Overview
Link a platform’s Client ID (cli_*) to your orchestrator to apply your fees and branding. You can either link an existing client ID directly or create one through a hosted onboarding link.
All linking endpoints use the x-orchestrator-key header.
If you use hosted onboarding, register an orchestrator webhook before you send the onboarding URL. It receives the resulting client ID after the platform completes the flow.
A client ID can be linked to one orchestrator only. A second link request is rejected, whether it is for the same orchestrator or a different one. If you need to check whether a link request succeeded, list your linked client IDs instead of retrying it. Unlinking removes the active connection, but does not make the client ID linkable again.
Link an existing client ID
Use direct linking only when the platform has shared an existingcli_* token with you:
Manage linked client IDs
List linked client IDs
List active links with pagination:Unlink a client ID
To revoke an active link:Onboard a platform with a link intent
Use a link intent when a platform should connect its own wallet, choose where it receives funds, and approve the connection to your orchestrator. The endpoint returns a hosted onboarding URL; send that URL to the platform.
The response contains
url and intent:
externalId before sending the URL to the platform.
What the platform does
The hosted flow asks the platform to:- Connect their wallet.
- Create or update their active payment destination.
- Review your screening plan, or choose a screening preference when you did not provide one.
- Confirm the connection to your orchestrator.
cli_* client ID, copies any allowed domains from the intent, links it to your orchestrator, and binds it to the platform’s active payment destination. Active orchestrator webhooks receive a client_id.linked event with the client ID, link identifiers, and destination details. Direct links do not send this event.
A link intent is single-use and expires after two days. Create a new intent if the platform has not completed the flow before it expires.
Payment destination behavior
The client ID created through onboarding is bound to the payment destination selected in the hosted flow. When you create a secure payment link with that linked client ID, omitdestinationId or provide that same destination. The API rejects a different destination ID.
The platform can manage its payment destination through the hosted flow; your orchestrator key does not choose it.
Create payment links for a platform
To create a payment link for a platform, send both your orchestrator key and the platform’s client ID. After a client ID is linked,x-client-id alone cannot create a secure payment link. Use the same headers for incoming payment links and outgoing payout links.
These headers do not give you access to the platform’s other client ID or account-management endpoints.
POST /v2/secure-payments/payouts.
The API validates that the client ID is active, linked to the orchestrator behind the supplied key, and has an active bound destination. This allows the payment link to use the platform’s destination and your orchestrator configuration.
Related
Orchestrator fees
Apply fees and per-client-ID overrides to linked client IDs.
Client ID Management
How platforms create and manage the
cli_* client IDs you link.Orchestrator KYT plans
Choose who controls transaction screening for hosted onboarding.