Overview
GoWaly Verification and Reporting machine APIs for server-to-server integrations.
Five partner operations #
| Method | Path | Scope |
|---|---|---|
| POST | /api/v1/check-recipient | verification:read |
| POST | /api/v1/reports | reports:write |
| GET | /api/v1/reports/{report_id} | reports:write |
| POST | /api/v1/reports/{report_id}/evidence | reports:write |
| POST | /api/v1/reports/{report_id}/evidence/{evidence_id}/confirm | reports:write |
The technical API hostnames remain scamrader.com. GoWaly does not execute or authorize transfers; use its risk insight in your own decision policy.
Start here #
- Use Customer Sandbox for synthetic Verification testing. Its approved Verification fixtures are deterministic.
- Keep your API key on a server and send it in the Authorization header.
- Read the Verification and Reporting contracts, including error, quota, and retry rules.
Canonical contract #
The backend owns the Commercial OpenAPI artifact. The broader backend OpenAPI is not the partner integration contract.