Skip to main content
POST

Authorizations

x-api-key
string
header
required

EASYCRED Partner API Key

Headers

x-api-key
string
required

Your active EASYCRED Partner API Key (format: ec_live_... or ec_test_...)

Example:

"ec_live_abc123_xyz789"

x-timestamp
string
required

Unix epoch seconds. Requests outside the 5-minute tolerance window are rejected.

Example:

"1759820800"

x-nonce
string
required

Unique UUID v4 nonce per request to prevent replay attacks.

Example:

"d3b07384-d113-4ec4-9d45-2f928e123456"

x-signature
string
required

HMAC-SHA256 signature calculated over method, path, timestamp, nonce, and raw request body.

Example:

"a1b2c3d4e5f67890123456789abcdef0123456789abcdef0123456789abcdef0"

X-Journey-Session
string
required

Journey session token returned by Step 1 (Initiate Headless Journey).

Example:

"jsess_eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

Path Parameters

journeyId
string
required

Journey ID returned by initiate

Example:

"jrn_67a12b3c4d5e6f7a"

Body

application/json
kind
enum<string>
required
Available options:
SELECT_OFFER,
SELECT_GOLD_LOAN_BRANCH,
SUBMIT_BANK_ACCOUNT
Example:

"SELECT_OFFER"

payload
object
required
Example:

Response

Action processed successfully

success
boolean
required
Example:

true

data
object
required