Skip to main content

​
Welcome to the INDX Customer API

The INDX Customer API provides secure access to customer account information, balances, transactions, and financial operations. All endpoints use signature-based authentication to ensure secure communication between your application and INDX services.
New to INDX API? Check out the Quickstart Guide for a step-by-step tutorial on making your first API request.

​
Authentication

All Customer API endpoints require signature-based authentication using the following headers:
  • X-API-KEY: Your API key identifier
  • X-API-SIGNATURE: HMAC signature of the request
  • X-API-TIMESTAMP: Unix timestamp of the request
  • X-API-NONCE: Unique nonce value to prevent replay attacks

​
Signature Generation

The signature is generated by creating an HMAC-SHA256 hash of the request details using your API secret: 
signature_string = METHOD + PATH + TIMESTAMP + NONCE
signature = HMAC-SHA256(api_secret, signature_string)
The signature ensures that:
  • Requests cannot be tampered with in transit
  • Requests are authenticated to your account
  • Replay attacks are prevented through timestamp and nonce validation
Contact INDX support to obtain your API credentials (API Key and API Secret) before making requests. Keep your API Secret secure and never commit it to version control.

​
Base URL

All API requests should be made to: 
https://api.indx.com

​
Endpoint Categories

​
Account Endpoints

Retrieve account information, balances, deposit locations, and external account details.

Get Accounts

Retrieve all customer accounts from financial providers.

Get Account Balance

Check current and available balances for specific accounts.

Get Deposit Locations

Find deposit locations for customer accounts.

Get External Accounts

Access external account information linked to customers.

Get Transactions

Retrieve detailed transaction history with filtering options.

​
Transaction Endpoints

Create wire transfers and account-to-account transfers.

Create Wire Transfer

Submit wire transfer requests for customer withdrawals.

Create Transfer

Transfer money between customer accounts.

​
Best Practices

  • Store your API Secret securely in environment variables
  • Use HTTPS for all API requests
  • Rotate your API credentials regularly
  • Never share or commit your API Secret to version control
  • Implement exponential backoff for retries
  • Cache responses when appropriate
  • Monitor your API usage to stay within limits
  • Always check response status codes
  • Log errors for debugging
  • Implement proper error handling for network failures
  • Validate timestamps to ensure they’re within acceptable ranges
Need help? Contact INDX support for assistance with authentication, integration, or API questions.