The Integration Bridge

78 gold-standard REST APIs across 6 banking domains. Each endpoint includes full request/response structures, headers, error handling, and webhook events — designed to the quality standard of Stripe and Revolut.

Endpoints78

Domains6

Webhooks38

Products10

Payment Rails4

How the Bridge Works

Validate

JSON Schema validation + rate limiting

Authenticate

OAuth 2.0 / mTLS via Tyk Gateway

Translate

Map to legacy protocol (SOAP/MQ/DB)

Aggregate

Fan-out to multiple backends

Respond

Transform to gold-standard + emit webhook

All Endpoints (78)

= Full request/response payload available

POST/v1/customers

Create a new customer record120ms

Request Headers

POST /v1/customers HTTP/1.1
Host: api.monument.tech
Authorization: Bearer mk_live_4eC39HqLyjWDarjtT1zdp7dc
Content-Type: application/json
Idempotency-Key: ik_cust_8kL2mN4pQ9
Monument-Version: 2026-02-01
X-Request-Id: req_cust_create_001

Request Bodyapplication/json

{
  "type": "individual",
  "email": "[email protected]",
  "name": {
    "title": "Mr",
    "first": "James",
    "last": "Harrington"
  },
  "phone": "+447700900123",
  "date_of_birth": "1978-03-15",
  "nationality": "GB",
  "tax_residency": ["GB"],
  "address": {
    "line1": "14 Belgravia Square",
    "line2": "Flat 3",
    "city": "London",
    "county": "Greater London",
    "postal_code": "SW1X 8PS",
    "country": "GB"
  },
  "employment": {
    "status": "employed",
    "employer": "Harrington Capital Partners",
    "role": "Managing Director",
    "annual_income": "250000.00"
  },
  "source_of_funds": "employment_income",
  "politically_exposed": false,
  "metadata": {
    "referral_source": "broker_network",
    "broker_id": "brk_7nM3kP9q"
  }
}

12 Gold-Standard Design Principles

Applied consistently across every endpoint. Contractual, not aspirational.

Resource-Oriented

Every entity is a noun. URLs follow /v1/{resource}/{id}. No verbs in paths.

Date-Based Versioning

Header Monument-Version: 2026-02-01. Pinned per API key. 12-month sunset.

Idempotency

Every POST accepts Idempotency-Key header. Safe retries for 24 hours.

Cursor Pagination

All list endpoints return { data, has_more, next_cursor }. Default: 25, max: 100.

Expandable Objects

?expand[]=customer inlines related resources to reduce round-trips.

Metadata

Every object supports arbitrary metadata: { key: value } (up to 50 keys).

Consistent Errors

{ error: { type, code, message, param, request_id } }. Machine-readable types.

Webhook Events

Every state change emits a typed event. Signed with HMAC-SHA256.

Test/Live Modes

Separate key prefixes: mk_test_ / mk_live_. Sandbox uses test keys only.

Rate Limiting

Response headers: X-RateLimit-Limit, Remaining, Reset. Default: 1,000 req/min.

Request IDs

Every response includes X-Request-Id for traceability and support.

HATEOAS Links

Optional _links object for discoverability of related actions.