This endpoint can only be used to activate a direct debit mandate when it is in the status REJECT_REQUESTED (even if the account has direct debits disabled). This action will also enable the account for direct debits if it was previously set to be disabled. The permision needed to access this endpoint is PERM_BUSINESS_POST_MANDATE_ACTIVATE
Creates a new fire.com account. **Please note there is a charge associated with creating a new account.**
Access to the API is by Bearer Tokens. The process is somewhat similar to OAuth2.0, but with some changes to improve security. 1. You must first log into the firework online application and create a new Application in the Profile > API page. (You will need your PIN digits and 2-Factor Authentication device). 2. Give your application a Name and select the scope/permissions you need the application to have (more on Scopes below). 3. You will be provided with three pieces of information - the App Refresh Token, Client ID and Client Key. You need to take note of the Client Key when it is displayed - it will not be shown again. You now use these pieces of data to retrieve a short-term Access Token which you can use to access the API. The Access Token expires within a relatively short time, so even if it is compromised, the attacker will not have long to use it. The Client Key is the most important piece of information to keep secret. This should only ever be stored on a backend server, and never in a front end client or mobile app. **If you ever accidentally reveal the Client Key (or accidentally commit it to Github for instance) it is vital that you log into firework online and delete/recreate the App Tokens as soon as possible. Anyone who has these three pieces of data can access the API to view your data and set up payments from your account (depending on the scope of the tokens).** Once you have the access token, pass it as a header for every call, like so: `Authorization: Bearer $ACCESS_TOKEN` Whenever it expires, create a new nonce and get a new access token again.
Updates status of an existing card to block which prevents any transactions being carried out with that card.
This endpoint allows you to cancel a direct debit mandate. The permision needed to access this endpoint is PERM_BUSINESS_POST_MANDATE_CANCEL
Fire Open Payments is a feature of the fire.com business account that leverages Open Banking to allow your customers to pay you via bank transfer and to reconcile those payments as they are received into your fire.com GBP or EUR account. To set up each Fire Open Payment you first need to create a payment request. This contains the details of the payment such as the amount, destination account, description as well as various other specific fields that you want to associate with the payment. The payment request is represented as a URL with a unique code which can then be incorporated into an eCommerce shopping cart as an alternative form of payment. For example, you can put “Pay by Bank” on your website along with “Pay by Card” and “Pay by PayPal”. It can also be distributed by a variety of means such as by email, SMS, WhatsApp, encoded as a QR code, NFC tag, etc. Consumers confirm the payment details such as the amount are correct, select their bank and authorise the payment. Payments can be made from all major UK banks. The funds are settled into your fire.com account, fully reconciled, with your specified fields provided. There are two implementation options you can use to display payment pages with Fire Open Payments. 1. **Hosted Payment Pages:** fire.com hosts the payment pages - this option allows you to re-direct your customer to the hosted fire.com payment pages displaying the payment details confirmation, bank selection, consent and response pages. 2. **Integrated Payment Pages:** You host the payments page yourself - this option allows you to have control of the UI and UX for displaying the payment details confirmation, bank selection and response pages. Once the response is received, fire.com can re-direct the payer back to your website. ## Hosted Payment Pages Option  The payer is brought through 5 stages to complete the payment: 1. **View Payment Details page:** The payer must first be clear on the amount of the payment, who they are paying and the reason for the payment. 2. **Select Bank / Account Provider page:** The payer then selects their bank. Again this step is offered as part of the fire.com payment UI. 3. **Consent page:** The payer must provide consent to the PISP (fire.com) prior to authorising the payment. This is a regulatory requirement, this page must be hosted by fire.com. 4. **Authenticate and Authorise Payment:** The payer will be redirected to their bank’s online site or mobile banking app. After authenticating, the details of the payment will be displayed, and the payer will authorise the payment. 5. **Response page:** It is a regulatory requirement that the PISP (fire.com) display the results of the payment and provide the same information that would be provided if the payer had made the payment via their banking application. fire.com must display this page, before optionally redirecting the payer back to your website. To implement the hosted Fire Open Payments option you need to do the following: 1. You can create a new Fire Open Payment request either within Firework Online or via the API. 2. Create your new API application with the appropriate permissions required in Firework Online, as outlined in the “Authentication” steps. The permissions needed are: - “Create a Payment Request” - “Get Payment Details” 3. Use the Refresh Token, Client ID and Client Key to create an access token as outlined in the “Authentication” steps. 4. On your website, create a “Pay by Bank” button alongside your other available payment methods, such as Cards and PayPal. 5. After the user clicks on “Pay by Bank”, you need to create a new Fire Open Payment request as outlined in the “Create a Fire Open Payment” steps. The Create a Fire Open Payment request endpoint returns a unique code for the payment request. 6. Create a URL using the code returned in this format: `https://payments.fire.com/{code}` and redirect your customer to this page. 7. fire.com will host all the pages that the customer needs to review and authorise the payment. fire.com will will return the paymentUUID of the successful or failed transaction to the returnUrl that you supplied when creating the Fire Open Payment request. fire.com can also optionally send a “webhook” to your website notifying you of the transaction’s outcome. 8. Once fire.com responds with the paymentUUID and/or the webhook to your website, you need to call the “Get Payment Details” endpoint to get the details of the transaction. This will let you know whether the transaction was successful or not. You can set up the “Payment Request Payment Authorised” webhook to notify you once the payment is authorised or cancelled. 9. The funds will be received into your GBP or EUR account. Funding will typically be within 6 business hours. Once the code is returned the payment can be viewed and paid by going to the following URL: `https://payments.fire.com/{code}` This request creates a new Fire Open Payment Payment. A code is returned that can be shared to your customers as a URL by any channel you wish. You will need to enable the `PERM_BUSINESS_POST_PAYMENT_REQUEST` permission to use this endpoint.
Create a new API Application with specified permissions
You can create multiple debit cards which can be linked to your fire.com accounts.
Retrieve a filtered list of transactions against an account. Recommended to use the v3 endpoint instead. * `dateRangeFrom` - A millisecond epoch time specifying the date range start date. * `dateRangeTo` - A millisecond epoch time specifying the date range end date. * `searchKeyword` - Search term to filter by from the reference field (`myRef`). * `transactionTypes` - One or more of the transaction types above. This field can be repeated multiple times to allow for multiple transaction types. * `offset` - The page offset. Defaults to 0. This is the record number that the returned list will start at. E.g. offset = 40 and limit = 20 will return records 40 to 59.
Retrieve all direct debit payments associated with a direct debit mandate. The permision needed to access this endpoint is PERM_BUSINESS_GET_DIRECT_DEBITS
Retrieve all details for a direct debit mandate. The permision needed to access this endpoint is PERM_BUSINESS_GET_MANDATE
Returns all ASPSPs (Account Servicing Payment Service Provider) / banks. The list can be filtered by currency. You will need to enable the `PERM_BUSINESS_GET_ASPSPS` permission to use this endpoint. ***This endpoint is only required if you intend to host the “Select ASPSP / bank” page yourself.***
Returns the details of a specific payment. As the customer goes through the process of making the payment the status of the payment will change. * `AWAITING_AUTHORISATION` -This is the initial status of all your payments. * `AUTHORISED` - This is the status that your payment is set to after the customer has authorised the payment with their ASPSP / bank. * `AWAITING_MULTI_AUTHORISATION` - Some business accounts such as charities require dual authorisation. * `NOT_AUTHORISED` - Either your customer clicked on cancel or the payment was rejected by their ASPSP / bank. * `PENDING` - This is the status that your payment is set to after the customer has authorised the payment with their ASPSP / bank but the bank may want to carry out another check before funding the transaction. * `PAID` - Funds were received into your fire.com GBP or EUR account from your customer’s ASPSP / bank. You will need to enable the `PERM_BUSINESS_GET_PAYMENT` permission to use this endpoint.
Retrieve all details of a single direct debit collection/payment, whether successful or not. The permision needed to access this endpoint is **PERM_BUSINESS_GET_DIRECT_DEBIT**
The permision needed to access this endpoint is PERM_BUSINESS_GET_MANDATES
Returns all your fire.com Accounts. Ordered by Alias ascending. Can be paginated.
Returns all your payee bank accounts. Ordered by payee name ascending. Can be paginated.
Returns a list of cards transactions related to your fire.com card.
Retrieve a list of transactions against an account. Recommended to use the v3 endpoint instead.
Retrieve a list of transactions against an account. Initially, use the optional `limit`, `dateRangeFrom` and `dateRangeTo` query params to limit your query, then use the embedded `next` or `prev` links in the response to get newer or older pages.
This endpoint allows you to reject a direct debit payment where the status is still set to RECEIVED. Permission name PERM_BUSINESS_POST_DIRECT_DEBIT_REJECT
You can retrieve the details of a fire.com Account by its `ican`.
You can retrieve the details of a specific fire.com user
You can retrieve the details of all fire.com users on your acount.
Updates status of an existing card to unblock which means that transactions can be carried out with that card.
Update Direct Debit Mandate Alias The permision needed to access this endpoint is PERM_BUSINESS_PUT_MANDATE
Returns a list of cards related to your fire.com account.
Tell us which provider you need, and we will ship it in the registry.
Point swirls add at an OpenAPI or GraphQL spec. Typed actions for any API you hold credentials for, today.