API reference
You call Moov to register users and mint sender tokens. Moov calls you to hold, capture, and credit money on your core.
You call Moov at https://api.moov.money (API key, HTTP Basic):
participants,
funding sources,
sender tokens,
reviews,
providers,
and limits.
Payouts are not on that list. The SDK creates them on the device against the sender’s own session, using a token you mint; there is no provider-callable payout endpoint. See sender authentication.
Moov calls you for holds and credits. You register URLs. Moov POSTs
to them as-is. The /ledger/* paths below are labels only.
| URL | Called when | Shape |
|---|---|---|
AuthorizationURL | A user initiates a payment | Authorize |
CaptureURL | The recipient completes a claim | Capture |
HoldReleaseURL | A payment is canceled or expires | Release |
CreditURL | A request has been paid into your wallet | Credit account |
Ledger request and response bodies are encrypted JWEs. Inner JWT: iat
and exp at the top; Moov fields under moov. See
setup to register URLs.
Versioning #
The API is versioned by date. Send the version you built against on every request:
X-Moov-Version: v2026.10.00
Everything in this reference is the v2026.10.00 surface. If you omit
the header, the server applies its default, which can be an older
version with different paths and shapes, so always pin. Versions are
vYYYY.QQ.BB (year, quarter’s starting month, build); breaking changes
only ship as a new dated version, and your pinned version keeps its
behavior. The ledger endpoints you host are unaffected: Moov calls
them, and the envelope carries its own contract.