Hosted Checkout mode is Infini's most recommended integration method. Merchants only need to create orders, redirect to checkout_url, and handle Webhooks to complete payment integration. This chapter only contains API documentation and corresponding field descriptions for Hosted Checkout mode.
All API prefix:
/v1/acquiring
POST /v1/acquiring/order
Used to create an order and return the hosted checkout access URL (checkout_url).
Content-Type: application/json
Date: {GMT Time}
Authorization: Signature ...| Field | Type | Required | Description |
|---|---|---|---|
| amount | string/number | Yes | Order fiat amount (up to 6 decimal places) |
| request_id | string | Yes | Merchant-generated idempotency key, UUID "a759b99a-9d22-433d-bced-ab1d2e1bea1d" |
| client_reference | string | No | Merchant custom order number, recommended to be unique |
| order_desc | string | No | Order description |
| expires_in | number | No | Order expiration relative time (Unix seconds); use backend default if not provided |
| merchant_alias | string | No | Merchant display name (overrides backend configuration) |
| success_url | string | No | Redirect address after successful order payment |
| failure_url | string | No | Redirect address after failed order payment |
| pay_methods | array of integers | No | Payment modes: [1] crypto, [2] card, [1,2] both. Defaults to merchant config |
{
"order_id": "10290d05-xxxx",
"request_id": "your request_id",
"checkout_url": "https://checkout.infini.money/pay/xxxx",
"client_reference": "client_reference"
}GET /v1/acquiring/order?order_id ={order_id}
Returns real-time order status information.
Database stored field recording the order's processing status.
| Value | Description |
|---|---|
pending | Awaiting payment |
processing | Processing (partial funds received) |
paid | Paid |
partial_paid | Partial payment expired |
expired | Expired without payment |
{
"order_id": "ord-123",
"status": "processing",
"amount": "100",
"currency": "USD",
"amount_confirming": "0",
"amount_confirmed": "0.5",
"expires_at": 1763512195,
"created_at": 1763512000,
"exception_tags": ["wrong_currency"],
"client_reference": "ORDER-001"
}POST /v1/acquiring/token/reissue
Used to regenerate the hosted checkout URL, suitable for scenarios such as payment page closure or Token expiration.
| Field | Type | Required | Description |
|---|---|---|---|
| order_id | string | Yes | Unique order ID |
{
"order_id": "ord-123",
"checkout_url": "https://checkout.infini.money/pay/xxxx"
}Note: For most merchants, you only need to create an order and redirect to the checkout URL. The Payment APIs below are optional and require additional development work. They allow you to programmatically create and manage payments instead of using the hosted checkout.
POST /v1/acquiring/payment
Create a payment for an order programmatically.
Request Body:
order_id(string, required): Order IDchain(string, required): Blockchain network nametoken_id(string, required): Token identifierpayment_method(integer, optional): Payment method (currently only supports 1 for crypto)
Response:
{
"payment_id": "pay-123",
"amount": "100.00",
"address": "0x1234567890abcdef1234567890abcdef12345678",
"expires_at": 1763512195
}GET /v1/acquiring/payment?payment_id={payment_id}
Query payment details including transaction history.
GET /v1/acquiring/payment/list?order_id={order_id}
Get all payments associated with an order.
POST /v1/acquiring/fund/withdraw
Used to withdraw funds from your Infini account to an external wallet address.
| Field | Type | Required | Description |
|---|---|---|---|
| chain | string | Yes | Blockchain network (see supported chains below) |
| token_type | string | Yes | Token type, e.g. "USDT" |
| amount | string | Yes | Withdrawal amount |
| wallet_address | string | Yes | Destination wallet address |
| note | string | No | Optional note for the withdrawal |
Sandbox Environment:
| Chain | Supported Tokens |
|---|---|
| TTRON | USDT |
Production Environment:
| Chain | Supported Tokens | Fee |
|---|---|---|
| ETHEREUM | USDT, USDC | 5 |
| BSC | USDT, USDC | 0.5 |
| SOLANA | USDT, USDC | 1 |
| ARBITRUM | USDT, USDC | 0.5 |
| TRON | USDT | 3 |
Note:
- Chain names and token types must be in uppercase
- Fees are deducted in the same token type as your withdrawal. For example, if you withdraw USDT, the fee is deducted in USDT; if you withdraw USDC, the fee is deducted in USDC
{
"chain": "ETHEREUM",
"token_type": "USDT",
"amount": "6",
"wallet_address": "0x5f716e5775b18409917e2a2f0762d29d6c385cb0",
"note": "123"
}{"code":0,"message":"","data":{"request_id":"e94b4e88-36c2-4550-907e-839742cf5fae"}}POST /v1/acquiring/subscription
Used to create a subscription and return the hosted checkout access URL (checkout_url). The first payment order is created simultaneously.
Content-Type: application/json
Date: {GMT Time}
Authorization: Signature ...| Field | Type | Required | Description |
|---|---|---|---|
| amount | string/number | Yes | Order fiat amount (up to 6 decimal places) |
| request_id | string | Yes | Merchant-generated idempotency key, UUID format |
| client_reference | string | No | Merchant custom order number |
| expires_in | number | No | Order expiration relative time (Unix seconds); use backend default if not provided |
| merchant_alias | string | No | Merchant display name (overrides backend configuration) |
| success_url | string | No | Redirect URL after successful payment |
| failure_url | string | No | Redirect URL after failed payment |
| pay_methods | array of integers | No | Payment modes: [1] crypto, [2] card, [1,2] both. Defaults to merchant config |
| subscription | object | Yes | Subscription parameters (see below) |
subscription object:
| Field | Type | Required | Description |
|---|---|---|---|
| merchant_sub_id | string | Yes | Merchant-defined subscription ID (must be unique per merchant) |
| plan_name | string | Yes | Subscription plan name |
| amount | string/number | Yes | Recurring amount per billing period (up to 6 decimal places) |
| interval_unit | string | Yes | Billing interval unit: DAY or MONTH |
| interval_count | integer | Yes | Number of intervals per billing cycle |
| payer_email | string | Yes | Payer email address (used for invoice notifications) |
| invoice_lead_days | integer | Yes | Days before period end to send renewal invoice (min: 0). Required in invoice mode |
| invoice_due_days | integer | Yes | Days after invoice creation before it expires (min: 1). Required in invoice mode |
| subscription_end_at | integer | No | Unix timestamp for subscription termination (0 = never) |
| canceled_url | string | No | Redirect URL after subscription cancellation |
{
"order_id": "10290d05-xxxx",
"request_id": "your request_id",
"client_reference": "client_reference",
"checkout_url": "https://checkout.infini.money/subscription/xxxx",
"token": "eyJhbGciOiJIUzI1NiIs...",
"subscription": {
"subscription_id": "sub-xxxx",
"merchant_sub_id": "msub_001",
"status": "pending"
}
}GET /v1/acquiring/subscription?merchant_sub_id={merchant_sub_id}
Returns the subscription detail by merchant subscription ID.
| Value | Description |
|---|---|
pending | Awaiting first payment |
active | Active subscription |
canceled | Canceled |
{
"subscription_id": "sub-xxxx",
"merchant_sub_id": "msub_001",
"plan_name": "Monthly Plan",
"trigger_method": "invoice",
"status": "active",
"currency": "USD",
"first_amount": "10.00",
"amount": "9.99",
"interval_unit": "MONTH",
"interval_count": 1,
"current_period_start": 1740000000,
"current_period_end": 1742678400,
"subscription_end_at": 0,
"next_invoice_at": 1742592000,
"payer_email": "user@example.com",
"created_at": 1740000000,
"updated_at": 1740000100
}POST /v1/acquiring/subscription/cancel
Used to cancel an active subscription. The subscription remains usable until the end of the current billing period.
| Field | Type | Required | Description |
|---|---|---|---|
| merchant_sub_id | string | Yes | Merchant-defined subscription ID |
| cancel_reason | string | Yes | Cancel reason: user_request, by_merchant_api, or by_operation |
| note | string | No | Optional cancellation note |
{
"subscription_id": "sub-xxxx",
"merchant_sub_id": "msub_001",
"status": "canceled",
"canceled_at": 1742678400,
"cancel_reason": "by_merchant_api"
}Merchants can configure Webhook receiving address in the backend. When order or subscription status changes, Infini will actively push the following events:
Order events:
- order.created
- order.processing
- order.completed
- order.expired
- order.late_payment
Subscription events:
- subscription.update
- subscription.cancel
| Header | Description |
|---|---|
| X-Webhook-Timestamp | Unix timestamp |
| X-Webhook-Event-Id | Unique event ID |
| X-Webhook-Signature | Webhook HMAC signature |
{
"event": "order.completed",
"order_id": "ord-123",
"client_reference": "ORDER-001",
"amount": "100",
"currency": "USD",
"status": "paid",
"amount_confirmed": "100",
"amount_confirming": "0",
"created_at": 1763512195,
"updated_at": 1763512573,
"exception_tags": []
}{
"event": "subscription.update",
"subscription_id": "sub-xxxx",
"merchant_sub_id": "msub_001",
"plan_name": "Monthly Plan",
"trigger_method": "invoice",
"status": "active",
"currency": "USD",
"amount": "9.99",
"interval_unit": "MONTH",
"interval_count": 1,
"payer_email": "user@example.com",
"current_period_start": 1740000000,
"current_period_end": 1742678400,
"next_invoice_at": 1742592000,
"cancel_reason": "by_merchant_api",
"canceled_at": 1742678400,
"created_at": 1740000000,
"updated_at": 1740000100
}Note:
next_invoice_at,cancel_reason, andcanceled_atare only included when the corresponding values are present. For example,cancel_reasonandcanceled_atonly appear insubscription.cancelevents.
For Webhook signature verification methods, please refer to Chapter 4: Authorization and Security Mechanisms.
All error response format:
{
"code": 40001,
"message": "Invalid request",
"detail": "expires_at must be greater than current timestamp"
}| HTTP | Code | Description |
|---|---|---|
| 400 | 40003 | amount must be positive |
| 400 | 40006 | amount must be greater than 0.01 |
| 401 | 401 | Invalid HMAC signature |
| 404 | 40401 | Order does not exist |
| 409 | 40902 | client_reference duplicate |
| 409 | 40906 | Order expired |
| 404 | 43000 | Subscription not found |
| 400 | 43002 | Subscription already canceled |
The following example demonstrates the complete flow: Create Order → Redirect to Checkout → Webhook → Reissue Token.
import hmac, hashlib, base64, time
from datetime import datetime, timezone
import requests
key_id = "merchant-001-prod"
secret_key = b"your-secret-key"
def create_order(amount):
method = "POST"
path = "/v1/acquiring/order"
gmt_time = datetime.now(timezone.utc).strftime('%a, %d %b %Y %H:%M:%S GMT')
signing_string = f"{key_id}\n{method} {path}\ndate: {gmt_time}\n"
signature = base64.b64encode(
hmac.new(secret_key, signing_string.encode(), hashlib.sha256).digest()
).decode()
response = requests.post(
f"https://openapi.infini.money{path}",
json={
"amount": amount,
"currency": "USD",
"client_reference": "ORDER-2024-001",
"description": "Product purchase",
"expires_at": int(time.time()) + 3600
},
headers={
"Date": gmt_time,
"Authorization": f'Signature keyId="{key_id}",algorithm="hmac-sha256",headers="@request-target date",signature="{signature}"',
"Content-Type": "application/json"
}
)
response.raise_for_status()
return response.json()@app.route('/create-payment', methods=['POST'])
def create_payment():
order = create_order(amount=request.json['amount'])
return {"checkout_url": order["checkout_url"]}@app.route('/webhook', methods=['POST'])
def handle_webhook():
event = request.json
if event['event'] == 'order.completed':
process_fulfillment(event['order_id'], event['amount_confirmed'])
elif event['event'] == 'order.processing':
update_order_progress(event['order_id'], event['status'])
elif event['event'] == 'order.expired':
mark_order_expired(event['order_id'])
return {"status": "ok"}def reissue_checkout_token(order_id):
method = "POST"
path = "/v1/acquiring/token/reissue"
gmt_time = datetime.now(timezone.utc).strftime('%a, %d %b %Y %H:%M:%S GMT')
signing_string = f"{key_id}\n{method} {path}\ndate: {gmt_time}\n"
signature = base64.b64encode(
hmac.new(secret_key, signing_string.encode(), hashlib.sha256).digest()
).decode()
response = requests.post(
f"https://api.infini.money{path}",
json={"order_id": order_id},
headers={
"Date": gmt_time,
"Authorization": f'Signature keyId="{key_id}",algorithm="hmac-sha256",headers="@request-target date",signature="{signature}"',
"Content-Type": "application/json"
}
)
response.raise_for_status()
return response.json()