SixPay handles
- Resolving the merchant’s settlement configuration.
- Connecting a customer wallet and letting the customer choose or switch wallets.
- Loading eligible payment assets and quotes.
- Creating, signing, and submitting payment intents.
- Showing payment progress and polling the platform order state.
- Returning a browser-safe checkout-session snapshot, including item presentation and promotion pricing.
- Delivering signed order events to the merchant webhook endpoint.
The merchant handles
- Creating and pricing the merchant order before payment.
- Keeping the Merchant API Key and calculating trusted item quantities and amounts on the server.
- Passing only the checkout session ID and checkout token to the browser.
- Verifying, deduplicating, and applying webhook events to the merchant’s order state.
- Product fulfillment, refunds, and customer support policies.
Trust boundary
mapi_... Merchant API Key. A checkout token is deliberately narrower: it is short-lived and can access only its session’s safe snapshot and promotion operations.