---
title: "Create or update provider credentials for a merchant"
method: POST
path: "/api/v1/merchants/{merchantId}/provider-configurations"
tags: ["Provider Configuration"]
---

# Create or update provider credentials for a merchant

`POST /api/v1/merchants/{merchantId}/provider-configurations`

## Request

- Base URL: `https://core.quidkey.com`
- URL: `https://core.quidkey.com/api/v1/merchants/{merchantId}/provider-configurations`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/banqzinc/apis/quidkey-api/docs/api/v1/merchants/:merchantId/provider-configurations/post.ts> (a function with typed inputs; its response is checked against the schema)

Create or update provider credentials for a merchant

## Path parameters

- `merchantId` string, uuid, required

## Request body

- ProviderConfigurationInput: Input for creating or updating a provider configuration
  - `provider_name` string, required: Payment provider name
  - `credentials` object, required: Provider-specific credential key/value pairs

## Response `200`

Success

- ProviderConfigurationResponse: Response containing a single provider configuration
  - `success` boolean, required: Indicates if the request was successful
  - `data` object, required: A merchant provider configuration (credentials masked)
    - `id` string, uuid, required: The unique identifier of the provider configuration
    - `merchant_id` string, uuid, required: The merchant this configuration belongs to
    - `provider_name` string, required: Payment provider name (e.g. fumopay, tink)
    - `has_credentials` boolean, required: Whether encrypted credentials have been stored
    - `active` boolean, required: Whether this provider configuration is active
    - `created_at` string, date-time, required: When the configuration was created
    - `updated_at` string, date-time, required: When the configuration was last updated

## Other responses

- `201`: Created

## Changes

- **2026-06-17** `b372e7d5563d`: 1 info
  - endpoint added
- **2025-11-02** `919eb7a392aa`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/banqzinc/apis/quidkey-api/changes/api/v1/merchants/:merchantId/provider-configurations/post.md)

---

[API](https://skmtc.dev/banqzinc/apis/quidkey-api.md) - [All operations](https://skmtc.dev/banqzinc/apis/quidkey-api/llms.txt) - [OpenAPI document](https://skmtc.dev/banqzinc/apis/quidkey-api/revisions/f86d2bdbcb08?raw)