This guide gets you integrated with Pokea Pay V4 — REST APIs, Hosted Checkout and Signed Webhooks.

V4 runs side-by-side with V3 over the same double-entry ledger. The API is versioned at the route layer: existing /api/v3 integrations keep working unchanged during the deprecation window, while /api/v4 is the modern surface with unified cryptography.

What's new in V4

• Money as integers. Every amount is an integer in minor units (amount_minor) plus an ISO-4217 currency. No decimal strings, no float rounding. KES and USD are siloed — there is no FX.
• Replay-protected signing. Per-request RSA signatures over a canonical payload bound to a nonce and timestamp.
• Mandatory idempotency on every money movement.
• Maker-checker payouts. Submitting a payout and approving it are separate calls by different people.
• Signed webhooks with a dedicated webhook secret, delivered as PokeaPay-Signature: v4=….

Base URLs

All requests and responses are JSON. Status codes follow standard HTTP semantics; error payloads are documented under Errors.