# Aporta

> Gateway de pagamentos para desenvolvedores brasileiros (Iniciador). Sandbox API com PIX, BOLETO, CARD e CRYPTO.

## Docs

- [Documentação](https://aporta-web.fly.dev/docs): guias auth, webhooks, sandbox
- [OpenAPI JSON](https://aporta-api.fly.dev/v1/openapi.json)
- [Scalar / API reference](https://aporta-api.fly.dev/v1/docs)
- [Playground](https://aporta-web.fly.dev/playground)
- [Webhook events](https://aporta-api.fly.dev/v1/webhooks/events)

## Auth

Authorization: Bearer sk_test_… (ou sess_… merchant)

Envelope: { data, success, error }

## Recursos principais (/v1)

- customers, products, checkouts, payment-links, transparents
- coupons, subscriptions, webhooks, payouts, pix/send
- crypto/receive, crypto/send, store, api-keys, auth, kyc

## Webhooks

Header X-Aporta-Signature: t=<unix>,v1=<hex>
Assina `${t}.${rawBody}` com HMAC-SHA256 e secret whsec_…
SDK: `import { verifyWebhook } from "@aporta/sdk"` ou `client.webhooks.verify(...)`

## Fora do MVP

PCI / PSAV / compliance real · adapters de provedor de produção · TrustMRR · multi-SDK