Merchants page

Route: /merchants and /merchants/[id].

List view#

Shows all merchants owned by the current user. Sort by creation date or name. Click a row to open the detail view.

Detail view#

Tabs:

• Profile — name, webhook URL, commission rate (read-only).
• API key — rotate the key. Old key invalidates immediately.
• Signing secret — rotate the HMAC secret used to sign outgoing webhooks. The new value is shown once; the existing value is never re-displayed. Old secret stops signing immediately on rotation, so update your receiver before the next event fires.
• Webhook events — delivery history with status code, attempt count and retry button. See Webhook events tab.

Create a merchant#

Click New merchant in the header of the list view. Supply:

• Display name.
• Webhook URL — must be HTTPS in production.

On save, the API key and the webhook signing secret are shown once, each with its own copy button. Copy both to your secret store before closing the dialog. If you lose either one, rotate it from the corresponding tab on the detail page.

See also#

• Merchants concept.
• Authentication.

Screenshot placeholder — will be captured via Playwright in a follow-up release.