ZEN transfers API
Go to zen.comGo to myZEN.com
Documentation
Documentation
  • Sandbox
  • Plugin integration
  • Checkout integration
  • API business
  • API reference
  • Merchant panel
  • Brandbook
Go to zen.comGo to myZEN.com
Documentation
Documentation
  • Sandbox
  • Plugin integration
  • Checkout integration
  • API business
  • API reference
  • Merchant panel
  • Brandbook
  1. Authentication
  • Overview
  • Dictionary
  • Environments
  • Authentication
    • mTLS
    • API key
  • Notifications
    • About
  • Information about accounts
    • Get the list of accounts
    • Get account details
  • Payment management
    • About
    • Calculation of available channels, fees and payment limits
    • Get the list of purpose codes
    • Create a payment
    • Get payment details
  • Manage payment drafts
    • About
    • Create a draft payment
    • Get the draft list
    • Get payment draft details
    • Delete a saved payment draft
  • Transaction History Management
    • Get payment history on account
    • Get payment confirmation
  1. Authentication

mTLS

authorization.jpg
How does mTLS work
In our system, mTLS (mutual TLS) is used to secure communication with the public API. mTLS provides an additional layer of security by requiring mutual authentication on both the client and server sides. This ensures that both parties are confident in their counterparts' identities, which protects against unauthorized access and man-in-the-middle (MitM) attacks.
1.
Connection initialization: The Client initiates a connection to the API server. Both parties agree on encryption parameters and session keys are generated.
2.
Certificate exchange:
The API server sends its certificate to the Client for authentication.
The Client verifies the server certificate against its set of trusted CA certificates.
The Client sends its certificate to the API server.
The API server verifies the Client certificate using its own set of trusted CA certificates.
3.
Establishing a secure connection: After mutual verification of certificates, the connection is encrypted and deemed secure. From this point on, both parties can exchange data confidentially and integrally.
Steps to generate a certificate for mTLS
Modified at 2025-08-22 09:56:04
Previous
Environments
Next
API key
Built with