Developer hostdevelopers.paytocommit.com Companion surfaceOpen platform workspace

Developers

PAYTOCOMMIT DEVELOPER PLATFORM

Quickstarts, HRS API reference, webhook verification, workspace setup, dashboard usage, exports, billing, and enterprise setup in one developer hub.

ReferenceHRS API + webhooks

Quickstarts, scopes, signatures, billing, and troubleshooting stay readable before sign-in.

WorkspaceAccount first

Create a developer account, then open the platform workspace.

OperationsAudit + reports

Reporting, webhook health, organization usage, and customer drill-downs live in the platform workspace.

AccountsWorkspace access

Developers sign in, create workspaces, request sandbox access, and manage production credentials from the same place.

Portal search64 pages

Quickstarts, reference, dashboards, pricing, and troubleshooting update live as you type.

HRS APIConsent scoped

Legal-name-backed reliability access stays purpose-bound, auditable, and filterable by active scope.

Usage billingMetered, exportable

Billing tracks protected lookups, report jobs, exports, and heavier dashboard workflows.

Platform workspaceDashboard + reports

Customer drill-down, webhook health, organization usage, exports, and audit views live in one place.

WorkspaceDeveloper accounts

OrganizationsRoles and billing access

Bring in technical leads, security owners, and finance contacts without collapsing everything into one credential.

ProjectsSandbox and production shape

Mirror the way real API teams work by isolating environments, integrations, and usage by project.

KeysCreate the first API key

Name, scope, and store the first key correctly so audit history and billing stay understandable later.

PlaygroundTest a live request

Run the first protected HRS call, inspect the payload, and confirm the key and consent scope are wired correctly.

QuickstartsSandbox to first lookup

Set up sandbox access, run the first protected lookup, verify webhooks, and move to production review.

SandboxRequest sandbox access

Get the first approved key, test subjects, and webhook access before you ask for production.

ProductionPrepare for go-live

Clear consent review, billing setup, webhook verification, and audit readiness before live traffic starts.

Core APIHuman Reliability API

Consent-scoped HRS retrieval, trend history, and enterprise-safe customer detail access.

DashboardMaster platform workspace

Portfolio health, webhook delivery, export jobs, billing, and customer-level reliability drill-downs.

WorkforceInvite employees and launch company onboarding

Send company-email invites, attach employees to the right organization, and turn on enterprise markets without adding signup friction.

InvitesRun employee invite waves

Move from one-off company-email invites to CSV-backed roster uploads without losing role, team, or onboarding state.

StatesHandle pending, blocked, and continuity access

Keep employee-side access states explainable while preserving the admin-side policy and continuity controls behind them.

OnboardingRoute employees into the right workspace

Show role, visibility policy, and first organization programs before the company-managed account goes live.

AccessReview the employee approval queue

Search pending signups, approve in batches, and apply temporary restrictions without orphaning active commitments.

PayrollRoll out wallet-linked direct deposit

Review payroll-connected funding, employee wallet entry, and employer reporting without confusing payroll with normal wallet ownership.

CustomersConsent-scoped customer drill-downs

Open the customer portfolio, inspect trend history, and work from a real organization dashboard.

ReportsExports, cohorts, and audit packages

Queue reports, run exports, and keep compliance-ready packages close to the dashboard.

WebhooksSignatures and retries

Signed delivery, replay protection, retry handling, and endpoint health verification.

BillingUsage-based pricing

Protected lookup volume, exports, reports, and threshold-driven billing visibility.

AuditAccess history and scope review

Trace consent-backed lookups, exports, scope changes, and high-sensitivity admin actions without leaving the platform.

PartnersStrategic partner packages

Optional flagship launch pages, case studies, and co-branded rollout support for negotiated enterprise accounts.

EnterpriseSales and approvals

Enterprise application review, consent expectations, use-case intake, and integration readiness.

Webhooks

Event delivery, signing, retries, health monitoring, replay protection, and dashboard verification for PayToCommit enterprise integrations.

Reference

Delivery modelWebhook delivery is signed, retry-aware, and organization-scoped. The dashboard shows event health, retry pressure, and the last verified delivery for every endpoint.

Delivery examples cover HRS updates, consent changes, export completion, billing threshold alerts, and report-ready events.

Signature verificationEach request carries a verifiable signature and timestamp that should be checked before your system trusts the payload.

Replay protection and retry idempotency are documented alongside the verification recipe so teams can deploy safely from the start.

tsVerify a webhook signature

import crypto from "node:crypto";

export function verifyPayToCommitSignature(rawBody: string, signature: string, secret: string) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(rawBody)
    .digest("hex");

  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
}

Use the raw request body and reject stale timestamps before processing the event.

Delivery model

Webhook delivery is signed, retry-aware, and organization-scoped. The dashboard shows event health, retry pressure, and the last verified delivery for every endpoint.

Delivery examples cover HRS updates, consent changes, export completion, billing threshold alerts, and report-ready events.

Signature verification

Each request carries a verifiable signature and timestamp that should be checked before your system trusts the payload.

Replay protection and retry idempotency are documented alongside the verification recipe so teams can deploy safely from the start.

ReferenceAPI Reference

Reference paths for HRS lookups, exports, webhooks, reports, consent retrieval, billing metrics, and key-scoped management endpoints.

Stand up the workspace.

Organizations Projects API keys Playground

Start with sandbox and setup.

Quickstarts Sandbox access Production review Reference

Operate the enterprise workspace.

Platform dashboard Usage billing Customer portfolio Reports and exports

Keep integrations healthy.

Webhook delivery Troubleshooting Audit logs Strategic partners

Galactus

Galactus for enterprise

Funding, verification, Chains, Spark, API access, and Commitment Network questions route through the published docs corpus.

Galactus unlocks after one verified completed commitment in the last 30 days. Create your account first, then finish one verified commitment to open Enterprise sales.