Cobre um cartão em uma única etapa

POST

payment

purchase

curl -X POST https://api.therius.io/v1/payment/purchase \
  -H "Authorization: Bearer prv_production_your_key_here" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "merchantCode": "MERCHANT_001",
    "orderCode": "ORDER-20240101-001",
    "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
    "card": {
      "cardData": {
        "cardNumber": "4111111111111111",
        "cardholderName": "Ada Lovelace",
        "expiryMonth": "12",
        "expiryYear": "2030",
        "cvv": "123"
      }
    }
  }'

{
  "id": "9f8b2c1e-4d5a-6b7c-8d9e-0f1a2b3c4d5e",
  "status": "captured",
  "paymentCode": "PC-1234567890",
  "orderCode": "ORDER-20240101-001",
  "merchantCode": "MERCHANT_001",
  "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
  "card": {
    "cardData": { "brand": "visa", "cardNumber": "411111****1111", "type": "credit" },
    "networkTransactionId": "txn_abc123"
  }
}

POST /payment/purchase autoriza e captura fundos em uma única ida e volta. Use quando você pode cumprir o pedido de imediato — bens digitais, assinaturas SaaS ou varejo com estoque. Para bens físicos que são enviados depois, considere Authorize + Capture para reter fundos até o cumprimento sem liquidar antes da hora. A forma completa da requisição e da resposta — cada campo de card/shopper/amount, os valores de status e o detalhe de refusalCode/actionRequired/token — está documentada nos painéis de parâmetros e resposta acima (gerados a partir da especificação da API).

O id da resposta é o UUID de pagamento do Therius — guarde-o, é o identificador para uma chamada posterior a Refund ou Cancel or Refund. paymentCode (p. ex. "PC-1234567890") é uma referência separada para conciliação, suporte e Inquiry — não é aceito para reembolso/cancelamento.

Exemplos

Cobrar um cartão

curl -X POST https://api.therius.io/v1/payment/purchase \
  -H "Authorization: Bearer prv_production_your_key_here" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "merchantCode": "MERCHANT_001",
    "orderCode": "ORDER-20240101-001",
    "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
    "card": {
      "cardData": {
        "cardNumber": "4111111111111111",
        "cardholderName": "Ada Lovelace",
        "expiryMonth": "12",
        "expiryYear": "2030",
        "cvv": "123"
      }
    }
  }'

{
  "id": "9f8b2c1e-4d5a-6b7c-8d9e-0f1a2b3c4d5e",
  "status": "captured",
  "paymentCode": "PC-1234567890",
  "orderCode": "ORDER-20240101-001",
  "merchantCode": "MERCHANT_001",
  "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
  "card": {
    "cardData": { "brand": "visa", "cardNumber": "411111****1111", "type": "credit" },
    "networkTransactionId": "txn_abc123"
  }
}

Resposta recusada

{
  "status": "declined",
  "paymentCode": "PC-9876543210",
  "orderCode": "ORDER-20240101-002",
  "merchantCode": "MERCHANT_001",
  "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
  "refusalCode": {
    "reason": "Insufficient funds",
    "reasonCode": "INSUFFICIENT_FUNDS",
    "recoveryAction": "switch_method"
  }
}

amount.value está sempre em unidades menores. 1999 = $19.99 para USD (exponent 2). 5000 = ¥5000 para JPY (exponent 0). Use sempre o campo exponent para determinar a posição decimal.

Se status for "pending_3ds", redirecione o titular do cartão para actionRequired.url para concluir o desafio 3D Secure. Assim que ele terminar, chame POST /payment/resume com o sessionId da resposta pending_3ds para continuar. Se você usa o SDK JS do Therius, chame sdk.handleAction(result.actionRequired) — ele trata o redirecionamento e o resume automaticamente.

Autorizações

Authorization

string

header

obrigatório

Your secret API key: Bearer prv_production_xxx (production) or Bearer prv_sandbox_xxx (sandbox).

Cabeçalhos

Idempotency-Key

string<uuid>

A UUID you generate per operation. Required in production. Retrying with the same key returns the original response.

Corpo

application/json

merchantCode

string

obrigatório

Your merchant account identifier. Validated against the Bearer key's merchant; required if the key maps to more than one merchant account.

orderCode

string

obrigatório

Your internal order reference. Must be unique per merchant — use it to correlate Therius payments with your own records.

amount

object

obrigatório

Show child attributes

card

Raw card (PCI DSS) · object

Card input for one-off payments: exactly one instrument (cardData / nonceData / tokenData) plus optional stored-credential and installment modifiers.

Raw card (PCI DSS)
SDK nonce
Vault token

Show child attributes

apm

object

Alternative payment method data — use instead of card for APMs such as Pix, ACH or Boleto. Structure varies by method.

paymentMethod

string

Payment method code. Omit for card payments; for APMs pass the code, e.g. pix, ach, boleto.

shopper

object

Shopper information. Required when tokenizing a card (card.<instrument>.tokenize: true).

Show child attributes

webhookUrl

string

Per-payment webhook URL override (HTTPS only). Therius posts the final payment status here when it changes asynchronously.

connectionCode

string

Pin this payment to a specific gateway connection. Omit to use your routing rules.

ipAddress

string

Cardholder's IP address, passed to fraud scoring when available.

metadata

object

Arbitrary string key/value pairs, echoed back in webhook payloads.

Show child attributes

Resposta

200 - application/json

Payment processed

string<uuid>

The Therius payment id. Returned by POST /payment/authorization and POST /payment/purchase; use it as the {id} path segment for capture, refund, cancel and cancel_or_refund.

Exemplo:

"9f8b2c1e-4d5a-6b7c-8d9e-0f1a2b3c4d5e"

status

enum<string>

captured - funds settled; authorized - funds reserved, call capture to settle; declined - issuer declined, see refusalCode; pending_3ds - a 3DS challenge is required, see actionRequired; pending_action - an external action (redirect, voucher) is required, see actionRequired; failed - processing error unrelated to the issuer; cancelled - authorization voided; refunded - captured funds returned.

Opções disponíveis:

captured,

authorized,

declined,

pending_3ds,

pending_action,

failed,

cancelled,

refunded

paymentCode

string

Therius receipt ID, for reconciliation, support and Inquiry. NOT the handle for capture/refund/cancel — use id for that.

Exemplo:

"PC-1234567890"

orderCode

string

Your orderCode, echoed back.

merchantCode

string

Your merchantCode, echoed back.

autorizationCode

string

Issuer authorization code on an approved payment. The field name is misspelled on the wire (no h) - this is intentional and stable.

paymentMethod

string

Payment method used, e.g. card, pix, ach.

connectionCode

string

Code of the gateway connection that processed the payment.

connectionName

string

Display name of the gateway connection that processed the payment.

amount

object

Show child attributes

card

object

Card details from the response: masked PAN, brand, type, and the network transaction/reference IDs to cite on future MIT charges.

apm

object

Alternative-payment-method details (redirect URL, QR code, barcode) when paymentMethod is an APM.

token

object

Present when the card was tokenized (tokenize: true).

Show child attributes

actionRequired

object

Present when status is pending_3ds or pending_action. Describes what the cardholder must do next — with the Therius JS SDK, pass the whole object to sdk.handleAction().

Show child attributes

refusalCode

object

Present when status is declined. See the Declined Payments concept page for the full code table and how to react to each recoveryAction.

Show child attributes

curl -X POST https://api.therius.io/v1/payment/purchase \
  -H "Authorization: Bearer prv_production_your_key_here" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "merchantCode": "MERCHANT_001",
    "orderCode": "ORDER-20240101-001",
    "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
    "card": {
      "cardData": {
        "cardNumber": "4111111111111111",
        "cardholderName": "Ada Lovelace",
        "expiryMonth": "12",
        "expiryYear": "2030",
        "cvv": "123"
      }
    }
  }'

{
  "id": "9f8b2c1e-4d5a-6b7c-8d9e-0f1a2b3c4d5e",
  "status": "captured",
  "paymentCode": "PC-1234567890",
  "orderCode": "ORDER-20240101-001",
  "merchantCode": "MERCHANT_001",
  "amount": { "currency": "USD", "value": 4999, "exponent": 2 },
  "card": {
    "cardData": { "brand": "visa", "cardNumber": "411111****1111", "type": "credit" },
    "networkTransactionId": "txn_abc123"
  }
}

Pagamentos

Tokenização

Assinaturas

Planos

Sessão do SDK

Cobre um cartão em uma única etapa

Exemplos

Cobrar um cartão

Autorizações

Cabeçalhos

Corpo

Resposta

​Exemplos

​Cobrar um cartão

Autorizações

Cabeçalhos

Corpo

Resposta

Exemplos

Cobrar um cartão