Confirm the base URLs and headers on this page, then read Signature & Code samples. Verify webhooks from Setu with Webhook Verification.The reference is split by country. Open the country you have enabled, then PayIn or PayOut. Currency and payment methods differ by country, so use that country's page. India PayIn includes a browser redirect after payment.Setu V1 API documentation
Sandbox: https://secure-staging.setu.solutions/
Production: https://secure.setu.solutions/
Request headers
Accept: Send application/json. Response bodies are JSON.
Content-Type: Required on requests that have a body. Value is application/json. Omit it on GET and DELETE requests with no body.
MerchantID: Required. The merchant id issued by Setu. Find it in Merchant Dashboard → Settings → API keys. The gateway uses it to select the public key for verification.
Signature: Required. Standard Base64 of a SHA512withRSA signature. See the signing section.
Timestamp: Required. Current Unix time in seconds. It must be the same value concatenated into the signature.
Example:#
{
"Accept": "application/json",
"Content-Type": "application/json",
"MerchantID": "FX100001",
"Signature": "<standard Base64 of the SHA512withRSA signature>",
"Timestamp": "1750553505"
}
Modified at 2026-10-08 20:05:43