Field validation
Every request is validated before anything is created. An invalid request answers 422 with errors, a map of each invalid field to its messages, and nothing is created or charged.
Common formats
| Data | Format |
|---|---|
| Strings | UTF-8. Up to 255 characters unless the field says otherwise. Free text must not contain HTML tags. |
| Amounts | JSON number, positive, at most two decimals (25.50). |
| Booleans | JSON true / false. Send real booleans: other values may be read as missing ("The mobile field is required."). |
| Countries | ISO 3166-1 alpha-3: MEX, CHL, BRA. |
| Currencies | ISO 4217: USD, MXN. |
| Phone numbers | Send them in international format (+52…). |
| Emails | Valid address; production also checks that the domain can receive mail. |
| URLs you send (callbacks, return URLs) | Absolute https:// URLs. Callback URLs must not embed credentials or point to private addresses. |
| Field names | snake_case. |
By product
- Pay-In: the customer fields depend on the payment method. Read them from
required_fields,mandatory_fieldsanddocument_typesof Get payment methods. Rules, accepted documents by country and real error messages: Payer data & documents. - Pay-Out: see the field tables of the Pay-Out guide.