API Reference

Introduction

The Dolafy API lets you move money, issue cards, and accept payments programmatically from your own server.

The Dolafy API is a single, versioned HTTP API for USD accounts, stablecoin rails, virtual cards, and cross-border payments. Everything is provider-neutral: you work with Dolafy resources and identifiers, and Dolafy routes each operation to the right rail behind the scenes.

Base URL

All endpoints live under a single versioned path prefix, /v1. Your organization’s exact API base URL is shown in your dashboard under Developers when you create an API key — combine it with the /v1 paths used throughout this reference.

Getting access

The API is available to approved Dolafy organizations. To start:

  1. Ask your Dolafy contact to enable API access for your organization, along with the specific products you need (Banking, Cards, or Checkout).
  2. Sign in to your dashboard and open Developers to create an API key and register webhook endpoints.
  3. Call the API from your server using your API key. See Authentication.

Each product is gated independently. If your organization does not yet have a product enabled, calls to that product’s endpoints return a 403 — see Errors & Idempotency.

Health check

Use the unauthenticated health endpoint to verify connectivity to the API:

GET /v1/health
{
  "ok": true,
  "version": "v1"
}

What you can build

  • Banking — read balances, manage payout recipients, and send transfers.
  • Cards — issue and manage virtual cards, read card balances, and stream card activity.
  • Checkout — create hosted payment links your customers can pay with stablecoins or PIX.
  • Webhooks — each product delivers its own separately-registered, separately-signed events: Banking, Cards, and Checkout.

Conventions

  • Requests and responses are JSON. Send Content-Type: application/json on requests with a body.
  • Monetary amounts are strings with two decimals (for example "100.00") unless noted otherwise.
  • Timestamps are ISO 8601 UTC (for example "2026-06-25T12:00:00.000Z").
  • Responses intentionally omit internal identifiers, wallet addresses, and provider details. You only ever see stable Dolafy resource ids.