API Endpoint Summary

Part of: MPAC SmartPOS Cloud Platform - Product RequirementsVersion: 2.0 Last Updated: 2026-01-28

---

Overview

This document provides a comprehensive summary of all API endpoints across the MPAC platform services. Endpoints are organized by service and functional area for quick reference during development and integration.

---

svc-portal Endpoints

Authentication

• POST /api/v1/auth/user/login - User login
• POST /api/v1/auth/user/mfa/verify - MFA verification
• POST /api/v1/auth/device/token - Device token (OAuth2)
• POST /api/v1/auth/admin/impersonate - Admin impersonation
• GET /api/v1/jwks/human - Human JWT public keys
• GET /api/v1/jwks/device - Device JWT public keys

Device Provisioning

• POST /api/v1/device/provision/generateActivationCode - Generate code
• POST /api/v1/device/provision/activate - Activate device
• GET /api/v1/device/provision/activationStatus - Poll status

Merchant/Store Management

• GET /api/v1/psps - List PSPs
• POST /api/v1/psps - Create PSP
• GET /api/v1/merchants - List merchants
• POST /api/v1/merchants - Create merchant
• GET /api/v1/stores - List stores
• POST /api/v1/stores - Create store
• GET /api/v1/terminals - List devices
• POST /api/v1/terminals - Register device

User Management

• GET /api/v1/users - List users
• POST /api/v1/users - Create user
• PATCH /api/v1/users/{id} - Update user
• DELETE /api/v1/users/{id} - Delete user

---

svc-smarttab Endpoints

Order Management

• POST /orders - Create order
• GET /orders - List orders
• GET /orders/{id} - Order details
• PATCH /orders/{id} - Update order
• POST /orders/{id}/cancel - Cancel order

Bill Management

• POST /bills - Create bill from order
• GET /bills - List bills
• GET /bills/{id} - Bill details
• POST /bills/{id}/split - Split bill
• POST /bills/combine - Combine bills

Payment Management

• POST /payments - Create payment
• GET /payments - List payments
• GET /payments/{id} - Payment details
• POST /payments/{id}/refund - Refund payment

Customer Management

• POST /customers - Create customer
• GET /customers - Search customers
• GET /customers/{id} - Customer details
• GET /customers/{id}/orders - Purchase history

Settlement

• POST /settlements - Create settlement
• GET /settlements - List settlements
• POST /settlements/{id}/close - Close settlement

---

mpac-pgw Endpoints

Payment Intents (S2S - HMAC)

• POST /v1/payment_intents - Create PaymentIntent
• GET /v1/payment_intents - List PaymentIntents
• POST /v1/payment_intents/{id}/capture - Capture payment
• POST /v1/payment_intents/{id}/refund - Refund payment

Payment Intents (Frontend - Token)

• GET /v1/payment_intents/{id} - Get PaymentIntent
• POST /v1/payment_intents/{id}/confirm - Confirm payment
• POST /v1/payment_intents/{id}/cancel - Cancel payment
• GET /v1/payment_intents/{id}/transactions - List transactions

Configuration Sync

• POST /v1/sync/merchants - Sync merchant config

Webhooks

• POST /v1/webhooks/paypay - PayPay webhook
• POST /v1/webhooks/linepay - LINE Pay webhook

---

See Also

Related References:

• Glossary - Technical terminology
• Status Code Reference - HTTP and payment status codes
• Data Model - Database schema reference

Technical Documentation:

• Authentication Architecture - Auth implementation
• Payment Gateway Integration - PGW integration patterns
• API Security - Security controls

Domain Documentation:

• Authentication & Identity - Auth flows
• Payment Processing - Payment APIs
• Device Management - Device APIs

---

Navigation: ↑ Back to Index | ← Glossary | Next: Data Model →