← Back to docs

Integration models

Choose direct API when you own the UI, or hosted checkout when you don't.

Direct API

You own the UI. PayFlow returns provider-neutral next actions and you render them. Card data flows only through hosted fields or tokenization — never your servers.

Webhooks or server-side retrieval are authoritative.

Hosted redirect checkout

Create a checkout session and redirect the payer to the returned checkout_url. The success_url is never proof of payment.

Fulfil only after a verified webhook or a server-side payment lookup.

The browser never sees secrets

Merchant API keys are server-to-server only. The hosted checkout page uses a scoped public token, not your secret key.