Westpac Banking Corporation

Westpac PayWay REST API

First-party Westpac payment API (beyond CDR). PayWay is Westpac's merchant payment platform; its public REST API v1 processes real-time credit-card and bank-account payments, refunds, pre-authorisations and captures, plus a customer vault, single-use tokens, EMV 3-D Secure authentication, bulk payment files, surcharges and merchant configuration. Uses HTTP Basic auth with a publishable or secret API key over TLS 1.2+ at api.payway.com.au/rest/v1. Fully documented publicly but NO downloadable OpenAPI/Swagger is published (reference docs and Postman-based exploration only), so no machine-readable spec is wired.

GitHub

Documentation

📖
Documentation
https://www.payway.com.au/docs/rest.html
📖
GettingStarted
https://www.payway.com.au/docs/api-developers-guide/

Other Resources

🔗
SignUp
https://www.westpac.com.au/business-banking/merchants-and-payments/online-payments/payway-api/
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/westpac/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: westpac:westpac-payway-rest-api
name: Westpac PayWay REST API
tags:
- Payments
- Card Payments
- Payment Gateway
- Merchants
- Australia
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
humanURL: https://www.payway.com.au/docs/rest.html
baseURL: https://api.payway.com.au/rest/v1
properties:
- url: https://www.payway.com.au/docs/rest.html
  type: Documentation
- url: https://www.payway.com.au/docs/api-developers-guide/
  type: GettingStarted
- url: https://www.westpac.com.au/business-banking/merchants-and-payments/online-payments/payway-api/
  type: SignUp
description: First-party Westpac payment API (beyond CDR). PayWay is Westpac's merchant payment platform;
  its public REST API v1 processes real-time credit-card and bank-account payments, refunds, pre-authorisations
  and captures, plus a customer vault, single-use tokens, EMV 3-D Secure authentication, bulk payment
  files, surcharges and merchant configuration. Uses HTTP Basic auth with a publishable or secret API
  key over TLS 1.2+ at api.payway.com.au/rest/v1. Fully documented publicly but NO downloadable OpenAPI/Swagger
  is published (reference docs and Postman-based exploration only), so no machine-readable spec is wired.