Skip to main content
Requires a Silver Membership or above — both to apply and for every authenticated call. If the key owner’s Membership lapses, the key stops working.
A REST API for applications that want to charge or credit Vito — a shop, a game, a rewards integration.

​
Applying

A four-step form: Project, Usage, Security, Review, plus three acknowledgements. Applications are reviewed by staff.
Be concrete about what you are building and how you will store the key. Vague applications are the ones that get rejected.

​
Your key

Keys look like vito_live_….
The key is shown once. Vetox stores only a hash and cannot show it again. Copy it immediately.You have a 7-day window to reveal it after approval. Miss that and you must rotate to get a new one.
Rotation issues a new key and keeps the old one working for 24 hours so you can deploy without downtime.

​
Webhooks

You also get a signing secret, whsec_…. Verify every incoming webhook against it.
During a rotation’s 24-hour overlap, webhooks are signed with both secrets. Accept either until the overlap ends.

​
Scopes

​
Endpoints

​
Charging a member

Your application can never take Vito without the member’s explicit approval.A charge creates a payment request. The member opens it on the Vetox website and enters their PIN there. Your application never sees the PIN, and no amount of API access can bypass this.
Requests expire after 10 minutes.

​
Fees

The settlement fee applies to charges and transfers:
Amounts of 5 Vito or less are fee-free, and credits via /v1/add are always fee-free.

​
Rate limits

There is also a per-IP limit of half your per-minute allowance, with a floor of 30.
Under heavy load, write endpoints fail closed — a charge is rejected rather than risking a double-spend. Read endpoints fail open. Build retry logic that treats a rejected write as “did not happen”.

​
Troubleshooting

The key owner’s Membership has lapsed. It is checked on every call, not just at issue.
It cannot be recovered. Rotate to get a new one.
Accept both secrets during the 24-hour overlap.
The member has not approved it. Requests expire after 10 minutes.
The settlement fee. Use amounts of 5 or less to avoid it, or account for it.

Payment Requests

What the member sees when you charge them.