API V2 (recommended)

Account and balances

Read the account mode, fee rates, test key and signing secret, and balances per currency.

Balances#

GET `/V2/balances`#

One balance per currency, in the mode of the key used: with the test key, these are the test balances. Balances are shared with V1 (same accounts).

Read balances

curl "https://api.labyrinthe-rdc.com/api/V2/balances" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxx" \
  -H "Accept: application/json"

200 response (example)

{
  "data": [
    {
      "currency": "CDF",
      "balance": "125000.00",
      "updated_at": "2026-11-11T10:00:42+00:00"
    },
    {
      "currency": "USD",
      "balance": "0.00",
      "updated_at": "2026-11-01T08:12:00+00:00"
    }
  ]
}

Account#

GET `/V2/account`#

Read the account

curl "https://api.labyrinthe-rdc.com/api/V2/account" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxx" \
  -H "Accept: application/json"

Field	Description
`mode`	`live` or `test`, depending on the key used.
`merchant`	Merchant account name.
`live_enabled`	`true` once the token is enabled for production. Otherwise, live collections are subject to a daily limit (`DAILY_LIMIT_REACHED`).
`kyc_verified`	Account KYC verification done.
`fees.deposit_rate`, `fees.payout_rate`	Deposit and payout fee rates, between 0 and 1 (e.g. `"0.0350"` = 3.5%).
`test_key`	Account test key (`test_…`).
`webhook_secret`	Notification signing secret (`whsec_…`). Live token only: absent with the test key.
`webhook_secret_previous_expires_at`	During a rotation: expiry of the old secret. Absent otherwise.

The signing secret and rotations are only reachable with the live token: a test key, often less protected, must not allow forging live notifications.

New test key#

POST `/V2/account/test-key/rotate`#

Generates a new test key, returned in data.test_key; the old one stops working immediately. Live token only (403 LIVE_TOKEN_REQUIRED otherwise). For the signing secret, see Notifications.

New test key (live token)

curl -X POST "https://api.labyrinthe-rdc.com/api/V2/account/test-key/rotate" \
  -H "Authorization: Bearer test_xxxxxxxxxxxxxxxx" \
  -H "Accept: application/json"

Rotations are never retried automatically by the SDKs after a network error: read the account (GET /V2/account) before trying again.