# Hubpay Developers

> Hubpay Connect is a REST API for payments, multi-currency wallets, FX, payouts, account onboarding, transaction feeds and connected apps.

Use the sandbox at `https://sandbox-api.hubpay.io` while developing. Production uses `https://api.hubpay.io`. API credentials and bearer tokens must stay in server-side code.

## Start here

- [Get started](https://docs.hubpay.io/docs/guides/intro/): Authenticate and make a first sandbox request
- [Authentication](https://docs.hubpay.io/docs/guides/authentication): Client credentials, account context and app connections
- [API reference](https://docs.hubpay.io/docs/category/api-reference): Endpoints, request fields, responses and schemas
- [Using AI coding tools](https://docs.hubpay.io/docs/guides/ai-assisted-development): Give an AI assistant the right Hubpay source material

## Product areas

- [Accept payments](https://docs.hubpay.io/docs/guides/payments/overview): Hosted checkout, payment links and payment webhooks
- [Accounts and onboarding](https://docs.hubpay.io/docs/guides/accounts/overview): Onboard businesses, collect documents and respond to RFI
- [Banking and money movement](https://docs.hubpay.io/docs/guides/banking/overview): Balances, transactions, beneficiaries and payment initiation
- [Connected apps](https://docs.hubpay.io/docs/guides/connections/overview): Customer-approved access for third-party applications
- [Webhooks](https://docs.hubpay.io/docs/guides/webhooks/overview): Signed event delivery, verification and retries

## Machine-readable API

- [OpenAPI 3.1 specification](https://docs.hubpay.io/openapi.json): The authoritative machine-readable Hubpay Connect API contract
- [Webhook events](https://docs.hubpay.io/docs/guides/webhooks/events/): Event names and payload guidance
- [Webhook verification](https://docs.hubpay.io/docs/guides/webhooks/verifying-signatures): Verify every callback before acting on it

## Examples

- [Payment examples](https://examples.hubpay.ae/payments): Compare embedded, hosted and linked checkout
- [Branded storefront](https://examples.hubpay.ae/payments/storefront): Preview Hubpay checkout in a storefront journey

## Important integration rules

- Treat the OpenAPI specification and linked guides as the source of truth
- Keep client secrets and bearer tokens out of browser, mobile and distributed package code
- Keep sandbox and production credentials, account identifiers and webhook endpoints separate
- Verify signed webhooks and confirm payment state from a trusted backend before fulfilling an order
- Use documented idempotency fields and handle rate limits, pagination and retries