Skip to main content
When you’re stuck, we want you back to a 200 OK as fast as possible. Format your question well and include the right identifiers.

​
Response times

​
Always include

  1. requestId: from the error body or Morapay-Request-Id response header. Every API request is logged with this ID.
  2. Environment: TEST or LIVE (from your key prefix).
  3. Endpoint + SDK method, for example morapay.products.link(), POST /disbursement/batches.
  4. Timestamp: when the failure occurred.
  5. Error code, for example links.amount.below_minimum, not just HTTP 422.

​
Good support request

​
Avoid

  • Pasting sk_* secret keys (never share secrets)
  • Screenshots without requestId
  • Re-serialized webhook bodies for signature debugging (send raw body + signature header instead)

​
Self-serve resources

Error catalog

Consultant fields, subclasses, and UI hints.

Authentication

HMAC signing reference.

SDK sample app

Next.js integration lab.

Sandbox community

Ask engineers in the developer group.

​
Security issues

Report vulnerabilities to security@morapay.io. Do not open public GitHub issues for security disclosures.
For signature verification help, post your canonical signing string construction (without sk_*) and the requestId of a failed call. Our team can trace the exact API log entry.