How to connect
1. Apply for access
Contact our commercial team to obtain a merchant account number and key.
2. API Address
- Test Service:
https://test-gateway.mcconnects.com/mc-trading/ - Prod Service:
https://gateway.mcconnects.com/mc-trading/
3. Agreements & Norms
- Request method: POST
- Request parameters: JSON
- Encoding format: UTF-8
- Request message structure: The api will process two types of content in the request: Header (public parameters, stored in the HTTP headers attribute), Body (private parameters, stored in the HTTP headers attribute) Body attribute)
- Element appearance requirements:
| Symbol | Description |
|---|---|
| R | This element must appear in the message (Required) |
| O | This element is optional in the message (Optional) |
| C | This element in the message appears under certain conditions (Conditional) |
- Public parameters:
Public parameters (Header) are parameters used to identify products and interface authentication. These parameters need to be carried in the headers attribute of each request:
| Parameter name | Type | Occurrence requirements | Description |
|---|---|---|---|
| login | Integer | R | Assigned Login Name |
| businessSystem | String | R | Assigned business system name |
| password | String | R | Assigned password, encrypted |
- Response message structure:
All interface responses are in JSON format. Unless otherwise specified, the return value of each request contains the following fields:
| Parameter name | Type | Occurrence requirements | Description |
|---|---|---|---|
| code | String | R | Response code, please see "Appendix A Response Code Description" for code definition |
| msg | String | R | response description |
| data | Object | R | Parameters unique to each interface, see each interface definition for details |
Example
{
"code": "200",
"desc": "Success",
"data": "227552952"
}
4. Connection security verification
This service interface verification uses the Ip+Token mechanism. The specific process is as follows:
- Before accessing, you need to provide the service IP of the access party. Only requests initiated by this IP can be accessed later, and other IPs will be rejected.
- Obtain the values of login, businessSystem, and password in the HTTP headers attribute of the request.
- If the three parameters are not passed, the verification will not pass.
- After the three parameters are successfully verified, the IP and login are combined and encrypted and cached for 30 seconds. If you access again within 30 seconds, you will not be verified again. If you access again after 30 seconds, you will be verified again.
Appendix A Description of Response Codes
| Response code | Description |
|---|---|
| 200 | Call succeeded |
| 500 | Error |