---
title: "Ikas Callback"
method: GET
path: "/api/connections/ikas/callback"
tags: ["connections"]
---

# Ikas Callback

`GET /api/connections/ikas/callback`

## Request

- Base URL: `https://api.heymetra.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.heymetra.com/api/connections/ikas/callback`
- Auth: none declared

Where ikas returns the browser: verify, exchange, vault, record.

Public by necessity — the browser arrives from ikas, not from our app — so
everything it trusts is checked: ikas's HMAC over the code, and a state we
issued, once, for this store. Every outcome goes back to the Connections
screen with a word it can show.

## Query parameters

- `code` string
- `state` string
- `signature` string
- `storeName` string

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-20** `488ce9683884`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/heymetra/apis/heymetra-api/changes/api/connections/ikas/callback/get.md)

---

[API](https://skmtc.dev/heymetra/apis/heymetra-api.md) · [All operations](https://skmtc.dev/heymetra/apis/heymetra-api/llms.txt) · [OpenAPI document](https://skmtc.dev/heymetra/apis/heymetra-api/revisions/877b0f87d6d0?raw)