How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Malga Sessions API

Através da API de sessões é possível criar um pedido, composto por itens, métodos de pagamento e outros atributos, que pode ser pago através de um endpoint ou integrado ao MalgaCheckout.# Fluxo de criação e de pagamento de uma sessão- Crie uma `sessão` informando os dados básicos necessários- Utilize a `publicKey` retornada na criação ou recuperada na rota de detalhes no `X-Api-Key` para autenticar o pagamento**Dados básicos de um objeto do tipo session**

Malga Sessions API is one of 19 APIs that Malga publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Sessions. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

This API exposes 8 operations across 6 paths, and defines 52 schemas. It is described by OpenAPI 3.1.0, at version 0.5.

Requests are made against a single base URL, https://api.malga.io.

8 operations 6 paths 52 schemas 4 GET1 PATCH3 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.1.0
API Version
0.5
Base URL
https://api.malga.io
Authentication
API Key, API Key
Resource Areas
1

Authentication & Security 2

Malga Sessions API declares 2 security schemes for authenticating requests. An API key is passed in the header as X-Client-Id (X-Client-ID). An API key is passed in the header as X-Api-Key (X-Api-Key). By default, every request must be authenticated.

Paths & Operations 8

Across 6 paths, the API surfaces 8 operations — 4 GET, 1 PATCH, 3 POST. Each is listed below with its method, path, parameters, and response codes.

Sessions 8

Através da API de sessões é possível criar um pedido, composto por itens, métodos de pagamento e outros atributos, que pode ser pago através de um endpoint ou integrado ao MalgaCh…

GET
/v1/sessions
Listar sessões
listSessions 11 params → 200400500
POST
/v1/sessions
Criar nova sessão
createSession body → 200422
GET
/v1/sessions/{id}
Recuperar detalhes de uma sessão
getSession 1 param → 200
PATCH
/v1/sessions/{id}
Atualizar relevância de uma sessão
patchSession 1 param body → 200422
POST
/v1/sessions/{id}/charge
Pagar uma sessão
paySession 1 param body → 201404422
POST
/v1/sessions/{id}/cancel
Cancelar uma sessão
cancelSession 1 param → 201
GET
/v1/sessions/{id}/history
Recuperar o histórico da sessão
getSessionHistory 1 param → 200400404500
GET
/v1/sessions/{id}/link
Recupera sessão com os dados das configurações da empresa
getSessionWithSettings 1 param → 201

Schemas 52

The contract defines 52 schemas that model the data the API accepts and returns. The most detailed are SessionResponse (24 properties), SessionSettingsResponse (21 properties), CreateSession (18 properties), TransactionRequest (15 properties). Each schema is shown below with its type and property counts.

VendorCharge
object
Parâmetros adicionais para transacionar com vendors
2 properties 2 required
PaymentMethodDripObjectRequest
object
3 properties 1 required
ErrorItem
object
7 properties
UserSettings
object
12 properties
PaymentMethodNupayObjectRequest
object
6 properties 1 required
PaySessionRequest
object
Corpo para pagamento da sessão (paymentMethod e paymentSource). Se existir split, as regras foram definidas na criação da sessão (splitRules em POST /v1/sessio…
4 properties 2 required
SourceTypeCustomerData
object
Dados do customer para cobrança via Cartão, Pix ou Boleto
2 properties 2 required
FraudAnalysisRequest
object
13 properties
FraudAnalysisCustomerBrowser
object
6 properties
TransactionRequest
object
15 properties
Address
object
8 properties 7 required
SourceTypeCardObject
object
Dados para cobrança por cartão de crédito salve
2 properties 2 required
ErrorResponse
object
1 property
DripBrowser
object
2 properties
SessionHistoryResponse
array
SourceTypeToken
object
Dados para cobrança única de token de cartão
2 properties 2 required
PaymentMethodClickToPay
object
2 properties 1 required
SessionResponse
object
24 properties
SourceTypeTokenObject
object
Dados para cobrança única de token de cartão
2 properties 2 required
SessionItemObject
object
7 properties 3 required
Document
object
3 properties 2 required
PaymentMethodCardObject
object
4 properties 1 required
PlatformFeeAppliedOutput
object
Snapshot da platform fee aplicada em uma cobrança (retorno transacional).
7 properties 4 required
PaymentMethodBoletoObjectRequest
object
5 properties 2 required
PaymentMethodBoletoObject
object
5 properties 4 required
PaymentMethodClickToPayObjectRequest
object
2 properties 2 required
PaymentMethodBoleto
object
6 properties 1 required
SourceTypeCustomer
object
Identificador do comprador para cobrança
3 properties 2 required
PatchSessionRequest
object
3 properties 1 required
FraudAnalysisAddress
object
8 properties
PaymentMethodCardObjectRequest
object
4 properties 2 required
SourceTypeClickToPay
object
Dados do Click to Pay
3 properties 3 required
MetaPagination
object
5 properties
CancelSession201Response
object
2 properties
PaymentSessionNuPay
object
1 property 1 required
PaySessionPaymentMethodDripObjectResponse
object
9 properties 1 required
CreateSession
object
18 properties 3 required
SessionSettingsResponse
object
21 properties
PaymentMethodPixObject
object
4 properties 4 required
PatchSession200Response
object
2 properties
SessionHistoryItem
object
Registro de auditoria de um evento na sessão. O item não retorna campos de nível raiz como chargeId nem metadados de sistema.
9 properties 4 required
MultiplePayments
object
Estado do link de pagamento para receber uma próxima cobrança. - Sessões 1:1 retornam allow=false, maxPayments=null e status derivado da disponibilidade do lin…
5 properties
SourceTypeCustomerObject
object
Identificador do comprador para cobrança
2 properties 2 required
PaySessionPaymentMethodDripObjectRequest
object
2 properties 1 required
PaySession201Response
object
15 properties
NupayRecipient
object
4 properties 4 required
SessionList
object
2 properties
PaymentMethodCard
object
3 properties 1 required
SourceTypeCard
object
Dados para cobrança por cartão de crédito salve
3 properties 2 required
SplitRule
object
9 properties 1 required
SourceTypeCardOneShot
object
Dados do cartão para cobrança direta
2 properties 5 required
PaymentMethodPixObjectRequest
object
2 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

plug-sessions-api-openapi.yml Raw ↑

Other APIs Malga publishes across the network.

Malga Analytics API
Malga 3DS2 Malga API
Malga Cards API
Malga Charges API
Malga Client-token API
Malga Customers API
Malga Flows API
Malga Merchants API
Malga Payouts API
Malga Prepayment API
Malga Providers API
Malga Seller Documents API
Where this information came from

This is an independent, third-party profile of Malga Sessions API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.