Tilt Pay API

Public API of the Tilt Pay SDK. Identifiers are opaque strings; fields are in snake_case.

Authentication#

Send your key in Authorization: Bearer <key>. tp_test_… (sandbox) and tp_live_… (live) keys are used on the same host; the environment is carried by the key. A key only sees the data of its project and its environment.

Errors#

Every error has the shape { "error": { "type", "code", "message", "request_id" } }. Branch your code on code (stable), never on message. Give request_id to support.

Pagination#

List endpoints take limit (1 to 100) and starting_after (the id of the last item received). The response contains has_more.

Idempotency#

POST requests accept the Idempotency-Key header. Replaying the same key with the same body returns the same response for 24 h (header Idempotent-Replayed: true); the same key with a different body returns 422 idempotency_key_reuse.

Rate limits#

Per key and per minute: sandbox 100, live 100 (Launch), 600 (Growth), 3000 (Enterprise). Headers X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset; beyond the limit, 429 with Retry-After.

Sandbox and live#

The sandbox simulates wallets, KYC and transactions (POST /v1/sandbox/users/{id}/simulate) without any movement of money. Live is real, once your organization has been enabled. Tilt Pay never holds funds.