# Bunne API

API-first REST payment gateway documentation for developers and AI agents.

Base URL: https://bunne.com.br/api/v1
OpenAPI 3.1: /openapi.json
Human docs: /docs
API reference: /docs/api-reference

Authentication:
- Use Authorization: Bearer sk_test_xxx or sk_live_xxx.
- Never expose sk_live_ in browser code.

Core rules:
- Values are integer cents in amount_cents.
- Responses include request_id.
- Write endpoints support Idempotency-Key.
- Raw card data is accepted only by POST /payment-methods/tokenize.
- Charges use card_token, never PAN/CVV.
- Public PaymentIntent routes are not part of the pre-GA API.

Endpoints:
- GET /health: Healthcheck. Auth: none. Permission: none.
- POST /payment-methods/tokenize: Tokenize payment method. Auth: bearer. Permission: payment_methods:tokenize.
- POST /charges: Create charge. Auth: bearer. Permission: charges:create.
- GET /charges/{id}: Retrieve charge. Auth: bearer. Permission: charges:read.
- POST /charges/{id}/capture: Capture charge. Auth: bearer. Permission: charges:create.
- POST /charges/{id}/refund: Refund charge. Auth: bearer. Permission: refunds:create.

Webhook events:
- charge.created
- charge.authorized
- charge.paid
- charge.refused
- charge.failed
- charge.refunded
- refund.created
- refund.succeeded
- refund.failed
- chargeback.created
- settlement.created
- settlement.paid
- seller.created
- seller.updated