Skip to main content

Documentation Index

Fetch the complete documentation index at: https://waffo.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

The Postman collection provides preconfigured requests for all Waffo APIs, making it easy to run tests quickly.

How to obtain

Download the Postman Collection JSON file for the Sandbox environment: Download Postman Collection If your browser still opens a preview, right-click the link, choose Save link as, and keep the .postman_collection.json file name.

How to import

1

Open Postman

In Postman, select Import → Upload Files.
2

Upload the file

Select the downloaded Collection JSON file.
3

Configure environment variables

Configure the following environment variables.

Environment variables

VariableDescriptionExample value
base_urlAPI base URLhttps://api-sandbox.waffo.com
api_keyAPI KeyObtain from the Dashboard
merchant_idMerchant IDM000001
signatureSHA256WithRSA signature of the request body (Base64)Generate before sending a request

Included endpoints

EndpointPath
Create paymentPOST /api/v1/order/create
Query paymentPOST /api/v1/order/inquiry
Cancel orderPOST /api/v1/order/cancel
Request refundPOST /api/v1/order/refund
Query refundPOST /api/v1/refund/inquiry
Create subscriptionPOST /api/v1/subscription/create
Query subscriptionPOST /api/v1/subscription/inquiry
Cancel subscriptionPOST /api/v1/subscription/cancel
Update subscriptionPOST /api/v1/subscription/change
Query updatePOST /api/v1/subscription/change/inquiry
Subscription managementPOST /api/v1/subscription/manage
Merchant configuration inquiryPOST /api/v1/merchantconfig/inquiry
Payment method configuration inquiryPOST /api/v1/paymethodconfig/inquiry

Signature configuration

The collection includes the X-SIGNATURE: {{signature}} header. Before sending a request, sign the raw JSON body with your merchant private key using SHA256WithRSA, then set the Base64 result as the signature variable. Regenerate the signature whenever you change the request body. Do not store production private keys in the Postman collection file.