Getting Started
Base URL, authentication model (OIDC/ES256/PKCE), and how to request access.
Read moreTechnical documentation for approved partners and integrators of Merion's commercial debt-recovery platform.
api.merion.com.au is the system-of-record hub that powers Merion's partner and client portals. It handles debt referrals, case updates, partner intake, form submissions, and billing events. The hub is not a general-purpose open API — most routes require an authenticated bearer token issued by auth.merion.com.au, or a portal-scoped session token. Access is available to approved partners and integrators only.
Public surfaceWithout authentication, the following endpoints respond:
GET https://api.merion.com.au/healthGET https://api.merion.com.au/docsGET https://api.merion.com.au/openapi.yamlGET https://auth.merion.com.au/.well-known/openid-configurationPOST https://api.merion.com.au/public/forms/{key}
All other routes require a bearer token (OIDC, ES256, PKCE S256) or a portal session
token. Unauthenticated requests to protected routes return 401 Unauthorized.
The API is intended for:
To request access, email [email protected] with a brief description of your use case. The Merion team will issue credentials via the partner onboarding flow.
Base URL, authentication model (OIDC/ES256/PKCE), and how to request access.
Read moreFull OIDC authorisation code + PKCE S256 walkthrough with code examples for the complete flow.
Read moreEvery public endpoint — health, docs, OpenAPI spec, OIDC discovery — with curl examples and response shapes.
Read moreThe one genuinely open integration: POST /public/forms/{key} for marketing and partner form intake.
Read moreEnd-to-end curl and JavaScript examples for every form key: contact, refer-a-debt, request-a-quote, partner-referral, and become-a-partner.
Read moreThe error envelope, all error codes, HTTP status meanings, rate-limit behaviour, and retry strategies.
Read moreHow to fetch the live OpenAPI 3.x spec, import it into Postman/Insomnia, and generate a typed client.
Read moreStripe webhook handling and the partner webhook roadmap.
Read moreFive-phase pre-launch checklist — from access request through OIDC setup, testing, security review, and production monitoring.
Read moreRecommended open-source OIDC clients, JWT validators, OpenAPI generators, and HTTP clients per language.
Read moreLive status page, the /health endpoint, and how to get support.
Read moreAPI version history, v1.0 baseline documentation, and upcoming roadmap items.
Read moreAPI access is available to approved partners and integrators. Contact us to start the conversation.