POST /v1/applications (no auth)
  • POST /webhooks/v1/payments (provider webhook receiver)
  • HMAC-SHA256 signed merchant webhooks (Lidya-Signature)
  • 24h idempotency cache on writes
  • Stable error envelope { error: { code, message, requestId, details } }

Crypto payouts, wallets management, customers, events feed, and api-key management are documented but currently behind a feature flag — email info@lidya.money to enable for your account.

We post API changes here first, then mirror to email + Telegram for any breaking deprecation.