How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Monoova Token API

Overview Using tokens is a way of increasing the security around sensitive information. A token can be used to obfuscate debit and credit details. The details of a token (its payload) are stored encrypted on the Engine servers. The tokening system has been designed such the generated token has no mathematical or algorithmic connection to the secret data held as the payload. The token is a random number that is manifested as a GUID. Currently two types of payloads can be held within the tokening system Australian Bank Account BPAY details Other payload types can be added if required. For example, if you have asked the user to enter their bank-account details on your website you can use the security/v1/createOneShotSecurityToken API to embed an OneShotSecurityToken in your page. Using this OneShotSecurityToken you can call the appropriate token/v1/create API passing the details. This way, the customer’s payload details are never passed through your server.

Monoova Token API is one of 31 APIs that Monoova publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Token. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 8 operations across 8 paths, and defines 11 schemas. It is described by OpenAPI 3.2.0, at version v5.29.

Requests are made against 2 base URLs: https://api.mpay.com.au, https://api.m-pay.com.au.

8 operations 8 paths 11 schemas 1 DELETE3 GET4 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v5.29
Base URL
https://api.mpay.com.au
Authentication
HTTP Basic
Resource Areas
1

Authentication & Security 1

Monoova Token API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (BasicAuth). By default, every request must be authenticated.

Paths & Operations 8

Across 8 paths, the API surfaces 8 operations — 1 DELETE, 3 GET, 4 POST. Each is listed below with its method, path, parameters, and response codes.

Token 8

Overview Using tokens is a way of increasing the security around sensitive information. A token can be used to obfuscate debit and credit details. The details of a token (its payl…

POST
/token/v1/createAustralianBankAccount
Create bank account token
TokenCreateAustralianBankAccount body → 200400500
POST
/token/v1/createBPAY
Create BPAY token
TokenCreateBPAY body → 200400500
DELETE
/token/v1/delete/{token}
Delete token
TokenDelete 1 param → 200400500
GET
/token/v1/get/{token}
Get token details
TokenGet 1 param → 200400500
GET
/token/v1/list/{accountNumber}
List tokens by mAccount
TokenList 1 param → 200400500
POST
/token/v1/updateAustralianBankAccount
Update bank account token
TokenUpdateAustralianBankAccount body → 200400500
POST
/token/v1/updateBPAY
Update BPAY token
TokenUpdateBPAY body → 200400500
GET
/token/v1/validate/{token}
Validate token
TokenValidate 1 param → 200400500

Schemas 11

The contract defines 11 schemas that model the data the API accepts and returns. The most detailed are DTO.TokenGetResponse_V1 (7 properties), token.updateAustralianBankAccount (6 properties), token.updateBPAY (6 properties), DTO.TokenUpdateResponse_V1 (5 properties). Each schema is shown below with its type and property counts.

DTO.TokenDetails
object
4 properties
DTO.TokenDeleteResponse_V1
object
3 properties
token.updateBPAY
object
6 properties 5 required
DTO.TokenUpdateResponse_V1
object
5 properties
DTO.TokenValidateResponse_V1
object
3 properties
DTO.TokenListResponse_V1
object
4 properties
DTO.TokenCreateResponse_V1
object
5 properties
DTO.TokenGetResponse_V1
object
7 properties
token.updateAustralianBankAccount
object
6 properties 5 required
token.createBPAY
object
5 properties 4 required
token.createAustralianBankAccount
object
5 properties 4 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

monoova-token-api-openapi.yml Raw ↑

Other APIs Monoova publishes across the network.

Monoova Automatcher (Bank Account Receivables) API
Monoova BPAY API
Monoova Create Payment Using Token API
Monoova Financial API
Monoova Generate a Bearer Token API
Monoova Generate a Client Session API
Monoova Get Async Request Status API
Monoova Get Payment Method Token Details API
Monoova Get Transaction By Date Range API
Monoova Get Transaction By Id API
Monoova Initiate a Payment API
Monoova Ledger Account API
Where this information came from

This is an independent, third-party profile of Monoova Token API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.