organization_type = comercio: you accept payments on your own behalf (e-commerce, app checkout, subscription billing). Your integration centers on pay-in assess before capture.
Modules you need
Integration phases
1
Phase 1 — Keys & sandbox
- Connections → API keys — create Publishable (
clm_pub_*) and Secret (clm_sk_*) with Assess permission. - Run Quickstart against sandbox.
- Exercise scenarios in Simulation — Simulation guide.
2
Phase 2 — Checkout prevention
Recommended pattern: browser SDK for device signals → server assess with
clm_sk_* before PSP capture.- Embed Browser SDK on checkout.
- On payment submit, your backend calls
POST /api/v1/assesswith:amount,currency(decimal major preferred — see assess guide)order_id(stable idempotency key)device.ipfrom the HTTP requestemailorcustomer_idpayment_method(BIN/last4 for card rules)session_idfrom SDK when available
- Branch on
decision: proceed only onapprove(or your policy forreview/challenge). - Your server calls Stripe / Mercado Pago / your PSP — Clausum does not capture for you.
3
Phase 3 — Async notifications
- Connections → Get started → Outbound webhooks — set outbound URL.
- Subscribe to
transaction.createdandtransaction.blocked. - Verify
X-Clausum-Signature— Receiving webhooks. - Put
clausum_session_idin PSP metadata when capturing.
4
Phase 4 — Post-payment (optional)
In Connections → Inbound, start with the generic webhook (Event ingestion +
Optional processor guides (e.g. Stripe) are secondary helpers — not a logo catalog.Post-payment ingest does not replace checkout assess.
clm_wh_*).Optional processor guides (e.g. Stripe) are secondary helpers — not a logo catalog.Post-payment ingest does not replace checkout assess.
5
Phase 5 — Operations & go-live
- Configure Protection — rules, blocklists, thresholds.
- Implement Assess resilience fail-open policy for
503/504. - Train team on Transaction monitor.
- On confirmed fraud → Report fraud.
- Production keys on
https://dashboard.clausum.ai(or your assigned host).
Required assess fields (pay-in)
Discover live requirements:
GET /api/v1/assess → field_requirements_by_segment.merchant.
Go-live checklist
- Server-side assess with
clm_sk_*before every capture - Stable
order_idper checkout attempt - Outbound webhook URL tested in sandbox
- Resilience policy documented for maintenance / timeout
- Team roles assigned — Team & access
- Rate limits understood — Rate limits
Next capability deep-dives
Real-time assess
Payload, decisions, amounts
Browser SDK
Device fingerprinting
Webhooks
Signatures and events
All capabilities
Module catalog by segment