API Get Merchant Profile

API Get Merchant Profile is an endpoint to retrieve the merchant's registered profile data on the Senmo system.

---

API Information

Field	Value
Path	/api/{version}/profile
HTTP Method	GET
Service Code	00
Version	v1.0
Type	JSON
Authentication	OAuth 2.0 with Access Token

---

Request Structure

Request Header

Details

Parameter / Field	Mandatory	Type	Description
Content-Type	M	String	Indicates the media type of the resource. Use: application/json
Authorization	M	String	Represents the access_token. Starts with "Bearer" followed by the access token. e.g.: Bearer eyJraWQiOi...
X-TIMESTAMP	M	String	Client's current local time in yyyy-MM-ddTHH:mm:ss.SSSTZD format
X-SIGNATURE	M	String	Symmetric signature using HMAC_SHA512. Formula: stringToSign = HTTPMethod + ":" + EndpointUrl + ":" + AccessToken + ":" + Lowercase(HexEncode(SHA256(minify(RequestBody)))) + ":" + TimeStamp. Notes: (1) Use full URL including all parameters. (2) If no Request Body, use empty string.
X-PARTNER-ID	M	String	Unique partner ID. Use the Client ID obtained after the onboarding process.
X-EXTERNAL-ID	M	String	Numeric String. A unique reference number you generate. Must be unique on the same day.
ORIGIN	O	String	Origin domain registered on the iFortepay system.
CHANNEL-ID	M	String	Device identification on which the API services are being accessed. Use value: api

M = Mandatory, O = Optional

ℹ️ This API uses HTTP GET method — no Request Body is required.

---

Response Structure

Response Header

Details

Parameter / Field	Mandatory	Type	Description
Content-Type	M	String	Indicates the media type of the resource (e.g. application/json)
X-TIMESTAMP	M	String	Client's current local time in yyyy-MM-ddTHH:mm:ss.SSSTZD format

Response Body

Details

Parameter / Field	Type	Length	Description
responseCode	String	7	Response code
responseMessage	String	150	Response description
detailData	Object	-	Detail data object
detailData.clientId	String	-	Client's unique ID
detailData.businessName	String	-	Client's company name
detailData.businessBrandName	String	-	Client's brand name
detailData.businessAccountNumber	String	-	Client's registered account number
detailData.businessBankCode	String	-	Client's registered bank code
detailData.businessBankName	String	-	Client's registered bank name
detailData.ip	Array	-	List of IP addresses registered in the Senmo system
detailData.businessWebsite	String	-	Client's website / domain
detailData.callbackAccountInquiry	String	-	Client's registered callback URL for API Account Inquiry
detailData.callbackTransfer	String	-	Client's registered callback URL for API Transfer Interbank
detailData.clientSecret	String	-	Client secret key used for Signature & Security
detailData.publicKey	String	-	Client's public key registered in the Senmo system
detailData.businessAddress	String	-	Client's address registered in the Senmo system
detailData.businessPostalCode	String	-	Client's postal code registered in the Senmo system

---

Example Responses

Details

✅ Success Response

{
  "responseCode": "2000000",
  "responseMessage": "Successful",
  "detailData": {
    "clientId": "MCPD2312010070",
    "businessName": "PT Jojo Bizzare Advanture",
    "businessBrandName": "Jojo Bizzare",
    "businessAccountNumber": "6661666123",
    "businessBankCode": "014",
    "businessBankName": "BCA",
    "ip": [
      "103.150.114.130",
      "182.253.253.69",
      "114.5.16.100"
    ],
    "businessWebsite": "https://www.alababil.co.id",
    "callBackAccountInquiry": "https://test-acc-inquiry.free.beeceptor.com",
    "callBackTransfer": "https://test-acc-inquiry.free.beeceptor.com",
    "clientSecret": "qaSecret",
    "publicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...",
    "businessAddress": "Jl. Buncit Raya No.8a, RT.7/RW.3, Kalibata, Kec. Pancoran, Kota Jakarta Selatan, DKI Jakarta",
    "businessPostalCode": "12740"
  }
}

❌ Error Response

{
  "responseCode": "4010000",
  "responseMessage": "Unauthorized - Origin IP is not whitelisted"
}

---