A
API keyAPI key — a term used across the Credit Corp public-API documentation…API ringA ring is an authentication boundary in the Credit Corp API. The public…Access tokenAn access token is the short-lived bearer JWT you send as…At-least-once deliveryAt-least-once delivery guarantees every event arrives one or more…At-least-once deliveryAt-least-once delivery guarantees every event arrives at least one…Authoritative decisioningAuthoritative decisioning means the API returns the real credit…
B
C
CORSCORS — a term used across the Credit Corp developer documentation,…CSRFCSRF — a term used across the Credit Corp developer documentation,…Cache TTLCache TTL — a term used across the Credit Corp public-API…Client-credentials grantThe client-credentials grant is the OAuth 2.0 machine-to-machine…Constant-time comparisonA constant-time comparison checks two values without returning early…Content-TypeContent-Type — a term used across the Credit Corp developer…Correlation / request IDA correlation ID (or request ID) is the identifier the API returns on…Credicorp Flex (product)Credicorp Flex is a revolving business credit facility: draw what you…Credicorp SliceCredicorp Slice — a term used across the Credit Corp public-API…Credicorp Slice (product)Credicorp Slice lets a company pay an accepted supplier or biller now…Cross-origin requestCross-origin request — a term used across the Credit Corp developer…Cross-site scripting (XSS)Cross-site scripting (XSS) — a term used across the Credit Corp…Cursor paginationCursor pagination pages a collection with an opaque token instead of…curlcurl — a term used across the Credit Corp developer documentation,…
D
E
Edge (server-side client)Edge (server-side client) — a term used across the Credit Corp…Enabled flagThe enabled flag is a per-product boolean on the products endpoint…EndpointEndpoint — a term used across the Credit Corp developer documentation,…Error codeAn error code is the stable, machine-readable string in the error…Event envelopeThe event envelope is the consistent outer JSON every webhook shares…Event payloadThe event payload is the data a webhook carries — in Credit Corp’s…Exponential back-offExponential back-off — a term used across the Credit Corp public-API…error.paramerror.param is the envelope field that names the exact input which…
F
Fail-openFail-open means an endpoint returns a soft acknowledgement on an…Feature flagA feature flag is an owner-gated switch that enables or disables a…Feature flagFeature flag — a term used across the Credit Corp public-API…Fixed-window rate limitingFixed-window rate limiting — a term used across the Credit Corp…
H
I
IdempotencyIdempotency — a term used across the Credit Corp public-API…Idempotency keyAn idempotency key is a header you attach to a mutating request so a…Indicative quoteIndicative quote — a term used across the Credit Corp developer…Input validationInput validation — a term used across the Credit Corp public-API…Internal ringInternal ring — a term used across the Credit Corp public-API…
J
JSONJSON — a term used across the Credit Corp developer documentation,…JSON-RPCJSON-RPC — a term used across the Credit Corp public-API documentation…JSON-RPC 2.0JSON-RPC 2.0 is a lightweight RPC protocol carried as JSON — a method…JWKS (JSON Web Key Set)A JWKS is the published set of public keys that sign partner access…JitterJitter — a term used across the Credit Corp public-API documentation…Jitter (backoff)Jitter is a random offset added to retry timing so that many clients,…
L
M
MCP Streamable HTTPMCP Streamable HTTP is the MCP transport Credit Corp uses: a client…MCP server cardThe server card is the MCP discovery document — a GET on the MCP…MCP server cardMCP server card — a term used across the Credit Corp developer…MCP toolAn MCP tool is a named function with a typed input schema that an…Model Context Protocol (MCP)Model Context Protocol (MCP) is an open standard for exposing tools…Model Context Protocol (MCP)Model Context Protocol (MCP) — a term used across the Credit Corp…Money-out gateThe money-out gate is the one governed manual control in the…
O
P
PECRPECR — a term used across the Credit Corp public-API documentation. The…PECR consentPECR consent is the UK cookie-consent (analytics/marketing booleans)…PII (personal data)PII (personal data) — a term used across the Credit Corp public-API…PISP (payment initiation)A PISP is a Payment Initiation Service Provider — the open-banking…PaginationPagination — a term used across the Credit Corp developer…Partner ring (/partner/v1)The partner ring is the token-gated /partner/v1 surface —…PollingPolling — a term used across the Credit Corp developer documentation,…Polling vs webhooksPolling pulls, webhooks push. Polling repeatedly asks the API…ProjectA project is the partner unit that owns an OAuth client and a…Public ringPublic ring — a term used across the Credit Corp public-API…Public ring (/public/v1)The public ring is the unauthenticated /public/v1 surface — published…
R
RangeGuardRangeGuard is the quote engine's input-bounding step. It enforces the…Rate limitA rate limit caps how many requests a client may make in a time…Rate limitingRate limiting — a term used across the Credit Corp public-API…RateLimit-* headersThe RateLimit- headers — RateLimit-Limit, RateLimit-Remaining,…Read-only toolRead-only tool — a term used across the Credit Corp developer…Replay attackA replay attack re-sends a captured, validly-signed request to…Representative quoteA representative quote is an illustrative, non-binding figure for a…Request bodyRequest body — a term used across the Credit Corp developer…Request signing (CC1-HMAC)Request signing is the HMAC (CC1) signature Credit Corp uses to…Retry-After headerRetry-After header — a term used across the Credit Corp public-API…
S
SDKAn SDK is a language library that wraps the Credit Corp REST API —…SandboxThe sandbox is an isolated partner project for building and testing —…SandboxSandbox — a term used across the Credit Corp developer documentation,…ScopeA scope is a named capability on an OAuth token — like…Semantic versioningSemantic versioning — a term used across the Credit Corp public-API…Signature header (Credicorp-Signature)Credicorp-Signature is the header on every webhook carrying a signed…Stale-while-revalidateStale-while-revalidate — a term used across the Credit Corp public-API…
T
W
Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.