Bridge v2 External Clients — Integration

Overview

Create governed external PayStream clients with HMAC-signed requests, scoped operations, replay protection, rate limits, IP policy, expiry, and secret rotation.

Capabilities

• Bridge v2 endpoint per client and operation

• HMAC-SHA256 canonical request signing

• Timestamp tolerance and request-ID replay protection

• Allowed-operation, scope, IP, rate-limit, and expiry controls

• Current/previous secret rotation and Bridge request logging

1. 1

   Step 1

   Create or mint a Bridge client in PayStream integration administration.

   Back to top
2. 2

   Step 2

   Choose allowed operations, scopes, network policy, rate limit, and expiry.

   Back to top
3. 3

   Step 3

   Store the issued secret securely on the client side.

   Back to top
4. 4

   Step 4

   Sign canonical Bridge v2 requests and call the assigned client/operation endpoint.

   Back to top

Limitations

• Bridge authorization remains operation-scoped and resource-scoped after signature verification.

FAQs

Pricing