llms.txt
+40 −5
− > verified contract: every statement here was tested against the live API (last full verification: 2026-09-27).− - [OpenAPI 3.1 specification](https://mcp.roki.la/openapi.yaml): 14 operations,− 18 schemas.− - `POST /confirm` - Confirm an embedded-components payment− - [1. 1. What ROKI Connect is](https://mcp.roki.la/ROKI_CONNECT.md#1-what-roki-connect-is): It lets a merchant's server accept card payments **three ways**. In every one, the merchant never+ > verified contract: every statement here was tested against the live API (last full verification: 2026-10-28).+ - [OpenAPI 3.1 specification](https://mcp.roki.la/openapi.yaml): 42 operations,+ 35 schemas.+ - `POST /embed/confirm` - Confirm an embedded-components payment+ - `POST /embed/checkouts/{checkout_id}/confirm` - Confirm an embedded checkout created by the server (obligations)+ - `GET /webhooks` - Read the webhook endpoint of this key's environment+ - `POST /webhooks` - Create the webhook endpoint, or change its URL+ - `POST /webhooks/rotate-secret` - Issue a new signing secret+ - `POST /webhooks/disable` - Pause delivery+ - `POST /webhooks/enable` - Resume delivery+ - `POST /webhooks/test` - Send a signed webhook.test ping+ - `GET /webhooks/deliveries` - List recent delivery attempts+ - `GET /obligations` - Look up a customer's open obligations (Collections, Education)+ - `GET /obligations/{obligation_id}` - Read one obligation+ - `POST /obligations/{obligation_id}/pay` - Create a payment locked to an obligation's amount+ - `GET /automatic-debit/agreement` - Read the merchant's automatic-debit agreement+ - `POST /automatic-debit/authorizations` - Enrol a card for automatic debit (1.00 HNL + 3DS + void)+ - `GET /automatic-debit/authorizations/{authorization_id}` - Read an enrolment+ - `POST /payment-authorizations` - Create a hold (authorize now, capture or release later)+ - `GET /payment-authorizations/{payment_authorization_id}` - Read a hold+ - `POST /payment-authorizations/{payment_authorization_id}/capture` - Capture the full authorized amount+ - `POST /payment-authorizations/{payment_authorization_id}/release` - Release (void) an authorized hold+ - `GET /recurring` - List recurring arrangements+ - `POST /recurring` - Create a recurring arrangement on a saved card+ - `GET /recurring/{recurring_id}` - Read a recurring arrangement+ - `DELETE /recurring/{recurring_id}` - Cancel a recurring arrangement+ - `POST /recurring/{recurring_id}/charge` - Trigger a merchant-initiated charge (no 3DS)+ - `POST /sales/sessions` - Create a locked sale session (mode 4, hosted fields)+ - `GET /sales/sessions/{session_id}` - Read a sale session's state+ - `POST /oauth/account-lookup` - Does this email already have a ROKI merchant account (partners only)+ - `POST /oauth/token` - Exchange an authorization code, or refresh a token (Continue with Roki)+ - `GET /oauth/authorize` - Start Continue with Roki (browser redirect, Authorization Code + PKCE)+ - [1. 1. What ROKI Connect is](https://mcp.roki.la/ROKI_CONNECT.md#1-what-roki-connect-is): It lets a merchant's server accept card payments in **five modes**. In every one, the merchant+ - [26. 26. Mode 3 - Recurring payments](https://mcp.roki.la/ROKI_CONNECT.md#26-mode-3-recurring-payments): A recurring arrangement (`rec_*`) anchors a schedule - amount, frequency, billing day - to a saved+ - [27. 27. Mode 4 - Hosted fields](https://mcp.roki.la/ROKI_CONNECT.md#27-mode-4-hosted-fields): You build the whole checkout page. ROKI hosts three iframes - card number, expiry, CVV - that you+ - [28. 28. Managing the webhook endpoint by API](https://mcp.roki.la/ROKI_CONNECT.md#28-managing-the-webhook-endpoint-by-api): Everything the portal's Webhooks tab does, with the secret key. One endpoint per environment:+ - [29. 29. Payment authorizations (holds)](https://mcp.roki.la/ROKI_CONNECT.md#29-payment-authorizations-holds): Authorize now, capture or release later - a generic hold, not a sale and not automatic debit. You+ - [30. 30. Obligations (Collections and Education)](https://mcp.roki.la/ROKI_CONNECT.md#30-obligations-collections-and-education): Find what a customer owes in the merchant's Collections invoices and Education installments, then+ - [31. 31. Automatic debit - enrolling a card](https://mcp.roki.la/ROKI_CONNECT.md#31-automatic-debit-enrolling-a-card): Same flow as the merchant portal's automatic debit: ROKI charges 1.00 HNL with 3-D Secure, voids+ - [32. 32. Continue with Roki (OAuth 2 + PKCE)](https://mcp.roki.la/ROKI_CONNECT.md#32-continue-with-roki-oauth-2-pkce): For partner platforms: connect a merchant without the merchant pasting a secret key into your