A
API keyAPI key — a term used across the Credicorp public-API documentation…API ringA ring is an authentication boundary in the Credicorp API. The public…Access tokenAn access token is the short-lived bearer JWT you send as…At-least-once deliveryAt-least-once delivery guarantees every event arrives one or more…At-least-once deliveryAt-least-once delivery guarantees every event arrives at least one…Authoritative decisioningAuthoritative decisioning means the API returns the real credit…
B
C
CORSCORS — a term used across the Credicorp developer documentation,…CSRFCSRF — a term used across the Credicorp developer documentation,…Cache TTLCache TTL — a term used across the Credicorp public-API…Client-credentials grantThe client-credentials grant is the OAuth 2.0 machine-to-machine…Constant-time comparisonA constant-time comparison checks two values without returning early…Content-TypeContent-Type — a term used across the Credicorp developer…Correlation / request IDA correlation ID (or request ID) is the identifier the API returns on…Credicorp Flex (product)Credicorp Flex is a revolving business credit facility: draw what you…Credicorp SliceCredicorp Slice — a term used across the Credicorp public-API…Credicorp Slice (product)Credicorp Slice lets a company pay an accepted supplier or biller now…Cross-origin requestCross-origin request — a term used across the Credicorp developer…Cross-site scripting (XSS)Cross-site scripting (XSS) — a term used across the Credicorp…Cursor paginationCursor pagination pages a collection with an opaque token instead of…curlcurl — a term used across the Credicorp developer documentation,…
D
E
Edge (server-side client)Edge (server-side client) — a term used across the Credicorp…Enabled flagThe enabled flag is a per-product boolean on the products endpoint…EndpointEndpoint — a term used across the Credicorp developer documentation,…Error codeAn error code is the stable, machine-readable string in the error…Event envelopeThe event envelope is the consistent outer JSON every webhook shares…Event payloadThe event payload is the data a webhook carries — in Credicorp’s…Exponential back-offExponential back-off — a term used across the Credicorp public-API…error.paramerror.param is the envelope field that names the exact input which…
F
Fail-openFail-open means an endpoint returns a soft acknowledgement on an…Feature flagA feature flag is an owner-gated switch that enables or disables a…Feature flagFeature flag — a term used across the Credicorp public-API…Fixed-window rate limitingFixed-window rate limiting — a term used across the Credicorp…
H
I
IdempotencyIdempotency — a term used across the Credicorp public-API…Idempotency keyAn idempotency key is a header you attach to a mutating request so a…Indicative quoteIndicative quote — a term used across the Credicorp developer…Input validationInput validation — a term used across the Credicorp public-API…Internal ringInternal ring — a term used across the Credicorp public-API…
J
JSONJSON — a term used across the Credicorp developer documentation,…JSON-RPCJSON-RPC — a term used across the Credicorp public-API documentation…JSON-RPC 2.0JSON-RPC 2.0 is a lightweight RPC protocol carried as JSON — a method…JWKS (JSON Web Key Set)A JWKS is the published set of public keys that sign partner access…JitterJitter — a term used across the Credicorp public-API documentation…Jitter (backoff)Jitter is a random offset added to retry timing so that many clients,…
L
M
MCP Streamable HTTPMCP Streamable HTTP is the MCP transport Credicorp uses: a client…MCP server cardThe server card is the MCP discovery document — a GET on the MCP…MCP server cardMCP server card — a term used across the Credicorp developer…MCP toolAn MCP tool is a named function with a typed input schema that an…Model Context Protocol (MCP)Model Context Protocol (MCP) is an open standard for exposing tools…Model Context Protocol (MCP)Model Context Protocol (MCP) — a term used across the Credicorp…Money-out gateThe money-out gate is the one governed manual control in the…
O
P
PECRPECR — a term used across the Credicorp public-API documentation. The…PECR consentPECR consent is the UK cookie-consent (analytics/marketing booleans)…PII (personal data)PII (personal data) — a term used across the Credicorp public-API…PISP (payment initiation)A PISP is a Payment Initiation Service Provider — the open-banking…PaginationPagination — a term used across the Credicorp developer…Partner ring (/partner/v1)The partner ring is the token-gated /partner/v1 surface —…PollingPolling — a term used across the Credicorp developer documentation,…Polling vs webhooksPolling pulls, webhooks push. Polling repeatedly asks the API…ProjectA project is the partner unit that owns an OAuth client and a…Public ringPublic ring — a term used across the Credicorp public-API…Public ring (/public/v1)The public ring is the unauthenticated /public/v1 surface — published…
R
RangeGuardRangeGuard is the quote engine's input-bounding step. It enforces the…Rate limitA rate limit caps how many requests a client may make in a time…Rate limitingRate limiting — a term used across the Credicorp public-API…RateLimit-* headersThe RateLimit- headers — RateLimit-Limit, RateLimit-Remaining,…Read-only toolRead-only tool — a term used across the Credicorp developer…Replay attackA replay attack re-sends a captured, validly-signed request to…Representative quoteA representative quote is an illustrative, non-binding figure for a…Request bodyRequest body — a term used across the Credicorp developer…Request signing (CC1-HMAC)Request signing is the HMAC (CC1) signature Credicorp uses to…Retry-After headerRetry-After header — a term used across the Credicorp public-API…
S
SDKAn SDK is a language library that wraps the Credicorp REST API —…SandboxThe sandbox is an isolated partner project for building and testing —…SandboxSandbox — a term used across the Credicorp developer documentation,…ScopeA scope is a named capability on an OAuth token — like…Semantic versioningSemantic versioning — a term used across the Credicorp public-API…Signature header (Credicorp-Signature)Credicorp-Signature is the header on every webhook carrying a signed…Stale-while-revalidateStale-while-revalidate — a term used across the Credicorp public-API…
T
W
Funding for UK limited companies
Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.