​
Base URL

The Orcuspay API is built on REST principles. All communication is over HTTPS. Most API reference endpoints use the following base URL: 
https://brain.orcuspay.com/api/v1
Checkout session endpoints use: 
https://brain.orcuspay.com/api

​
Authentication

Every request must include your API key and secret, available from your Orcuspay dashboard. For /api/v1 endpoints, include them as request headers: 
x-api-key:    <your-access-key>
x-api-secret: <your-secret-key>
For checkout session endpoints, use: 
x-auth-access-key: <your-access-key>
x-auth-secret-key: <your-secret-key>
Your keys are prefixed with the mode they belong to — keys starting with ak_prod_ / sk_prod_ are for live payments, and ak_test_ / sk_test_ are for test mode. Never expose your secret key in client-side code.

​
Response Codes

CodeMeaning
200Success
201Resource created
400Bad request — missing or invalid parameters
401Unauthorized — invalid or missing API credentials
404Not found
405Method not allowed
500Internal server error
Errors return a JSON body with an error field: 
{
  "error": "Invalid API credentials"
}

​
Rate Limiting

You can make up to 50 requests per second. Exceeding this limit may result in temporary restrictions.

​
Test Mode

Use your ak_test_ / sk_test_ keys to make requests in test mode. Test payments and payment links are fully isolated from live data.