# FLEX

## Docs

- [Exchange credentials for a JWT](https://docs.yourflexpay.com/api-reference/authentication/exchange-credentials-for-a-jwt.md): Issues a signed HS256 JWT access token valid for the configured TTL (default 1 hour). Accepts either `application/x-www-form-urlencoded` query parameters or a JSON body with `client_id` and `client_secret` fields.
- [Rotate the calling application's EC keypair](https://docs.yourflexpay.com/api-reference/authentication/rotate-the-calling-applications-ec-keypair.md): Generates a fresh EC P-256 keypair for the authenticated application and returns the new public key (JWK) and private key material (`appPrivateJwk`).
- [Rotate the calling application's webhook signing secret](https://docs.yourflexpay.com/api-reference/authentication/rotate-the-calling-applications-webhook-signing-secret.md): Generates a new webhook signing secret for the authenticated application, stores only its hash, and returns the raw secret once.
- [Revoke a claim](https://docs.yourflexpay.com/api-reference/claims/revoke-a-claim.md): Revokes a previously approved claim for the authenticated application so it is no longer considered valid.
- [Revoke federated identity link](https://docs.yourflexpay.com/api-reference/claims/revoke-federated-identity-link.md): Revokes an existing federated identity link owned by the authenticated application.
- [Verify federation link](https://docs.yourflexpay.com/api-reference/claims/verify-federation-link.md): Verifies a federation challenge token and finalizes cross-application identity linking.
- [Approve consent request](https://docs.yourflexpay.com/api-reference/consent/approve-consent-request.md): Approves a pending consent token and returns an attestation token for the requesting application.
- [Deny consent request](https://docs.yourflexpay.com/api-reference/consent/deny-consent-request.md): Denies a pending consent token and marks the related claim request as rejected.
- [Get consent details](https://docs.yourflexpay.com/api-reference/consent/get-consent-details.md): Returns consent request details for a consent token so a user can review and decide to approve or deny.
- [Get the IDaaS public encryption key](https://docs.yourflexpay.com/api-reference/encryption/get-the-idaas-public-encryption-key.md): Returns the IDaaS EC P-256 public key in two formats: - **`jwk`** – JSON Web Key (JWK) format; import directly into any JOSE library. - **`publicKeyBase64`** – Base64-encoded X.509 (SubjectPublicKeyInfo) DER; use with   `KeyFactory.getInstance("EC").generatePublic(new X509EncodedKeySpec(decoded))` i…
- [Cancel Payment Request](https://docs.yourflexpay.com/api-reference/payment-request/cancel-payment-request.md)
- [Get Payment Request](https://docs.yourflexpay.com/api-reference/payment-request/get-payment-request.md)
- [Get Payment Requests](https://docs.yourflexpay.com/api-reference/payment-request/get-payment-requests.md)
- [Request Payment](https://docs.yourflexpay.com/api-reference/payment-request/request-payment.md)
- [Get a settlement batch by date](https://docs.yourflexpay.com/api-reference/settlement/get-a-settlement-batch-by-date.md): Returns the settlement record for a specific calendar date (ISO-8601 format: `YYYY-MM-DD`).
- [Get a settlement batch by ID](https://docs.yourflexpay.com/api-reference/settlement/get-a-settlement-batch-by-id.md): Returns the full settlement record including all per-application net position entries.
- [List all settlement batches](https://docs.yourflexpay.com/api-reference/settlement/list-all-settlement-batches.md): Returns a paginated list of settlement batches in reverse-chronological order. Each record contains aggregate totals; individual per-application entries are omitted in the list view for performance. Use `GET /v1/settlement/{id}` for full details including per-application net positions.
- [Manually trigger a settlement run](https://docs.yourflexpay.com/api-reference/settlement/manually-trigger-a-settlement-run.md): Runs the end-of-day settlement for a specified date on demand. This is idempotent – if the date has already been successfully settled, the existing record is returned without reprocessing.
- [Create subject](https://docs.yourflexpay.com/api-reference/subjects/create-subject.md): Creates a new subject within the authenticated application's tenant scope.
- [Get subject by external ID](https://docs.yourflexpay.com/api-reference/subjects/get-subject-by-external-id.md): Looks up a subject by the external identifier in the authenticated application's namespace.
- [Get subject by ID](https://docs.yourflexpay.com/api-reference/subjects/get-subject-by-id.md): Returns one subject by UUID.
- [List subject tags](https://docs.yourflexpay.com/api-reference/subjects/list-subject-tags.md): Returns all tags currently linked to a subject.
- [List subjects](https://docs.yourflexpay.com/api-reference/subjects/list-subjects.md): Lists all subjects that belong to the authenticated application.
- [Patch subject](https://docs.yourflexpay.com/api-reference/subjects/patch-subject.md): Applies partial updates to a subject record owned by the authenticated application.
- [Create a new tag](https://docs.yourflexpay.com/api-reference/tags/create-a-new-tag.md): Creates a globally unique tag for a subject owned by the authenticated application.
- [Disable tag](https://docs.yourflexpay.com/api-reference/tags/disable-tag.md): Disables a tag owned by the authenticated application so it can no longer be used for new operations.
- [Get federated identity](https://docs.yourflexpay.com/api-reference/tags/get-federated-identity.md): Retrieves federated identity linkage details for the specified tag.
- [Initiate tag federation](https://docs.yourflexpay.com/api-reference/tags/initiate-tag-federation.md): Starts federated identity linking for a tag by issuing a challenge for cross-application verification.
- [List application tags](https://docs.yourflexpay.com/api-reference/tags/list-application-tags.md): Returns all tags created by the authenticated application.
- [List tag claims](https://docs.yourflexpay.com/api-reference/tags/list-tag-claims.md): Returns all claims currently recorded for a tag, scoped to the authenticated application context.
- [Request tag claim](https://docs.yourflexpay.com/api-reference/tags/request-tag-claim.md): Requests a claim to link the requesting application's subject identity to an existing tag.
- [Resolve tag](https://docs.yourflexpay.com/api-reference/tags/resolve-tag.md): Resolves a tag to its canonical profile and ownership details. This endpoint is public.
- [Search tags](https://docs.yourflexpay.com/api-reference/tags/search-tags.md): Searches tags by keyword and optionally narrows results to a specific application handle.
- [Transfer tag ownership](https://docs.yourflexpay.com/api-reference/tags/transfer-tag-ownership.md): Transfers a tag from the current application-owned subject to another target subject.
- [Accept a pending transaction](https://docs.yourflexpay.com/api-reference/transactions/accept-a-pending-transaction.md): The **receiving application** calls this to accept an `AWAITING_ACCEPTANCE` transaction.
- [Get a transaction by reference](https://docs.yourflexpay.com/api-reference/transactions/get-a-transaction-by-reference.md): Retrieves the full transaction details including status, webhook delivery status, and timestamps.
- [Initiate a tag-to-tag payment](https://docs.yourflexpay.com/api-reference/transactions/initiate-a-tag-to-tag-payment.md): Creates a new cross-application payment from a tag owned by the calling application to any tag on any application.  The transaction starts in `AWAITING_ACCEPTANCE` state.
- [List transactions pending acceptance](https://docs.yourflexpay.com/api-reference/transactions/list-transactions-pending-acceptance.md): Returns transactions addressed to the calling application that are in `AWAITING_ACCEPTANCE` state. These require an explicit accept or reject action.
- [List transactions received by the calling application](https://docs.yourflexpay.com/api-reference/transactions/list-transactions-received-by-the-calling-application.md): Returns all transactions where the receiver tag belongs to the calling application. Sorted by `createdAt` descending.
- [List transactions sent by the calling application](https://docs.yourflexpay.com/api-reference/transactions/list-transactions-sent-by-the-calling-application.md): Returns all transactions where the sender tag belongs to the calling application. Sorted by `createdAt` descending.
- [Reject a pending transaction](https://docs.yourflexpay.com/api-reference/transactions/reject-a-pending-transaction.md): The **receiving application** calls this to reject an `AWAITING_ACCEPTANCE` transaction.
- [Get the calling application's wallet](https://docs.yourflexpay.com/api-reference/wallet/get-the-calling-applications-wallet.md): Returns the current escrow wallet for the authenticated application including: - `balance` – net position (credits − debits for all completed transactions) - `totalDebited` – running sum of all outgoing accepted payments - `totalCredited` – running sum of all incoming accepted payments
- [Get the paginated ledger statement](https://docs.yourflexpay.com/api-reference/wallet/get-the-paginated-ledger-statement.md): Returns DEBIT and CREDIT entries for the calling application's wallet in reverse-chronological order.  Each entry includes: - `entryType` – `DEBIT` (outgoing) or `CREDIT` (incoming) - `amount`, `currency` - `openingBalance` / `closingBalance` – wallet balance before/after the movement - `description…
- [Provision the calling application's wallet](https://docs.yourflexpay.com/api-reference/wallet/provision-the-calling-applications-wallet.md): Idempotent – safe to call on every application start-up. Creates the wallet if it does not exist and returns the current state.
- [Get a single webhook record by UUID](https://docs.yourflexpay.com/api-reference/webhooks/get-a-single-webhook-record-by-uuid.md): Returns the full webhook delivery record including payload JSON and all attempt history.
- [Get the RECEIVER webhook record](https://docs.yourflexpay.com/api-reference/webhooks/get-the-receiver-webhook-record.md): Returns the outbound webhook record for the receiving application (TRANSACTION_INITIATED notification).
- [Get the SENDER webhook record](https://docs.yourflexpay.com/api-reference/webhooks/get-the-sender-webhook-record.md): Returns the outbound callback record for the sending application (posted after acceptance/rejection/expiry).
- [List all FAILED webhooks for the calling application](https://docs.yourflexpay.com/api-reference/webhooks/list-all-failed-webhooks-for-the-calling-application.md): Returns all webhook delivery records in `FAILED` status where the target URL belongs to the calling application.  Use this to identify events that need to be replayed after fixing an endpoint outage. Paginated, newest first.
- [List all webhook records for a transaction](https://docs.yourflexpay.com/api-reference/webhooks/list-all-webhook-records-for-a-transaction.md): Returns all outbound webhook delivery records for a transaction, ordered by creation time.  Typically returns 0–2 records: - `RECEIVER` – notification to the receiving application on initiation. - `SENDER`   – callback to the sending application on outcome. Each record shows the delivery status, att…
- [Architecture](https://docs.yourflexpay.com/idaas/architecture.md): High-level architecture and runtime behavior of the IDaaS platform.
- [Authentication](https://docs.yourflexpay.com/idaas/authentication.md): How applications authenticate and call protected IDaaS endpoints.
- [Encryption](https://docs.yourflexpay.com/idaas/encryption.md): JWE payload encryption, key usage, and operational guidance for secure IDaaS integrations.
- [Errors](https://docs.yourflexpay.com/idaas/errors.md): Error response format, common HTTP statuses, and integration handling guidance.
- [IDaaS Documentation](https://docs.yourflexpay.com/idaas/index.md): Integration guides and API reference for the ReflexPay Identity as a Service platform.
- [End-to-End Integration Guide](https://docs.yourflexpay.com/idaas/integration-guide.md): Comprehensive IDaaS integration guide covering registration, authentication, tags, payments, webhooks, encryption, settlement, and error handling.
- [Payments](https://docs.yourflexpay.com/idaas/payments.md): How cross-application transactions move from initiation to completion, rejection, or expiry.
- [Quickstart](https://docs.yourflexpay.com/idaas/quickstart.md): Minimal steps to register an application, authenticate, create tags, and send transactions.
- [Webhooks](https://docs.yourflexpay.com/idaas/webhooks.md): Delivery model, signature verification, retries, and receiver responsibilities for IDaaS webhook events.

## OpenAPI Specs

- [idaas-api](https://docs.yourflexpay.com/openapi/idaas-api.json)
- [merchant-api](https://docs.yourflexpay.com/openapi/merchant-api.json)
- [openapi](https://docs.yourflexpay.com/api-reference/openapi.json)

## Optional

- [FLEX](https://www.yourflexpay.com/)
- [Blog](https://www.yourflexpay.com/blog)