Overview · API documentation

SwiftWallet v3 API

Collect with M-Pesa STK push, pay out to phones, Pochi, paybills and tills, and track every transaction from your own systems.

Base URL

https://swiftwallet.co.ke/v3

Version

3.0

Format

JSON, amounts in whole KES

Paths work with or without a trailing slash (/v3/stk-initiate and /v3/stk-initiate/). Successful responses are {"success": true, ...} with the fields at the top level.

AI Guide

A skill a coding assistant follows to integrate SwiftWallet: authentication, collections, payouts, and signed webhooks.

Download the skill

The file is swiftwallet-ai-guide.skill. Unzip it and move the swiftwallet folder into .cursor/skills/ so the path is .cursor/skills/swiftwallet/SKILL.md. Keep that folder name. In Claude, upload the .skill file. Then ask the assistant to add SwiftWallet to your app.

Changes from the legacy v3 API

API keys are accepted only in the Authorization: Bearer header. An api_key in the query string or body returns 401 API_KEY_NOT_IN_HEADER.
POST /v3/account/ (account creation) was removed and returns 410 ENDPOINT_REMOVED. Sign up on the website. GET /v3/account/ still works.
Keys are shown once at creation and stored hashed. Each key has its own scopes, optional IP allowlist (403 IP_NOT_ALLOWED), optional expiry and revoke.
Every callback is signed with X-SwiftWallet-Signature, including STK, B2C, B2Pochi, B2B and reversal results. Callback URLs must be public HTTPS. See Webhooks.
SwiftPay and POS endpoints are not available on this platform (410).