Paloma365 · Platform API sandbox
Paloma365 developer sandbox
Connect your service to restaurants and stores on Paloma365 with their owners' consent: read the catalog and orders, create orders, take online payments for QR-menu orders as a payment provider. Everything is self-service — sign-up, keys and tests, with no application and no waiting.
For an AI coding assistant
Give it this page: https://sandbox-api.paloma365.com/platform/ — or the short index for AI tools https://sandbox-api.paloma365.com/platform/llms.txt.
A person does steps 1–3 in a browser (sign-up, creating the app, approving access); the rest your service or AI does through the API.
Register a free test business
Create your app — keys at once
Settings → Developers → Create app: name, links to your privacy policy and terms, exact https redirect URIs, the scopes you need. client_id and client_secret appear right away; the secret is shown once — keep it on your server.Connect a business through OAuth
The owner opens the connection link from your app card and presses Allow (in the sandbox the owner is you). Your app exchanges the code for tokens: guide, section 3.Endpoints:
https://sandbox-api.paloma365.com/platform/oauth/authorize,https://sandbox-api.paloma365.com/platform/oauth/tokenCall the API
Send the token as Authorization: Bearer … tohttps://sandbox-api.paloma365.com/platform/v1. API reference, OpenAPI.Payment providers: banks, acquirers, gateways
On the app card press Make it a payment provider and get the signing secret ppss_… at once. We send signed payment sessions to your URL; you confirm or decline the payment. Test sessions on demand, with automatic checks of your endpoint, and a readiness report on the app card:POST https://sandbox-api.paloma365.com/platform/v1/sandbox/payment-sessions. Guide, sections 9.6–9.7.Go live
When the integration is ready, create the app again in the dashboard of your market — production keys are separate: dashboard.paloma365.com · dashboard.palomapos.com. If Developers there says the console is not available, the market is not open to apps yet — write to us.
Good to know
- The sandbox has test businesses and test data only; payment sessions carry "test": true.
- It runs the newest code and may restart — there is no SLA.
- Sandbox keys work only in the sandbox; production keys are created separately.
- Keep client_secret and the signing secret on your server only.