Charge a card directly (raw card data)

post

https://dominipay.com/api/wallet/card/charge

Advanced. Requires PCI DSS compliance on your side and raw card access enabled on your Dominipay account. If you are not PCI compliant, use the hosted checkout (POST /wallet/deposit/payment with method_pay=card).

Creates the payment method and confirms the charge in one call. The result is one of:

status: ok: approved. Your USD balance is credited asynchronously and a paid callback is sent.
status: requires_action: 3D Secure is needed. Run stripe.handleNextAction(client_secret) in the cardholder browser, then call POST /wallet/card/confirm.
status: processing: not final yet. Wait for the callback or check the transaction status.
HTTP 422 with error_code: declined. Each attempt is final; retrying needs a new call.

Send an Idempotency-Key header per logical payment so network retries do not create a second charge. Never log card data. Works with sandbox and live credentials.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

token

string

required

Your API token. Live token, or sandbox token (prefix tk_test_) where sandbox is supported.

secret

string

required

Your API secret. Live secret, or sandbox secret (prefix sk_test_) where sandbox is supported.

amount

number

required

≥ 0.01

Amount in USD. Business minimum is 5.00 (AMOUNT_BELOW_MINIMUM).

card

object

required

string | null

Optional cardholder email.

name

string | null

Optional cardholder name.

postback

uri | null

Optional. Must be a valid URL. Receives card callbacks.

return_url

uri | null

Optional. Used when 3D Secure needs a redirect. A platform default is used when omitted.

radar_session

string | null

Optional Stripe Radar session id collected with Stripe.js. Improves fraud scoring.

idempotency_key

string | null

Alternative to the Idempotency-Key header.

Headers

Idempotency-Key

string

length ≤ 255

Unique key per logical operation. A retry with the same key returns the result of the first request instead of creating a second operation. You can also send it as idempotency_key in the body.

Responses

200Approved, 3D Secure required, or processing. Check status.

400Missing credentials: token or secret was not sent.

401Invalid credentials, or the account is blocked or not approved.

403Card payments not enabled for the account (CARD_NOT_AVAILABLE) or account limited to refunds (REFUND_ONLY).

422Validation error, declined card, or business rule failure. See the Error codes guide for every error_code.

429Rate limited. RATE_LIMITED (platform wide limit on the direct card API), or CARD_TESTING_BLOCKED / CARD_VELOCITY_BLOCKED when the card fingerprint is temporarily blocked.

503The card processor could not be reached. No charge was created; it is safe to retry with the same Idempotency-Key.