Getting Started
Xmltronik API provides product catalog access through the partner API. Your partner account is ready to use after activation.
Base URL
| Environment | Base URL |
|---|---|
Production | https://openapi.xmltronik.id |
Prerequisite: OpenAPI registration
Before a partner account is created, submit an OpenAPI registration to XMLTRONIK through our team. This registration is required so partner API access can be prepared. After the registration is approved, XMLTRONIK creates the partner account and sends an activation email to the address you registered.
1. Activate your account
Open the activation link sent to your partner email. The link is valid for 24 hours. Set your password, then sign in at /partner.
2. Set up your credentials
In the partner dashboard, generate a partner key pair. Keep the private key on your side and upload the public key to the platform. Fill in the callback URL and IP allowlist as needed.
The dashboard also shows the platform public key for callback verification. The client secret is available on the same page and can be revealed again or rotated.
Key pair generation commands and format details are in Signature Generation.
3. Request an access token
POST /openapi/v1.0/access-token/b2b
X-CLIENT-KEY: <client_id>
X-TIMESTAMP: <ISO-8601>
X-SIGNATURE: <SHA256withRSA(clientId|X-TIMESTAMP)>
{ "grantType": "client_credentials" }The signature is made with the partner private key. The access token is valid for at most 15 minutes. Full steps, example values, and error handling are in Signature Generation.
4. Fetch the product catalog
GET /openapi/v1.0/products
Authorization: Bearer <accessToken>
X-PARTNER-ID: <client_id>
X-EXTERNAL-ID: <random string>
CHANNEL-ID: WEB
X-TIMESTAMP: <ISO-8601>
X-SIGNATURE: HMAC_SHA512(METHOD:path:token:sha256(body):timestamp)The response contains the product catalog available to your partner account, grouped by operator.