Getting Started

Xmltronik API provides product catalog access through the partner API. Your partner account is ready to use after activation.

Base URL

EnvironmentBase URL
Productionhttps://openapi.xmltronik.id

Prerequisite: OpenAPI registration

Before a partner account is created, submit an OpenAPI registration to XMLTRONIK through our team. This registration is required so partner API access can be prepared. After the registration is approved, XMLTRONIK creates the partner account and sends an activation email to the address you registered.

1. Activate your account

Open the activation link sent to your partner email. The link is valid for 24 hours. Set your password, then sign in at /partner.

2. Set up your credentials

In the partner dashboard, generate a partner key pair. Keep the private key on your side and upload the public key to the platform. Fill in the callback URL and IP allowlist as needed.

The dashboard also shows the platform public key for callback verification. The client secret is available on the same page and can be revealed again or rotated.

Key pair generation commands and format details are in Signature Generation.

3. Request an access token

POST /openapi/v1.0/access-token/b2b
X-CLIENT-KEY: <client_id>
X-TIMESTAMP: <ISO-8601>
X-SIGNATURE: <SHA256withRSA(clientId|X-TIMESTAMP)>

{ "grantType": "client_credentials" }

The signature is made with the partner private key. The access token is valid for at most 15 minutes. Full steps, example values, and error handling are in Signature Generation.

4. Fetch the product catalog

GET /openapi/v1.0/products
Authorization: Bearer <accessToken>
X-PARTNER-ID: <client_id>
X-EXTERNAL-ID: <random string>
CHANNEL-ID: WEB
X-TIMESTAMP: <ISO-8601>
X-SIGNATURE: HMAC_SHA512(METHOD:path:token:sha256(body):timestamp)

The response contains the product catalog available to your partner account, grouped by operator.