Create a payment method
curl --request POST \
--url https://api.fintoc.com/v2/payment_methods \
--header 'Authorization: <api-key>' \
--header 'Content-Type: multipart/form-data' \
--form type=mx_direct_debit \
--form customer=cus_0ujsswThIGTUYm2K8FjOOfXtY1K \
--form 'mx_direct_debit={
"account_number": "000000000000000000",
"account_type": "clabe",
"interval": "month",
"max_amount": 100000,
"consent_documents": {
"contract": "<string>",
"selfie": "<string>",
"id_front": "<string>",
"id_back": "<string>"
},
"institution_id": "mx_banco_banorte",
"account_holder": {
"name": "Test Customer 1",
"email": "test.customer.1@example.com",
"rfc": "AAA010101AAA"
}
}' \
--form mx_direct_debit.consent_documents.contract='@example-file' \
--form mx_direct_debit.consent_documents.selfie='@example-file' \
--form mx_direct_debit.consent_documents.id_front='@example-file' \
--form mx_direct_debit.consent_documents.id_back='@example-file'import requests
url = "https://api.fintoc.com/v2/payment_methods"
files = {
"mx_direct_debit.consent_documents.contract": ("example-file", open("example-file", "rb")),
"mx_direct_debit.consent_documents.selfie": ("example-file", open("example-file", "rb")),
"mx_direct_debit.consent_documents.id_front": ("example-file", open("example-file", "rb")),
"mx_direct_debit.consent_documents.id_back": ("example-file", open("example-file", "rb"))
}
payload = {
"type": "mx_direct_debit",
"customer": "cus_0ujsswThIGTUYm2K8FjOOfXtY1K",
"mx_direct_debit": "{
\"account_number\": \"000000000000000000\",
\"account_type\": \"clabe\",
\"interval\": \"month\",
\"max_amount\": 100000,
\"consent_documents\": {
\"contract\": \"<string>\",
\"selfie\": \"<string>\",
\"id_front\": \"<string>\",
\"id_back\": \"<string>\"
},
\"institution_id\": \"mx_banco_banorte\",
\"account_holder\": {
\"name\": \"Test Customer 1\",
\"email\": \"test.customer.1@example.com\",
\"rfc\": \"AAA010101AAA\"
}
}"
}
headers = {"Authorization": "<api-key>"}
response = requests.post(url, data=payload, files=files, headers=headers)
print(response.text)const form = new FormData();
form.append('type', 'mx_direct_debit');
form.append('customer', 'cus_0ujsswThIGTUYm2K8FjOOfXtY1K');
form.append('mx_direct_debit', '{
"account_number": "000000000000000000",
"account_type": "clabe",
"interval": "month",
"max_amount": 100000,
"consent_documents": {
"contract": "<string>",
"selfie": "<string>",
"id_front": "<string>",
"id_back": "<string>"
},
"institution_id": "mx_banco_banorte",
"account_holder": {
"name": "Test Customer 1",
"email": "test.customer.1@example.com",
"rfc": "AAA010101AAA"
}
}');
form.append('mx_direct_debit.consent_documents.contract', '{
"fileName": "example-file"
}');
form.append('mx_direct_debit.consent_documents.selfie', '{
"fileName": "example-file"
}');
form.append('mx_direct_debit.consent_documents.id_front', '{
"fileName": "example-file"
}');
form.append('mx_direct_debit.consent_documents.id_back', '{
"fileName": "example-file"
}');
const options = {method: 'POST', headers: {Authorization: '<api-key>'}};
options.body = form;
fetch('https://api.fintoc.com/v2/payment_methods', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fintoc.com/v2/payment_methods",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--",
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>",
"Content-Type: multipart/form-data"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fintoc.com/v2/payment_methods"
payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fintoc.com/v2/payment_methods")
.header("Authorization", "<api-key>")
.body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fintoc.com/v2/payment_methods")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = '<api-key>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--"
response = http.request(request)
puts response.read_body{
"id": "pm_1zXcVbNmAsDfGhJk",
"object": "payment_method",
"created_at": "2026-01-10T11:05:00.000Z",
"customer": "cus_0ujsswThIGTUYm2K8FjOOfXtY1K",
"mode": "live",
"mx_direct_debit": {
"account_type": "clabe",
"institution_id": "mx_banco_santander",
"interval": "month",
"last_four_digits": "0000",
"max_amount_cents": 100000,
"max_amount_currency": "MXN",
"status": "pending"
},
"type": "mx_direct_debit"
}Payment methods
Create a payment method
Enrolls a Mexican direct debit mandate and returns the PaymentMethod that represents the mandate. Send the mandate fields and the four consent documents under mx_direct_debit[consent_documents] as multipart/form-data in a single request. The request is atomic: if any document is invalid, Fintoc creates nothing. The mandate stays pending until the account holder authorizes the mandate with their bank.
POST
/
v2
/
payment_methods
Create a payment method
curl --request POST \
--url https://api.fintoc.com/v2/payment_methods \
--header 'Authorization: <api-key>' \
--header 'Content-Type: multipart/form-data' \
--form type=mx_direct_debit \
--form customer=cus_0ujsswThIGTUYm2K8FjOOfXtY1K \
--form 'mx_direct_debit={
"account_number": "000000000000000000",
"account_type": "clabe",
"interval": "month",
"max_amount": 100000,
"consent_documents": {
"contract": "<string>",
"selfie": "<string>",
"id_front": "<string>",
"id_back": "<string>"
},
"institution_id": "mx_banco_banorte",
"account_holder": {
"name": "Test Customer 1",
"email": "test.customer.1@example.com",
"rfc": "AAA010101AAA"
}
}' \
--form mx_direct_debit.consent_documents.contract='@example-file' \
--form mx_direct_debit.consent_documents.selfie='@example-file' \
--form mx_direct_debit.consent_documents.id_front='@example-file' \
--form mx_direct_debit.consent_documents.id_back='@example-file'import requests
url = "https://api.fintoc.com/v2/payment_methods"
files = {
"mx_direct_debit.consent_documents.contract": ("example-file", open("example-file", "rb")),
"mx_direct_debit.consent_documents.selfie": ("example-file", open("example-file", "rb")),
"mx_direct_debit.consent_documents.id_front": ("example-file", open("example-file", "rb")),
"mx_direct_debit.consent_documents.id_back": ("example-file", open("example-file", "rb"))
}
payload = {
"type": "mx_direct_debit",
"customer": "cus_0ujsswThIGTUYm2K8FjOOfXtY1K",
"mx_direct_debit": "{
\"account_number\": \"000000000000000000\",
\"account_type\": \"clabe\",
\"interval\": \"month\",
\"max_amount\": 100000,
\"consent_documents\": {
\"contract\": \"<string>\",
\"selfie\": \"<string>\",
\"id_front\": \"<string>\",
\"id_back\": \"<string>\"
},
\"institution_id\": \"mx_banco_banorte\",
\"account_holder\": {
\"name\": \"Test Customer 1\",
\"email\": \"test.customer.1@example.com\",
\"rfc\": \"AAA010101AAA\"
}
}"
}
headers = {"Authorization": "<api-key>"}
response = requests.post(url, data=payload, files=files, headers=headers)
print(response.text)const form = new FormData();
form.append('type', 'mx_direct_debit');
form.append('customer', 'cus_0ujsswThIGTUYm2K8FjOOfXtY1K');
form.append('mx_direct_debit', '{
"account_number": "000000000000000000",
"account_type": "clabe",
"interval": "month",
"max_amount": 100000,
"consent_documents": {
"contract": "<string>",
"selfie": "<string>",
"id_front": "<string>",
"id_back": "<string>"
},
"institution_id": "mx_banco_banorte",
"account_holder": {
"name": "Test Customer 1",
"email": "test.customer.1@example.com",
"rfc": "AAA010101AAA"
}
}');
form.append('mx_direct_debit.consent_documents.contract', '{
"fileName": "example-file"
}');
form.append('mx_direct_debit.consent_documents.selfie', '{
"fileName": "example-file"
}');
form.append('mx_direct_debit.consent_documents.id_front', '{
"fileName": "example-file"
}');
form.append('mx_direct_debit.consent_documents.id_back', '{
"fileName": "example-file"
}');
const options = {method: 'POST', headers: {Authorization: '<api-key>'}};
options.body = form;
fetch('https://api.fintoc.com/v2/payment_methods', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fintoc.com/v2/payment_methods",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--",
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>",
"Content-Type: multipart/form-data"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fintoc.com/v2/payment_methods"
payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.fintoc.com/v2/payment_methods")
.header("Authorization", "<api-key>")
.body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fintoc.com/v2/payment_methods")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = '<api-key>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"type\"\r\n\r\nmx_direct_debit\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"customer\"\r\n\r\ncus_0ujsswThIGTUYm2K8FjOOfXtY1K\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit\"\r\n\r\n{\r\n \"account_number\": \"000000000000000000\",\r\n \"account_type\": \"clabe\",\r\n \"interval\": \"month\",\r\n \"max_amount\": 100000,\r\n \"consent_documents\": {\r\n \"contract\": \"<string>\",\r\n \"selfie\": \"<string>\",\r\n \"id_front\": \"<string>\",\r\n \"id_back\": \"<string>\"\r\n },\r\n \"institution_id\": \"mx_banco_banorte\",\r\n \"account_holder\": {\r\n \"name\": \"Test Customer 1\",\r\n \"email\": \"test.customer.1@example.com\",\r\n \"rfc\": \"AAA010101AAA\"\r\n }\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.contract\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_front\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"mx_direct_debit.consent_documents.id_back\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--"
response = http.request(request)
puts response.read_body{
"id": "pm_1zXcVbNmAsDfGhJk",
"object": "payment_method",
"created_at": "2026-01-10T11:05:00.000Z",
"customer": "cus_0ujsswThIGTUYm2K8FjOOfXtY1K",
"mode": "live",
"mx_direct_debit": {
"account_type": "clabe",
"institution_id": "mx_banco_santander",
"interval": "month",
"last_four_digits": "0000",
"max_amount_cents": 100000,
"max_amount_currency": "MXN",
"status": "pending"
},
"type": "mx_direct_debit"
}Authorizations
Body
multipart/form-data
Type of payment method to create. Only mx_direct_debit is supported.
Available options:
mx_direct_debit Example:
"mx_direct_debit"
Unique identifier of the customer the payment method belongs to.
Example:
"cus_0ujsswThIGTUYm2K8FjOOfXtY1K"
Terms of the direct debit mandate.
Show child attributes
Show child attributes
Response
The payment method Fintoc created for the mandate. Each response option below matches one payment method type. This endpoint only creates mandates, so it always returns the mx_direct_debit option, with mx_direct_debit.status set to pending.
- type: bank_transfer
- type: card
- type: mx_direct_debit
- type: pac
A payment method represents a customer's stored payment instrument, ready to be charged without the customer going through the full authorization flow again. The shape of the object depends on its type. Each option below is one type: bank_transfer, card, mx_direct_debit, or pac. The type-specific details live under a key named after the type.
Unique identifier of the payment method.
Example:
"pm_1zXcVbNmAsDfGhJk"
Type of the object. Always payment_method.
Details of the linked bank account that pays the transfers. null when the linked account backing the payment method is no longer available.
Show child attributes
Show child attributes
ISO 8601 timestamp of when the payment method was created.
Example:
"2026-01-15T14:30:00.000Z"
Unique identifier of the customer the payment method belongs to.
Example:
"cus_oVgVqlnK0PdmGirH"
Mode of the payment method. live payment methods charge real money; test payment methods use fake data for integration testing.
Available options:
live, test Example:
"live"
Type of the payment method. Always bank_transfer.
Was this page helpful?
⌘I