curl "https://sandbox-api.tender.cash/v1/api/conversions/stats" \
-H "x-access-id: your-access-id-here" \
-H "x-request-id: 550e8400-e29b-41d4-a716-446655440000" \
-H "x-timestamp: 2026-10-15T09:45:53.000Z" \
-H "authorization: <signature>"
{
"status": "success",
"message": "success",
"data": { "total": 42, "pending": 2, "todayConversion": 3 }
}
Conversion Stats
Count your conversions: total, pending and created today
curl "https://sandbox-api.tender.cash/v1/api/conversions/stats" \
-H "x-access-id: your-access-id-here" \
-H "x-request-id: 550e8400-e29b-41d4-a716-446655440000" \
-H "x-timestamp: 2026-10-15T09:45:53.000Z" \
-H "authorization: <signature>"
{
"status": "success",
"message": "success",
"data": { "total": 42, "pending": 2, "todayConversion": 3 }
}
x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256
authorization signature. See Authentication.Headers
{"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0=""2026-10-15T09:45:53.000Z""550e8400-e29b-41d4-a716-446655440000""your-access-id-here"Query parameters
createdAt date range (ISO 8601). Only applied when to is also sent.Example: "2026-10-01T00:00:00.000Z"createdAt date range (ISO 8601). Only applied when from is also sent.Example: "2026-10-15T23:59:59.999Z""completed"Response
success on successExample: "success""success"curl "https://sandbox-api.tender.cash/v1/api/conversions/stats" \
-H "x-access-id: your-access-id-here" \
-H "x-request-id: 550e8400-e29b-41d4-a716-446655440000" \
-H "x-timestamp: 2026-10-15T09:45:53.000Z" \
-H "authorization: <signature>"
{
"status": "success",
"message": "success",
"data": { "total": 42, "pending": 2, "todayConversion": 3 }
}
Authorizations
Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.
Headers
Base64-encoded HMAC-SHA256 signature of {"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.
ISO 8601 timestamp; must be within 5 minutes of server time
A unique UUID v4 per request
Query Parameters
Start of createdAt range; needs to
End of createdAt range; needs from
Searches transaction ID, status and bank details