Skip to main content



Tuna is a PCI Level 1 certified company; your data is safe with us.

Tuna APIs are organized around REST. Use our API REST and build your payment form if you want full control over the look and feel of your checkout page. Our APIs have predictable resource-oriented URLs, accept form-encoded request bodies, return JSON-encoded responses, and use standard HTTP response codes, authentication, and verbs.

You can use the Tuna APIs in sandbox mode, which does not affect your live data or interact with the banking networks. The API server and keys you use for the request determine whether the request in production mode or sandbox mode. Your first secrets are provided when you sign up for an account: account name and app token. You can find the public keys for the sandbox environment here. You can generate additional API keys and delete API keys (as you may need to rotate your keys in the future). You authenticate to Tuna APIs by providing your account name and app token key in the request HTTP headers.

In this API REST Guide, you will find examples of use cases, parameters lists, and error handling. Please check all that are meaningful to your company.

Refer to the following APIs:

  • api/Payment: for actions regarding payment transactions.

  • api/Token: for card data tokenization. It is usually the first step using our APIs.

  • api/Merchant: for actions regarding the management of merchants for split payment accounts.


  • Payment Integration: do you need to be able to perform secure credit card payments and/or also use other payment methods such as Debit Card, Boleto, PIX, and Bitcoin? Check out how to perform a Payment Integration with our Payment API and Token API.

  • Split Integration: are you looking to set up a marketplace so your merchants will use split payment solutions in your marketplace? Check out how to perform a Split Integration with our Merchant API.

  • Tuna Codes: do you need to learn about your codes and status? Please, check out the Tuna Codes.

  • Webhooks Notifications: learn more about our notifications in the guide Webhooks Notifications.

  • Sandbox Environment: check out for information about test data and a full description of the Sandbox Environment.

  • Idempotent Requests: do you require idempotent requests? Take a look how to make Idempotent Requests.