Postman Collection

Download the Onmeta API Postman collection to test every endpoint without writing any code. All requests come pre-configured with auth headers, collection variables, and example request bodies.

Download Postman Collection →

---

Setup (2 minutes)

Step 1 — Import the collection

1. Open Postman
2. Click Import (top-left)
3. Drop the downloaded onmeta-postman-collection.json file into the import dialog
4. Click Import

Step 2 — Set your credentials

Open the collection, go to Variables, and fill in:

Variable	Value
apiKey	Your Client ID from Dashboard → Setup → API's Setup
apiSecret	Your Client Secret from Dashboard → Setup → API's Setup — required for User Login and Get KYC Documents, which sign every request (see below)
baseUrl	https://api.platform.onmeta.in (production) or https://stg.api.onmeta.in (staging)
userEmail	A test user email

Leave accessToken and orderId empty — they are populated automatically by the collection scripts.

Step 3 — Authenticate

1. Open 1. Auth → User Login
2. Click Send
3. The accessToken is automatically saved to the collection variable

All subsequent requests use {{accessToken}} — no manual copying needed.

---

What's included

Folder	Endpoints
1. Auth	User Login, Refresh Token, Fetch User Limit
2. KYC	Fetch KYC Status, Upload KYC, Upload NRI KYC, Get KYC Documents, Send KYC Email
3. Bank & UPI	Link Bank, Bank Status, Fetch Banks, Unlink Bank, Link UPI, UPI Status, Fetch UPIs
4. On-Ramp	Supported Currencies, Chain Limits, Fetch Tokens, Buy Quotation, Create Order, Order Status, Submit UTR, Order History
5. Off-Ramp	Sell Quotation, Create Order, Order Status, Submit Transaction Hash
6. Merchant Wallet	Fetch Balance, Load Wallet, Submit Transaction Hash

---

Auto-save scripts

Several requests include test scripts that automatically save response values:

• User Login → saves accessToken
• Link Bank Account → saves bankRefNumber
• Link UPI ID → saves upiRefNumber
• Create On-Ramp Order → saves orderId
• Create Off-Ramp Order → saves offrampOrderId

This means you can run the full on-ramp flow (Login → Fetch Quotation → Create Order → Submit UTR → Poll Status) in sequence without manually copying IDs between requests.

---

Signed requests (Trusted Issuance)

User Login and Get KYC Documents require your calling IP to be whitelisted, plus a signed x-timestamp / x-signature header pair — both mandatory. These two requests include a pre-request script that computes both headers automatically on every send, using the apiKey and apiSecret collection variables:

const timestamp = Math.floor(Date.now() / 1000).toString();
const signature = CryptoJS.HmacSHA256(apiKey + ':' + timestamp, apiSecret).toString(CryptoJS.enc.Hex);

Make sure apiSecret is set before calling either request — otherwise the signature will be computed against an empty secret and the request will be rejected with 401 Unauthorized.

---

Staging vs Production

Switch environments by updating the baseUrl collection variable:

• Staging: https://stg.api.onmeta.in
• Production: https://api.platform.onmeta.in

warning

Production API access requires your server IP to be whitelisted. When testing from a local machine against production, requests may be rejected. Use staging for local development.