platform · PUBLIC_SANDBOX

Embeddable Components

Existing BondMako engine — externalised, not rebuilt.

platform family · current maturity PUBLIC SANDBOX.

Activate in developer console Developer sign in

What it does

Reuses the working internal engine. Target maturity: PRODUCTION_API. Gaps: full iframe component UI pack.

Public API routes

/api/v1/embed/sessions
/embed/v1/loader.js

Sample request

curl -X POST https://bondmako.com/api/v1/embed/sessions \
  -H "Authorization: Bearer bm_test_..." \
  -H "Content-Type: application/json" \
  -d '{"component":"payment_checkout","resourceType":"invoice","resourceId":"inv_..."}'

Sample response

{
  "data": {
    "token": "eyJ...",
    "loaderUrl": "https://bondmako.com/embed/v1/loader.js",
    "mountHint": { "dataSession": "eyJ...", "dataComponent": "payment_checkout" }
  }
}

Authentication · Security · Sandbox

Bearer API credentials scoped per sandbox/production environment. Scopes and organisation entitlements both must pass. This engine is PUBLIC_SANDBOX — self-serve activate is unlocked in the developer console.

Live pricing reference

Pricing reference: platform embed sessions. Public documentation exposes customer-safe pricing fields only.