.png)
Checkout.com Integration Guide
Connect Checkout.com payment APIs and selected webhook events with enterprise order, finance, customer, and reconciliation workflows.
Checkout.com integration options at a glance
Checkout.com provides REST APIs as its primary server-side integration mechanism for payments, captures, voids, refunds, payment instruments, customers, disputes, balances, and related account functions. It also supports webhook notifications for selected payment, refund, dispute, and account events. Martini can consume these APIs, receive and verify webhook requests, transform payment data, and orchestrate downstream workflows. Asynchronous outcomes can be coordinated with webhook-driven processing, scheduled retrieval, pagination, checkpoints, controlled concurrency, and idempotency keys. File functionality is available for selected workflows such as dispute evidence, while general-purpose bulk, GraphQL, SOAP, and direct database access were not confirmed.
Common Checkout.com integration patterns
Common Checkout.com data objects used in integrations
Authentication and security considerations
API authentication
Checkout.com server-to-server API calls use secret API keys as bearer tokens in the Authorization header. Store these keys in Martini secrets or environment configuration and maintain separate credentials for test and live environments.
Webhook protection
Webhook requests should be authenticated using Checkout.com’s documented signature or verification mechanism before Martini processes event data. Restrict the receiving endpoint and reject invalid or unrecognized events.
Payment data protection
- Do not expose secret keys in client-side applications, mappings, logs, or error responses.
- Prefer supported tokens, payment instruments, hosted payment pages, or client-side collection patterns to reduce PCI scope.
- Redact card details, credentials, and unnecessary personal information from workflow logs.
Operational considerations for Checkout.com integrations
Reliability and throughput
Design for HTTP 429 responses, transient 5xx failures, bounded retries, exponential backoff, and controlled concurrency. Use idempotency keys for supported payment and refund mutations.
Webhooks and state
Verify signatures, track processed event identifiers, and do not assume webhook ordering. Retrieve current resource state when required before applying a downstream update.
Synchronization
Paginate list responses and use checkpoints for scheduled retrieval. Advance a checkpoint only after successful processing, account for late-arriving updates, and make overlapping runs idempotent.
Amounts and schemas
Represent amounts in Checkout.com’s expected minor currency units and validate currency codes. Pin or explicitly select API versions where supported, tolerate additive fields, and regression-test payment, refund, and webhook mappings when schemas change.
Reconciliation
Authorization, capture, refund, dispute, settlement, and balance activity can have different lifecycles. Reconcile using stable identifiers, operation relationships, and accounting dates appropriate to the business process.
Why use Martini instead of scripts or point-to-point integrations?
Centralized integration logic
Martini provides a governed workflow layer for Checkout.com API calls, webhook processing, validation, mapping, business rules, retries, and downstream updates instead of duplicating payment logic across applications.
Reusable APIs and workflows
A Martini API façade can normalize payment and refund requests while reusable workflows handle provider-specific authentication, idempotency, correlation, and error handling.
Maintainable synchronization
Scheduled workflows and webhook-triggered processing can work together for near-real-time updates, recovery, reconciliation, pagination, and checkpoint management.
Secure operations
Martini centralizes environment configuration and secrets while supporting controlled logging and workflow-based handling of sensitive payment information.