Quickstart

PrerequisitesCopy Anchor Link

• An app with app_id and an app RSA private key
• Merchant/store openApp’d to that app (otherwise admin may return E02503)
• Base URL, e.g. https://api.9xnetwork.com

Path A — morph 1 onlyCopy Anchor Link

1. Build an order.query (or any authorized method)
2. Compute RSA2 sign per Authentication
3. POST /api/entry
4. Check the envelope: code === "0" or a clear business error (not a signature failure)

Confirms entry + app signing.

Path B — payments with Access KeyCopy Anchor Link

1. access.key.create with scope_id=payments.read_write; store key_id + secret
2. Optionally create a payments.refund manager
3. Ensure Access Key force is enabled for the app (platform config)
4. Call order.query with both app sign and Access Key key_sign
5. Refund with manager; clerk refund should yield E07315

Path C — tool-assistedCopy Anchor Link

Use this repo’s Apifox collection if you prefer not to script signing yet: admin cases cover create/list/rotate/revoke; morph-2 cases cover missing key, bad HMAC, wrong store, scope denial, etc.

NextCopy Anchor Link

• Fields & JSON examples: API Reference
• Scope & rotation: Access Key