Search documentation
Generic filters


The Merchant API is a general endpoint on your ecommerce server that Bolt can use to make synchronous calls and retrieve information. This information includes details on shipping, tax, and viable discounts codes.

How to Connect Novatum to Your Merchant API Endpoint

  1. Log in to your Merchant Dashboard.
  2. Navigate to Settings > Keys and URLs.
  3. Scroll to URL Configurations.
  4. Select Edit next to your platform and input the URL (example: ).
  5. Select Update.

API Format & Details

Use our official API Reference to see request and response formats for each API type.

Merchant API Types

order.create: Verifies that an order can be created before payment authorization.

order.shipping_and_tax: Retrieves shipping and tax options for a given order.

discount.code.apply: Applies any discounts entered in the Checkout.

Request Verification

All requests sent from Novatum to your Merchant API are signed by HMAC to ensure authenticity.
You must verify these request signatures using the Signing Secret found in your Merchant Dashboard > Settings > Keys and URLs > Keys.

$hmac_header = $_SERVER['X-Novatum-Hmac-Sha256'];

function verify_webhook($payload, $hmac_header) {
    $computed_hmac = base64_encode(hash_hmac('sha256', $payload, NOVATUM_SIGNING_SECRET, true));
    return ($computed_hmac == $hmac_header);

Errors & Troubleshooting

To send back specific errors in merchant api responses visit error codes documentation.

Learn more
Learn more
If you have not found the answer to your question,
then we are always ready to help:
Contact us