Skip to main content

​
Integrations Overview

Waffo Pancake provides a powerful API and developer tools to integrate payments directly into your applications.

​
API Architecture

Waffo Pancake uses a hybrid API:
  • REST (POST) for all write operations via /v1/actions/{domain}/{action}
  • GraphQL for all read operations via /v1/graphql
Your Application
    |
    +-- REST POST requests --> Create/Update/Delete
    |
    +-- GraphQL queries --> Read data

​
Base URL

https://waffo-pancake-auth-service.vercel.app/v1

​
API Keys

API Keys authenticate server-to-server requests. Authentication is handled automatically by the SDK.

Test Keys

Created for test environment. No real charges.

Live Keys

Created for prod environment. Process real payments.

​
Creating API Keys

1

Navigate to Developers

Go to Dashboard > Developers.
2

Generate Key Pair

Click “Generate” to create a key pair. The public key is sent to the server.
3

Name Your Key

Give it a descriptive nickname (e.g., “Production Server”).
4

Select Environment

Choose Test or Production environment. Keys are environment-specific.
5

Download Private Key

Download and securely store your private key. It is only shown once.

​
API Key Endpoints

EndpointDescription
POST /v1/actions/api-key/create-keyCreate a new API key
POST /v1/actions/api-key/delete-keyDelete an existing API key
Never expose your private key in client-side code, version control, or public repositories.

​
Webhooks

Webhooks notify your server when events occur in real-time.

​
Setting Up

1

Navigate to Webhooks

Go to Dashboard > Settings > Webhooks.
2

Enter Webhook URLs

Configure separate webhook URLs for each environment:
  • Test webhook URL — receives events from test mode
  • Live webhook URL — receives events from production mode
3

Save Configuration

Save your settings. Your endpoints will begin receiving all webhook events.
There is no event filtering — your webhook endpoint receives all events. Filter by event type in your server-side handler.

​
Verifying Webhook Signatures

A webhook public key is displayed on the Webhooks settings page. Use this key to verify that incoming webhook payloads were sent by Waffo Pancake and have not been tampered with.

​
Common Endpoints

​
Stores

EndpointDescription
POST /v1/actions/store/create-storeCreate a store
POST /v1/actions/store/update-storeUpdate store details
POST /v1/actions/store/delete-storeSoft-delete a store

​
Products

EndpointDescription
POST /v1/actions/onetime-product/create-productCreate a one-time product
POST /v1/actions/onetime-product/update-productUpdate a one-time product (creates new version)
POST /v1/actions/onetime-product/update-statusActivate or deactivate a one-time product
POST /v1/actions/onetime-product/publish-productPublish a one-time product across environments
POST /v1/actions/subscription-product/create-productCreate a subscription product
POST /v1/actions/subscription-product/update-productUpdate a subscription product
POST /v1/actions/subscription-product/update-statusActivate or deactivate a subscription product
POST /v1/actions/subscription-product/publish-productPublish a subscription product across environments

​
Orders

EndpointDescription
POST /v1/actions/onetime-order/create-orderCreate a one-time checkout session
POST /v1/actions/onetime-order/cancel-orderCancel a pending one-time order
POST /v1/actions/subscription-order/create-orderCreate a subscription checkout session
POST /v1/actions/subscription-order/cancel-orderCancel a subscription
POST /v1/actions/subscription-order/change-productUpgrade or downgrade a subscription product

​
Refunds

EndpointDescription
POST /v1/actions/refund-ticket/create-ticketRequest a refund

​
Data Queries

EndpointDescription
POST /v1/graphqlQuery any data (stores, products, orders, payments, etc.)

​
Security Best Practices

Environment Variables

Store private keys in environment variables, never in code.

Key Rotation

Regularly rotate keys, especially after team changes.

Separate Keys

Use different API keys for test and production environments.

Secure Storage

Store private keys using your platform’s secret management.

​
Next Steps

Integrate Overview

Step-by-step integration guide.

API Reference

Complete endpoint documentation.