AiFinPay

AiFinPay Partner Auth API

partner-auth router — see backend/routes/partner-auth.js

GitHub OpenAPI

Operations 10

POST /api/partners/auth/register POST /api/partners/auth/register #
PATCH /api/partners/me/profile PATCH /api/partners/me/profile #
POST /api/partners/auth/login POST /api/partners/auth/login #
POST /api/partners/auth/logout POST /api/partners/auth/logout #
GET /api/partners/auth/me GET /api/partners/auth/me #
GET /api/partners/me/summary GET /api/partners/me/summary #
GET /api/partners/me/transactions GET /api/partners/me/transactions #
GET /api/admin/partners GET /api/admin/partners #
POST /api/admin/partners/approve POST /api/admin/partners/approve #
PATCH /api/admin/partners/{id} PATCH /api/admin/partners/:id #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/aifinpay-io/openapi/aifinpay-io-partner-auth-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-import-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-site-batch-preview-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-preview-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-committed-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-view-schema.json
📊
JSONSchema
https://artifacts.apis.io/aifinpay-io/json-schema/aifinpay-io-merchant-config-export-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/aifinpay-io:aifinpay-io-partner-auth-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

aifinpay-io-partner-auth-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: AiFinPay Partner Auth API
  version: 5.3.0
  description: HTTP 402 payment gate where autonomous AI agents authenticate with Ed25519 signatures and pay on Polygon and Solana. This document is generated from backend/routes/*.js — do not hand-edit. Regenerate with `node backend/scripts/build-openapi.mjs`.
servers:
- url: https://api.aifinpay.io
  description: Production (api)
- url: https://bridge.aifinpay.io
  description: Production (bridge)
tags:
- name: partner_auth
  description: partner-auth router — see backend/routes/partner-auth.js
paths:
  /api/partners/auth/register:
    post:
      tags:
      - partner_auth
      summary: POST /api/partners/auth/register
      operationId: post_api_partners_auth_register
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
      x-rate-limits:
      - middleware: partnerRegisterLimiter
        note: registration rate-limit on /api/partners/auth/register
  /api/partners/me/profile:
    patch:
      tags:
      - partner_auth
      summary: PATCH /api/partners/me/profile
      operationId: patch_api_partners_me_profile
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security:
      - partnerSession: []
  /api/partners/auth/login:
    post:
      tags:
      - partner_auth
      summary: POST /api/partners/auth/login
      operationId: post_api_partners_auth_login
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
      x-rate-limits:
      - middleware: partnerAuthLimiter
        note: login rate-limit on partner auth endpoints
  /api/partners/auth/logout:
    post:
      tags:
      - partner_auth
      summary: POST /api/partners/auth/logout
      operationId: post_api_partners_auth_logout
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /api/partners/auth/me:
    get:
      tags:
      - partner_auth
      summary: GET /api/partners/auth/me
      operationId: get_api_partners_auth_me
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security: []
  /api/partners/me/summary:
    get:
      tags:
      - partner_auth
      summary: GET /api/partners/me/summary
      operationId: get_api_partners_me_summary
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security:
      - partnerSession: []
  /api/partners/me/transactions:
    get:
      tags:
      - partner_auth
      summary: GET /api/partners/me/transactions
      operationId: get_api_partners_me_transactions
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security:
      - partnerSession: []
  /api/admin/partners:
    get:
      tags:
      - partner_auth
      summary: GET /api/admin/partners
      operationId: get_api_admin_partners
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security:
      - adminSession: []
  /api/admin/partners/approve:
    post:
      tags:
      - partner_auth
      summary: POST /api/admin/partners/approve
      operationId: post_api_admin_partners_approve
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security:
      - adminSession: []
  /api/admin/partners/{id}:
    patch:
      tags:
      - partner_auth
      summary: PATCH /api/admin/partners/:id
      operationId: patch_api_admin_partners_id
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                additionalProperties: true
        '400':
          $ref: '#/components/responses/AifpError'
        '401':
          $ref: '#/components/responses/AifpError'
        '403':
          $ref: '#/components/responses/AifpError'
        '404':
          $ref: '#/components/responses/AifpError'
        '429':
          $ref: '#/components/responses/AifpError'
        5XX:
          $ref: '#/components/responses/AifpError'
      security:
      - adminSession: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          description: Server-issued identifier
components:
  responses:
    AifpError:
      description: AIFP-* error envelope. See backend/server.js safe error handler.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/AifpError'
  schemas:
    AifpError:
      type: object
      required:
      - error
      properties:
        error:
          type: string
          description: AIFP-{status} code, or domain-specific string (e.g. csrf_origin_denied)
        detail:
          type: string
        request_id:
          type: string
          description: AIFP-Request-Id for log correlation
  securitySchemes:
    reportingCapability:
      type: apiKey
      in: header
      name: AIFP-Reporting-Token
      description: Observation/identity-removal capability only; no spending, access or ownership authority.
    reportingOwnerSession:
      type: apiKey
      in: cookie
      name: __aifinpay_user_session
      description: Existing owner session, current tenant/site and session-epoch validation. Browser writes also require CSRF Origin checks.
    agentEd25519:
      type: apiKey
      in: header
      name: x-agent-pubkey
      description: 'Ed25519-signed native-auth v2 request. Companion headers: x-nonce, x-signature, x-aifinpay-auth-version. The proof binds canonical origin, method, resource, body hash, and expiry. GET /nonce provides migration diagnostics only; start with an unauthenticated request to receive a v2 challenge.'
    x402Payment:
      type: apiKey
      in: header
      name: X-PAYMENT-RESPONSE
      description: x402 payment proof, base64 JSON envelope. Issued by the paying agent's wallet after broadcasting the on-chain tx. See /.well-known/x402.json.
    userSession:
      type: apiKey
      in: cookie
      name: aifinpay_session
      description: Browser session cookie for /api/me/* — sameSite=Lax, CSRF-guarded.
    agentClaim:
      type: apiKey
      in: cookie
      name: __aifinpay_agent_claim
      description: Set by redeeming a one-time claim link (POST /api/me/claim-url). Valid 10 minutes, accepted only by /api/me/agents/challenge and /api/me/agents/claim.
    adminSession:
      type: apiKey
      in: cookie
      name: aifinpay_admin_session
      description: Admin session cookie. ADMIN_ALLOWED_IPS allowlist in effect.
    partnerSession:
      type: apiKey
      in: cookie
      name: aifinpay_partner_session
      description: Partner session cookie for /api/partners/me/*.
    merchantSecret:
      type: apiKey
      in: header
      name: AIFP-Merchant-Secret
      description: Per-merchant API key for /v1/merchants/* writes.
    ingestHmac:
      type: apiKey
      in: header
      name: x-ingest-signature
      description: HMAC signature for /api/internal/* and /api/telemetry.