{
  "openapi": "3.1.0",
  "info": {
    "title": "Merchant API",
    "version": "1.0.0",
    "description": "Server access API documentation for Merchant Transfer System."
  },
  "servers": [
    {
      "url": "https://webhook.api-payments.com"
    }
  ],
  "components": {
    "securitySchemes": {
      "ApiKeyAuth": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Api-Key",
        "description": "API key from approved Server Access credentials."
      },
      "ClientSecretAuth": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Client-Secret",
        "description": "Client secret from approved Server Access credentials."
      },
      "TimestampAuth": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Timestamp",
        "description": "Request timestamp used for anti-replay validation."
      },
      "SignatureAuth": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Signature",
        "description": "HMAC-SHA256 signature of timestamp, method, path, and raw body."
      }
    }
  },
  "paths": {},
  "tags": [
    {
      "name": "Client Registration"
    },
    {
      "name": "Transfers"
    },
    {
      "name": "Confirmations"
    },
    {
      "name": "Statements"
    }
  ]
}