Commerce API references

Explore the resources for the Commerce API suite to optimize your international global eCommerce business. The Commerce API is a RESTful API. That means Digital River designed this API to allow you to retrieve, create, update, and delete objects with the HTTP verbs GET, POST, and DELETE.

The Commerce API speaks exclusively in JSON. To ensure the API accepts and processes your requests, you should always set the content-type header to application/json.

All Commerce API requests are sent to https://api.digitalriver.com. It is where your requests are processed.

Explore Digital River products

Digital River simplifies online commerce by offering a comprehensive suite of products designed to manage payments, risks, and more. Through our Commerce API, developers can seamlessly integrate these solutions into their applications, ensuring a smooth transaction process for businesses and consumers. In this section, we'll explore the various offerings available through Digital River, focusing on enhancing your payment capabilities and safeguarding against risks.

Product	Description
Commerce API	Explore Digital River's API suite for payments and risk.
Payments	Explore options to enable payment methods.

Obtaining Commerce API credentials

Contact your Account Manager to obtain and register your API keys.

Authentication

The Commerce API authenticates requests using API keys. Contact your Account Manager to obtain your API keys.

Important: Limit access to your API and secret keys to those who need them. Do not store them in a version control system.

You must send all API requests over HTTPS. Calls sent over plain HTTP will fail, and this could lead to security vulnerabilities and potential data breaches. Sending an API request without authentication also automatically fails.

API keys

The Digital River API uses your account's API keys to authenticate your API requests. Digital River returns an error if you do not include your key when you send an API request or use an incorrect or outdated key.

Your account provides separate keys for testing and for running live transactions. Digital River returns an error if you do not include your key when you send an API request or use an incorrect or outdated key.

There are two types of API keys: public and secret.

• Public API keys–Use these keys to identify your account with Digital River. You can use them with your DigitalRiver.js JavaScript code. Public keys can only create sources.
• Private API keys—You can use your account's private API key to send an API request to Digital River without restriction. Keep these keys confidential and store them only on your servers.

Webhooks

Webhooks allow developers to be notified, in near real-time, when specific events occur within the Digital River system. By registering webhook URLs, you can set up your application to receive an Event object whenever such events happen. This Event object contains important details about the event, including its type and associated data. Webhook events are sent via HTTP POST requests to the endpoints specified in your account's Webhook settings in Global Commerce. You can configure multiple endpoints to receive notifications for a single event.

Webhooks are outbound messages from Global Commerce, as opposed to our APIs, which are inbound messages you send to Global Commerce. See Webhooks for more information.