Changelog
Additive changes (new fields, new event types, new endpoints) are not breaking and ship without a version bump. Breaking changes are announced in advance and pinned by the Mavunta-Version header. The current API version is 2026-06-01.
2026-07-03
Sandbox keys call sandbox-api.mavunta.com/v1; live keys call api.mavunta.com/v1. A key sent to the other host returns 400 environment_mismatch. SDKs and the CLI pick the right host from the key prefix automatically.
The old www.mavunta.com/developers URLs redirect permanently. API error docs_url now resolves on the new origin.
Install mavunta (SDK) and mavunta-cli (CLI, bin mavunta). The legacy @coinwaka/sdk, coinwaka, and @coinwaka/cli packages are deprecated but keep working: webhooks now send Mavunta-Signature / -Timestamp / -Event-Id with legacy Coinwaka-* aliases alongside during the transition.
Reusing an Idempotency-Key with different parameters (or across environments) now returns 409 idempotency_conflict instead of replaying the original intent.
2026-06-18
Public /v1 Pay API: payment intents, quotes, payment links, refund requests, and /v1/auth/verify.
Every response carries request_id, environment, and livemode; errors use a consistent type / code / param / request_id / docs_url shape.
Keys, webhook endpoints, and logs are scoped per app.
Publishable (pk), secret (sk), and restricted (rk) keys; granular scopes.
Create test payments, drive any outcome, send test webhooks, and reset sandbox data.
Mavunta-RateLimit-Limit / -Remaining / -Reset on every response.
The spec drives the reference, Postman collection, and every official SDK.