Accept payments (managed checkout)
You are integrating Bolt Checkout for a supported eCommerce platform.
- Read https://help.bolt.com/products/checkout
- Confirm platform: Shopify, BigCommerce, or Direct API
- Use sandbox API base
https://api-sandbox.bolt.comfor all test calls - Include
X-Api-KeyandX-Nonceon every outbound request - Verify order creation against https://assets.bolt.com/external-api-references/bolt.yml: POST /v1/merchant/orders
- Expected result: order token returned; test transaction visible in merchant-sandbox.bolt.com
Embeddable checkout
You are adding Bolt payment fields to a custom checkout UI.
- Read https://help.bolt.com/products/embeddable-checkout and https://help.bolt.com/api-reference/guides/embeddable-checkout
- Default to Embeddable API v1: verify against https://assets.bolt.com/external-api-references/embedded.yml
- Load connect.js from connect-sandbox.bolt.com in sandbox
- Use publishable key client-side; API key server-side only
- Expected result: shopper can complete payment in your UI; transaction in dashboard
Verify webhooks
You are implementing Bolt webhook signature verification.
- Read https://help.bolt.com/api-reference/guides/verify-webhooks.md
- Use signing secret from Merchant Dashboard → Administration → API
- Verify HMAC on inbound requests before processing payload
- Return 200 only after verification succeeds
- Expected result: forged requests rejected; valid webhooks update order state
Gaming payment links
You are integrating in-game checkout links.
- Read https://help.bolt.com/gaming/guide/quickstart.md
- Create sandbox merchant account at merchant-sandbox.bolt.com
- POST /v1/gaming/payment_links with X-API-KEY and X-PUBLISHABLE-KEY: verify body in OpenAPI
- Handle webhooks per https://help.bolt.com/gaming/guide/bolt-webhooks/validate-authenticity.md
- Expected result: payment link URL opens hosted checkout; webhook confirms completion