API reference
WinkPG API version v1. 683 endpoints published by this instance.
The API reference isn't available right now
This instance couldn't load its API specification, so this page lists nothing. The reference returns as soon as the specification is readable again.
This reference may be out of date
This instance couldn't reach its API specification on the last attempt, so this page shows the copy fetched before that. Anything added or changed since then is missing here, and the reference updates itself as soon as the specification is readable again. Last fetched 2026-10-22 22:57 UTC.
19 endpoints are in reach of the tokens scope. Scopes only restrict a key, so the account that owns it still needs the permissions each endpoint lists.
This instance publishes no API operations.
No endpoint this instance publishes is in reach of that scope. Choose All scopes to see the whole reference.
Payments
Tokens
Payment token vault and card-on-file management.
- GET
/api/tokensdeprecated tokens List payment tokens No permission required. - POST
/api/tokensdeprecated tokens Create payment token No permission required. - POST
/api/tokens/can-delete-asyncdeprecated tokens Reports whether a token can be deleted outright. No permission required. - POST
/api/tokens/create-from-transaction-asyncdeprecated tokens Creates a reusable token from the payment method a previous transaction stored. No permission required. - POST
/api/tokens/create-standalone-asyncdeprecated tokens Creates a token from card or check details, with no transaction attached. No permission required. - POST
/api/tokens/deactivate-asyncdeprecated tokens Deactivates a payment token. No permission required. - POST
/api/tokens/list/continuationdeprecated tokens Retrieves a continuation-based page of PaymentTokens. No permission required. - POST
/api/tokens/list/continuation/countdeprecated tokens Counts the PaymentTokens that match a filter. No permission required. - POST
/api/tokens/list/continuation/summary-countsdeprecated tokens Counts PaymentTokens for several filters at once. No permission required. - POST
/api/tokens/reactivate-asyncdeprecated tokens Re-enables a token that was deactivated. No permission required. - POST
/api/tokens/regenerate-asyncdeprecated tokens Issues a replacement token that supersedes an existing one. No permission required. - POST
/api/tokens/resolve-payment-token-asyncdeprecated tokens Looks up a payment token by its public identifier within a merchant. No permission required. - DELETE
/api/tokens/{id}deprecated tokens Delete payment token No permission required. - GET
/api/tokens/{id}deprecated tokens Get payment token No permission required. - PUT
/api/tokens/{id}deprecated tokens Update payment token No permission required. - POST
/api/tokens/{id}/redactdeprecated tokens Erases the stored card or bank account details behind a token. No permission required.
Payments
Wallets
Digital wallet setup and runtime: provider registrations and their platform credentials, Apple Pay certificate provisioning, merchant sessions, encrypted token receipt and the domain association file, Paze certificates and public JWKS, and the checkout snapshot a payment page reads to decide which wallets to offer.
- GET
/.well-known/apple-developer-merchantid-domain-associationdeprecated tokens Apple Pay: serve the domain association file. No permission required. - GET
/api/payment-tokenization/checkout-snapshot/{providerType}/{merchantId}deprecated tokens Checkout Snapshot: returns the storefront-safe snapshot for the (provider, merchant) pair. No permission required. - GET
/.well-known/paze/{environment}/jwks.jsondeprecated tokens Paze: public JWKS for an environment. No permission required.