This page tracks the documentation and external contract revision series for the Waffo API. The
v1.3 values below are not values for the X-API-VERSION request header. Raw HTTP requests currently use 1.0.0; SDKs manage this header automatically, so do not set or override it. For SDK package (Node.js / Java / Go / Python / PHP) release notes, see SDK changelog.| Version | Date | Changes |
|---|---|---|
| v1.3 | 2026-11-09 | Added public error codes A0076–A0078 for Subscription seat add-ons that are paid, in payment, or being cancelled, and A0080 when no payment channel supports MIT for the payment method. All four return HTTP 400. |
| v1.3 | 2026-11-02 | Wallet inquiry replaces top-level network, asset, and payTo with paymentOptions[]; each option contains these fields and decimals. This is a compatibility risk that requires caller changes. Added mppInfo to order creation, session updates, and creation/inquiry responses, and repaymentDetails to Subscription inquiry PaymentDetail. Payment method configuration adds userCurrency and clarifies that currency is the order currency used for amount limits. Increased userRegistrationIp and userLastSeenIp maximum lengths from 24 to 64 in order and Subscription risk data. For Payout BANK_ACCOUNT, omitted payoutMethodName now defaults to {country}_BANK. Expanded descriptions for 14 Issuing APIs, including asynchronous funding, card freezes, and sensitive card data access restrictions. Endpoints, required markers, types, and enums are unchanged. |
| v1.3 | 2026-10-30 | Added public error codes A0071–A0075 for agent-payment credentials and Subscription-period repayment-state validation, and A0079 when a payment session without a card pay method cannot create a card tokenization session. |
| v1.3 | 2026-10-27 | Added five Withdraw APIs for account balance and history inquiries, and Withdraw consult, create, and inquiry. Added three Risk Control transaction limit APIs for create, inquiry, and update. The main OpenAPI specification no longer includes the three /web/v1/session/* browser session endpoints. |
| v1.3 | 2026-10-26 | Added public error codes A0063–A0070 for payment-session validity, duplicate orders, confirmation tokens, submission state, required fields, payment credentials, pre-payment validation, and quote-expiry validation. |
| v1.3 | 2026-10-23 | Added 14 Issuing APIs for accounts, funding, cards, and transactions, plus 7 Waffo Element session APIs for order and Subscription session creation/updates and browser session info, validate, and confirm. Chargeback file download changed from GET /api/v1/chargeback/file/download with query parameters and a 302 redirect to a POST JSON request returning downloadUrl and expiresAt; the download URL is valid for 5 minutes. File upload now requires X-SIGNATURE and multipart meta and file parts; meta is a JSON string containing required merchantId, filename, sha256, and timestamp fields. Sign the original meta string; upload responses still omit X-SIGNATURE. Subscription creation adds paymentTokenData, paymentInfo.userPaymentAccessToken, userInfo.userAgent, and userInfo.userBrowserIp; the two browser fields are conditionally required when you pass Apple Pay/Google Pay paymentTokenData directly. Clarified that scheduledCancelAt must not exceed the Subscription end time, or 2 years from now if there is no end time, and that you must contact Waffo technical support to enable it. Changed the description of Payout payoutMethodProperty.bankCode from required to conditional. |
| v1.3 | 2026-10-22 | Documented subscriptionInfo.subscriptionEvent in PAYMENT_NOTIFICATION: PERIOD_CHARGE (period charge), USER_ADD_PAYMENT_METHOD (payment method addition), and TOPUP_CHARGE (Subscription upgrade or add-on top-up). Clarified the distinction between master status notifications and final period payment results, and added guidance to check the period, amount, and payment result before granting period entitlements. |
| v1.3 | 2026-10-19 | Clarified payee information in Payout creation requests, creation responses, and inquiry responses: use payeeInfo when payeeType is INDIVIDUAL, and receivingBusinessInfo when it is BUSINESS; field structures and required markers are unchanged. |
| v1.3 | 2026-10-16 | Added A0061: the merchant is not allowed to initiate MIT (HTTP 400). |
| v1.3 | 2026-10-12 | Added POST /api/v1/subscription/resume to revoke a scheduled Subscription cancellation; added scheduledCancelAt to Subscription cancellation requests, cancellation responses, and inquiry responses, and documented ACTIVE as the cancellation response orderStatus before a scheduled cancellation takes effect; added taxInfo to order creation, refunds, and their inquiry responses, and orderTaxAmount to order and refund inquiry responses; orderAmount and refundAmount are no longer unconditionally required when you provide a tax-inclusive amount instead, and refundAmount now has a maximum length of 24; added payeeType and receivingBusinessInfo to Payout creation and inquiry; deprecated PayeeInfo.payeeType and removed its required marker, and removed the required marker from the creation request field payeeInfo; changed the documented Payout EWALLET identifier type PHONE from a default to a recommendation |
| v1.3 | 2026-10-09 | Added public error codes A0051, A0052, and A0053 for declared tax amount validation; added A0056, A0058, A0059, A0060, and A0062 for subscription scheduled-cancellation validation |
| v1.3 | 2026-09-29 | Documented PLATFORM_CANCELLED in subscriptionStatus for Subscription create, inquiry, and management responses |
| v1.3 | 2026-09-08 | Added seat add-on top-up topupInfo to subscription update requests and responses, and added topupDetails to subscription inquiry payment details; added payMethodCountry to subscription create, change, and inquiry payment information, and added cashierLanguage to subscription change requests; added purpose to Payout order data PayoutOrderData and removed feeStatus, mid, and subMid; PayeeInfo.payeeId is no longer marked as required; removed the Chargeback evidence field EvidenceField.evidenceFields from the public schema; renamed Chargeback and Reported Fraud list response page schemas to ApiPageResponse... |
| v1.3 | 2026-09-07 | Added public error codes A0055, B0014, B0015, and B0016 for subscription modification-in-progress and card status validation scenarios |
| v1.3 | 2026-08-24 | Added the Reported Fraud inquiry API POST /api/v1/fraud-report/list; added receiptTemplateId to order and subscription payment information; added merchantOrderId to Chargeback detail and list responses; chargebackId and originalOrderId are no longer marked as required in Chargeback inquiry requests |
| v1.3 | 2026-08-21 | Added public error codes A0048, A0049, A0050, and A0054 for subscription plan-change states: in payment, cancelling, paid successfully, and another change request in progress |
| v1.3 | 2026-08-20 | Added the Point Topup (Waffo Point Topup) API: the GET /redirect signed redirect endpoint, POST /api/v1/gamepin/fulfillment-inquiry fulfillment inquiry, and the FULFILLMENT_RESULT_NOTIFY fulfillment result webhook |
| v1.3 | 2026-07-24 | Marked subscriptionManagementUrl as required in the subscription creation request; added currency, order amount limits, payment method type, and refund support fields to PayMethodDetail; currentStatus is no longer marked as required; restored mid and subMid in Payout order data PayoutOrderData and updated Payout payee account, description, and purpose guidance; card number, expiry, CVV, and cardholder name in AcqCardInfo are no longer marked as required |
| v1.3 | 2026-07-22 | Clarified userEmail guidance in order creation and subscription creation requests: the field is required; when a real email is unavailable, pass a unique user-ID-based fallback email; avoid placeholders or shared email addresses |
| v1.3 | 2026-07-20 | Updated OpenAPI nested object schema names to include parent request or response context, distinguishing shared objects such as MerchantInfo, PromotionInfo, and SubscriptionInfo to avoid component-name collisions |
| v1.3 | 2026-07-17 | Added public error code A0047 for checkout page language values that do not follow IETF BCP 47 |
| v1.3 | 2026-07-15 | Updated Payout order data PayoutOrderData: added the actual fee amount field actFeeAmount and removed the fields mid and subMid; feeAmount is no longer recommended, read actFeeAmount instead |
| v1.3 | 2026-07-13 | Added the order capture API POST /api/v1/order/capture for manual capture confirmation in Auth-Capture mode |
| v1.3 | 2026-07-08 | Temporarily synced the public error code table by adding A0025, A0028, A0033-A0037, A0039-A0046, B0008-B0013, and D0002; increased the payMethodName maximum length for subscription creation and subscription changes from 24 to 256; added a subscription creation paymentInfo example; clarified the order creation payMethodProperties description |
| v1.2 | 2023-09-15 | Added the Direct Payment product type; updated error codes A0019, A0020, A0021 |
| v1.1 | 2023-05-31 | Added riskData Risk Control data; added AddressInfo and GoodsInfo for the BNPL payment method; updated error codes |
| v1.0 | 2023-03-15 | Initial release |