Build on your lending data

Production

https://app.lenduh.com/api/v1

Format

JSON · UTF-8 · HTTPS only

Authentication

Authorization: Bearer lk_…

• GET/v1/borrowers
• GET/v1/borrowers/:id
• GET/v1/loans
• GET/v1/loans/:id
• GET/v1/loans/:id/balance
• GET/v1/loans/:id/schedule
• GET/v1/schedules
• GET/v1/payments
• GET/v1/payments/:id
• GET/v1/me
• GET/v1/loan-products
• GET/v1/branches
• POST/v1/payments
• POST/v1/payments/:id/reverse
• POST/v1/borrowers
• POST/v1/loans
• + 3 morewriting endpoints
• EVENTloan.released
• EVENTloan.overdue
• EVENTloan.paid_off
• EVENTpayment.recorded
• EVENTpayment.reversed
• EVENT+ 5 more loan events

curl "https://app.lenduh.com/api/v1/loans?pageSize=1" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans?pageSize=1',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const loans = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loans",
    params={"pageSize": 1},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
loans = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loans', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['pageSize' => 1],
]);
$loans = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04",
      "loanNo": "LN-000142",
      "borrowerId": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
      "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
      "principal": "25000.00",
      "totalInterest": "3000.00",
      "totalRepayable": "28000.00",
      "repaymentFrequency": "semi_monthly",
      "installmentCount": 24,
      "installmentAmount": "1166.67",
      "status": "active",
      "restructured": false,
      "releaseDate": "2026-09-15",
      "maturityDate": "2027-09-15",
      "createdAt": "2026-09-14T02:11:47.512Z",
      "updatedAt": "2026-09-15T01:04:12.118Z"
    }
  ],
  "total": 142,
  "page": 1,
  "pageSize": 1,
  "pageCount": 142
}

curl "https://app.lenduh.com/api/v1/borrowers?pageSize=1" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/borrowers?pageSize=1',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const borrowers = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/borrowers",
    params={"pageSize": 1},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
borrowers = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('borrowers', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['pageSize' => 1],
]);
$borrowers = json_decode((string) $res->getBody(), true);

{
  "statusCode": 401,
  "message": "A valid API key is required (Authorization: Bearer lk_…).",
  "error": "Unauthorized"
}

{
  "statusCode": 403,
  "message": "This API key lacks the required 'read' scope.",
  "error": "Forbidden"
}

# Server-side only. Never commit this file.
LENDUH_API_KEY=lk_7Qm2xVfK9aLp3RtY8wBn4cHs6dJe1uZo5iGk0MvXqTb
LENDUH_WEBHOOK_SECRET=whsec_…

{
  "statusCode": 403,
  "message": "This API key lacks the required 'payments:write' scope.",
  "error": "Forbidden"
}

{
  "statusCode": 403,
  "message": "API write access for \"Push payments collected outside the system\" is not currently granted to this organization. Request it in Settings → Developer API.",
  "error": "Forbidden"
}

• POST/v1/payments/preview
• POST/v1/payments
• POST/v1/payments/:id/reverse
• POST/v1/borrowers
• PATCH/v1/borrowers/:id
• POST/v1/loans/preview
• POST/v1/loans

# -i prints the response headers, including your rate-limit allowance
curl -i "https://app.lenduh.com/api/v1/borrowers?pageSize=1" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

HTTP/2 200
content-type: application/json; charset=utf-8
x-ratelimit-limit: 200
x-ratelimit-remaining: 199
x-ratelimit-reset: 60

{"items":[{"id":"5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37","borrowerCode":"BRW-00318","name":"Juan Dela Cruz","status":"active","branchId":"7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b","createdAt":"2026-08-03T01:15:22.407Z","updatedAt":"2026-09-12T06:40:18.221Z"}],"total":318,"page":1,"pageSize":1,"pageCount":318}

{
  "statusCode": 400,
  "message": "status must be one of the following values: draft, released, active, overdue, paid, cancelled, written_off, foreclosed",
  "error": "Bad Request"
}

{
  "statusCode": 404,
  "message": "Loan not found.",
  "error": "Not Found"
}

{
  "statusCode": 429,
  "message": "Too many requests. Please wait a moment and try again."
}

{
  "statusCode": 500,
  "message": "Internal server error"
}

// Walk every page of a list, 100 records at a time.
async function* listAll(path, params = {}) {
  const headers = { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` };
  for (let page = 1; ; page += 1) {
    const qs = new URLSearchParams({ ...params, page: String(page), pageSize: '100' });
    const res = await fetch(`https://app.lenduh.com/api/v1${path}?${qs}`, { headers });
    if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
    const body = await res.json();
    yield* body.items;
    if (page >= body.pageCount) return;
  }
}

const seen = new Set();
for await (const loan of listAll('/loans', { status: 'active' })) {
  if (seen.has(loan.id)) continue; // a new loan can push an item onto the next page
  seen.add(loan.id);
  // ...upsert the loan into your system
}

import os

import requests


def list_all(path, **params):
    headers = {"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"}
    page = 1
    while True:
        res = requests.get(
            f"https://app.lenduh.com/api/v1{path}",
            params={**params, "page": page, "pageSize": 100},
            headers=headers,
            timeout=30,
        )
        res.raise_for_status()
        body = res.json()
        yield from body["items"]
        if page >= body["pageCount"]:
            return
        page += 1


seen = set()
for loan in list_all("/loans", status="active"):
    if loan["id"] in seen:
        continue  # a new loan can push an item onto the next page
    seen.add(loan["id"])
    # ...upsert the loan into your system

<?php
function listAll(GuzzleHttp\Client $client, string $path, array $params = []): Generator
{
    for ($page = 1; ; $page++) {
        $res = $client->get($path, [
            'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
            'query'   => $params + ['page' => $page, 'pageSize' => 100],
        ]);
        $body = json_decode((string) $res->getBody(), true);
        yield from $body['items'];
        if ($page >= $body['pageCount']) {
            return;
        }
    }
}

$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);
$seen = [];
foreach (listAll($client, 'loans', ['status' => 'active']) as $loan) {
    if (isset($seen[$loan['id']])) {
        continue; // a new loan can push an item onto the next page
    }
    $seen[$loan['id']] = true;
    // ...upsert the loan into your system
}

{
  "items": [
    {
      "id": "0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04",
      "loanNo": "LN-000142",
      "borrowerId": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
      "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
      "principal": "25000.00",
      "totalInterest": "3000.00",
      "totalRepayable": "28000.00",
      "repaymentFrequency": "semi_monthly",
      "installmentCount": 24,
      "installmentAmount": "1166.67",
      "status": "active",
      "restructured": false,
      "releaseDate": "2026-09-15",
      "maturityDate": "2027-09-15",
      "createdAt": "2026-09-14T02:11:47.512Z",
      "updatedAt": "2026-09-15T01:04:12.118Z"
    },
    {
      "id": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "loanNo": "LN-000141",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "principal": "15000.00",
      "totalInterest": "1800.00",
      "totalRepayable": "16800.00",
      "repaymentFrequency": "monthly",
      "installmentCount": 6,
      "installmentAmount": "2800.00",
      "status": "overdue",
      "restructured": false,
      "releaseDate": "2026-07-01",
      "maturityDate": "2027-01-01",
      "createdAt": "2026-06-29T08:30:15.006Z",
      "updatedAt": "2026-09-02T00:30:04.771Z"
    }
  ],
  "total": 142,
  "page": 1,
  "pageSize": 2,
  "pageCount": 71
}

curl "https://app.lenduh.com/api/v1/payments?updatedSince=2026-09-17T00:00:00.000Z&pageSize=100" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/payments?updatedSince=2026-09-17T00:00:00.000Z&pageSize=100',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const changes = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/payments",
    params={"updatedSince": "2026-09-17T00:00:00.000Z", "pageSize": 100},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
changes = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('payments', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['updatedSince' => '2026-09-17T00:00:00.000Z', 'pageSize' => 100],
]);
$changes = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
      "paymentNo": "PAY-01877",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "amount": "1250.00",
      "breakdown": {
        "principal": "1071.43",
        "interest": "128.57",
        "penalty": "50.00"
      },
      "channel": "cash",
      "externalReference": null,
      "paymentDate": "2026-09-17T01:20:00.000Z",
      "status": "posted",
      "reversedAt": null,
      "createdAt": "2026-09-17T01:20:03.884Z",
      "updatedAt": "2026-09-17T01:20:03.884Z"
    }
  ],
  "total": 1,
  "page": 1,
  "pageSize": 100,
  "pageCount": 1
}

{
  "statusCode": 400,
  "message": "updatedSince must be an ISO 8601 date-time with a time zone, such as 2026-09-18T00:00:00Z",
  "error": "Bad Request"
}

HTTP/2 200
content-type: application/json; charset=utf-8
x-ratelimit-limit: 200
x-ratelimit-remaining: 187
x-ratelimit-reset: 41

HTTP/2 429
content-type: application/json; charset=utf-8
retry-after: 41

{"statusCode":429,"message":"Too many requests. Please wait a moment and try again."}

// Amounts always have exactly two decimals, so drop the point to get centavos.
const toCentavos = (amount) => BigInt(amount.replace('.', '')); // "1250.00" -> 125000n
const collected = payments
  .filter((p) => p.status === 'posted')
  .reduce((sum, p) => sum + toCentavos(p.amount), 0n);

// Group by the Philippine calendar day, not the UTC one.
const manilaDay = (iso) =>
  new Intl.DateTimeFormat('en-CA', { timeZone: 'Asia/Manila' }).format(new Date(iso));
manilaDay('2026-09-16T17:30:00.000Z'); // 2026-09-17

from datetime import datetime
from decimal import Decimal
from zoneinfo import ZoneInfo

# Decimal keeps pesos exact. Never use float() on money.
collected = sum(Decimal(p["amount"]) for p in payments if p["status"] == "posted")


# Group by the Philippine calendar day, not the UTC one.
def manila_day(iso):
    moment = datetime.fromisoformat(iso.replace("Z", "+00:00"))
    return moment.astimezone(ZoneInfo("Asia/Manila")).date()


manila_day("2026-09-16T17:30:00.000Z")  # 2026-09-17

<?php
// bcmath keeps pesos exact. Never cast money to float.
$posted = array_filter($payments, fn ($p) => $p['status'] === 'posted');
$collected = array_reduce($posted, fn ($sum, $p) => bcadd($sum, $p['amount'], 2), '0.00');

// Group by the Philippine calendar day, not the UTC one.
$day = (new DateTimeImmutable('2026-09-16T17:30:00.000Z'))
    ->setTimezone(new DateTimeZone('Asia/Manila'))
    ->format('Y-m-d'); // 2026-09-17

POST /webhooks/lenduh HTTP/1.1
Host: erp.example.coop
Content-Type: application/json
User-Agent: Lenduh-Webhooks/1
X-Lenduh-Event: payment.recorded
X-Lenduh-Delivery: e2b8c6d4-1f07-4a39-95ce-6b3d0a8f7e21
X-Lenduh-Signature: t=1789608300,v1=b73f72c64f89d8bfb56ce38d26aef8b206636f498df5c1293cbadf0024234bac

{"id":"e2b8c6d4-1f07-4a39-95ce-6b3d0a8f7e21","type":"payment.recorded","createdAt":"2026-09-17T01:20:04.102Z","organizationId":"2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615","data":{"id":"c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22","paymentNo":"PAY-01877","loanId":"3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86","borrowerId":"a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64","branchId":"b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f","amount":"1250.00","breakdown":{"principal":"1071.43","interest":"128.57","penalty":"50.00"},"channel":"cash","externalReference":null,"paymentDate":"2026-09-17T01:20:00.000Z","status":"posted","reversedAt":null,"createdAt":"2026-09-17T01:20:03.884Z","updatedAt":"2026-09-17T01:20:03.884Z"}}

{
  "id": "7f1c2a9e-3b64-4d8e-a1f0-5c9b2e7d4a18",
  "type": "loan.released",
  "createdAt": "2026-09-15T01:04:12.331Z",
  "organizationId": "2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615",
  "data": {
    "id": "0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04",
    "loanNo": "LN-000142",
    "borrowerId": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
    "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
    "principal": "25000.00",
    "totalInterest": "3000.00",
    "totalRepayable": "28000.00",
    "repaymentFrequency": "semi_monthly",
    "installmentCount": 24,
    "installmentAmount": "1166.67",
    "status": "active",
    "restructured": false,
    "releaseDate": "2026-09-15",
    "maturityDate": "2027-09-15",
    "createdAt": "2026-09-14T02:11:47.512Z",
    "updatedAt": "2026-09-15T01:04:12.118Z"
  }
}

{
  "id": "3d6f8a1c-5b2e-4d7f-9a0c-8e1b4f6d2a95",
  "type": "loan.overdue",
  "createdAt": "2026-09-02T00:30:04.812Z",
  "organizationId": "2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615",
  "data": {
    "id": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
    "loanNo": "LN-000141",
    "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
    "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
    "principal": "15000.00",
    "totalInterest": "1800.00",
    "totalRepayable": "16800.00",
    "repaymentFrequency": "monthly",
    "installmentCount": 6,
    "installmentAmount": "2800.00",
    "status": "overdue",
    "restructured": false,
    "releaseDate": "2026-07-01",
    "maturityDate": "2027-01-01",
    "createdAt": "2026-06-29T08:30:15.006Z",
    "updatedAt": "2026-09-02T00:30:04.771Z"
  }
}

{
  "id": "e2b8c6d4-1f07-4a39-95ce-6b3d0a8f7e21",
  "type": "payment.recorded",
  "createdAt": "2026-09-17T01:20:04.102Z",
  "organizationId": "2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615",
  "data": {
    "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
    "paymentNo": "PAY-01877",
    "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
    "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
    "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
    "amount": "1250.00",
    "breakdown": {
      "principal": "1071.43",
      "interest": "128.57",
      "penalty": "50.00"
    },
    "channel": "cash",
    "externalReference": null,
    "paymentDate": "2026-09-17T01:20:00.000Z",
    "status": "posted",
    "reversedAt": null,
    "createdAt": "2026-09-17T01:20:03.884Z",
    "updatedAt": "2026-09-17T01:20:03.884Z"
  }
}

{
  "id": "5b3e9d17-2c84-4f6a-8e05-d1a7c9b24f63",
  "type": "payment.reversed",
  "createdAt": "2026-09-18T02:14:09.412Z",
  "organizationId": "2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615",
  "data": {
    "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
    "paymentNo": "PAY-01877",
    "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
    "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
    "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
    "amount": "1250.00",
    "breakdown": {
      "principal": "1071.43",
      "interest": "128.57",
      "penalty": "50.00"
    },
    "channel": "cash",
    "externalReference": null,
    "paymentDate": "2026-09-17T01:20:00.000Z",
    "status": "reversed",
    "reversedAt": "2026-09-18T02:14:09.330Z",
    "createdAt": "2026-09-17T01:20:03.884Z",
    "updatedAt": "2026-09-18T02:14:09.330Z"
  }
}

{
  "id": "9a0d4f62-8e1b-4c57-a3f9-0b6e2d7c1f48",
  "type": "endpoint.test",
  "createdAt": "2026-09-18T02:00:00.000Z",
  "organizationId": "2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615",
  "data": {
    "message": "This is a test event from Lenduh."
  }
}

import crypto from 'node:crypto';
import express from 'express';

const SECRET = process.env.LENDUH_WEBHOOK_SECRET; // the whole value, including "whsec_"
const TOLERANCE_SECONDS = 300;

export function verifyLenduhWebhook(rawBody, header) {
  const parts = Object.fromEntries((header ?? '').split(',').map((pair) => pair.split('=')));
  const expected = crypto.createHmac('sha256', SECRET).update(`${parts.t}.${rawBody}`).digest('hex');
  const given = Buffer.from(parts.v1 ?? '', 'utf8');
  const valid =
    given.length === expected.length && crypto.timingSafeEqual(given, Buffer.from(expected, 'utf8'));
  const fresh = Math.abs(Date.now() / 1000 - Number(parts.t)) <= TOLERANCE_SECONDS;
  if (!valid || !fresh) throw new Error('Invalid Lenduh webhook signature');
  return JSON.parse(rawBody);
}

const app = express();

// Keep this route's body raw: parsing and re-serializing JSON changes the bytes.
app.post('/webhooks/lenduh', express.raw({ type: 'application/json' }), (req, res) => {
  let event;
  try {
    event = verifyLenduhWebhook(req.body.toString('utf8'), req.get('X-Lenduh-Signature'));
  } catch {
    return res.sendStatus(400);
  }
  // ...handle event.type, and skip an event.id you've already processed
  res.sendStatus(200);
});

import hashlib
import hmac
import json
import os
import time

from flask import Flask, abort, request

SECRET = os.environ["LENDUH_WEBHOOK_SECRET"].encode()  # includes "whsec_"
TOLERANCE_SECONDS = 300

app = Flask(__name__)


def verify_lenduh_webhook(raw_body: bytes, header: str) -> dict:
    parts = dict(pair.split("=", 1) for pair in header.split(",") if "=" in pair)
    signed = parts.get("t", "").encode() + b"." + raw_body
    expected = hmac.new(SECRET, signed, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(expected, parts.get("v1", "")):
        raise ValueError("bad signature")
    if not parts.get("t", "").isdigit() or abs(time.time() - int(parts["t"])) > TOLERANCE_SECONDS:
        raise ValueError("stale request")
    return json.loads(raw_body)


@app.post("/webhooks/lenduh")
def lenduh_webhook():
    try:
        # get_data() is the raw body, exactly as received
        event = verify_lenduh_webhook(request.get_data(), request.headers.get("X-Lenduh-Signature", ""))
    except ValueError:
        abort(400)
    # ...handle event["type"], and skip an event["id"] you've already processed
    return "", 200

<?php
function verifyLenduhWebhook(string $rawBody, string $header, string $secret): array
{
    // $secret is the whole value, including "whsec_"
    parse_str(str_replace(',', '&', $header), $parts); // t=…&v1=…
    $expected = hash_hmac('sha256', ($parts['t'] ?? '') . '.' . $rawBody, $secret);
    if (!hash_equals($expected, $parts['v1'] ?? '')) {
        throw new RuntimeException('Invalid Lenduh webhook signature');
    }
    if (abs(time() - (int) ($parts['t'] ?? 0)) > 300) {
        throw new RuntimeException('Stale Lenduh webhook');
    }
    return json_decode($rawBody, true);
}

try {
    $event = verifyLenduhWebhook(
        file_get_contents('php://input'),           // the raw body, exactly as received
        $_SERVER['HTTP_X_LENDUH_SIGNATURE'] ?? '',
        getenv('LENDUH_WEBHOOK_SECRET'),
    );
} catch (RuntimeException $e) {
    http_response_code(400);
    exit;
}
// ...handle $event['type'], and skip an $event['id'] you've already processed
http_response_code(200);

Secret     whsec_Zt6pK1vQx9sLm3bN8cRw2yHf5dGj0aEu
t          1789608300
Body       {"id":"e2b8c6d4-1f07-4a39-95ce-6b3d0a8f7e21","type":"payment.recorded","createdAt":"2026-09-17T01:20:04.102Z","organizationId":"2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615","data":{"id":"c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22","paymentNo":"PAY-01877","loanId":"3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86","borrowerId":"a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64","branchId":"b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f","amount":"1250.00","breakdown":{"principal":"1071.43","interest":"128.57","penalty":"50.00"},"channel":"cash","externalReference":null,"paymentDate":"2026-09-17T01:20:00.000Z","status":"posted","reversedAt":null,"createdAt":"2026-09-17T01:20:03.884Z","updatedAt":"2026-09-17T01:20:03.884Z"}}
Signed     1789608300.{"id":"e2b8c6d4-1f07-4a39-95ce-6b3d0a8f7e21","type":"payment.recorded","createdAt":"2026-09-17T01:20:04.102Z","organizationId":"2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615","data":{"id":"c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22","paymentNo":"PAY-01877","loanId":"3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86","borrowerId":"a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64","branchId":"b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f","amount":"1250.00","breakdown":{"principal":"1071.43","interest":"128.57","penalty":"50.00"},"channel":"cash","externalReference":null,"paymentDate":"2026-09-17T01:20:00.000Z","status":"posted","reversedAt":null,"createdAt":"2026-09-17T01:20:03.884Z","updatedAt":"2026-09-17T01:20:03.884Z"}}
v1         b73f72c64f89d8bfb56ce38d26aef8b206636f498df5c1293cbadf0024234bac
Header     X-Lenduh-Signature: t=1789608300,v1=b73f72c64f89d8bfb56ce38d26aef8b206636f498df5c1293cbadf0024234bac

// Answer within 5 seconds, then do the real work from your own queue.
app.post('/webhooks/lenduh', express.raw({ type: 'application/json' }), async (req, res) => {
  let event;
  try {
    event = verifyLenduhWebhook(req.body.toString('utf8'), req.get('X-Lenduh-Signature'));
  } catch {
    return res.sendStatus(400);
  }
  if (await processed.has(event.id)) return res.sendStatus(200); // a duplicate delivery
  await queue.add(event.type, event); // e.g. BullMQ, SQS, or a jobs table
  res.sendStatus(200);
});

# Answer within 5 seconds, then do the real work from your own queue.
@app.post("/webhooks/lenduh")
def lenduh_webhook():
    try:
        event = verify_lenduh_webhook(request.get_data(), request.headers.get("X-Lenduh-Signature", ""))
    except ValueError:
        abort(400)
    if processed.exists(event["id"]):  # a duplicate delivery
        return "", 200
    queue.enqueue(handle_lenduh_event, event)  # e.g. Celery, RQ, or a jobs table
    return "", 200

<?php
// Laravel: answer within 5 seconds, then do the real work in a queued job.
Route::post('/webhooks/lenduh', function (Illuminate\Http\Request $request) {
    try {
        $event = verifyLenduhWebhook(
            $request->getContent(),
            $request->header('X-Lenduh-Signature', ''),
            config('services.lenduh.webhook_secret'),
        );
    } catch (RuntimeException $e) {
        abort(400);
    }
    if (Cache::add('lenduh-event:' . $event['id'], true, now()->addDays(3))) {
        ProcessLenduhEvent::dispatch($event); // skipped when the id was already seen
    }
    return response()->noContent(200);
});

{
  "id": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
  "borrowerCode": "BRW-00318",
  "name": "Juan Dela Cruz",
  "status": "active",
  "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
  "createdAt": "2026-08-03T01:15:22.407Z",
  "updatedAt": "2026-09-12T06:40:18.221Z"
}

curl "https://app.lenduh.com/api/v1/borrowers?pageSize=2" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/borrowers?pageSize=2',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const borrowers = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/borrowers",
    params={"pageSize": 2},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
borrowers = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('borrowers', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['pageSize' => 2],
]);
$borrowers = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
      "borrowerCode": "BRW-00318",
      "name": "Juan Dela Cruz",
      "status": "active",
      "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
      "createdAt": "2026-08-03T01:15:22.407Z",
      "updatedAt": "2026-09-12T06:40:18.221Z"
    },
    {
      "id": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "borrowerCode": "BRW-00317",
      "name": "Ma. Clara Reyes",
      "status": "active",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "createdAt": "2026-08-02T06:48:09.113Z",
      "updatedAt": "2026-08-02T06:48:09.113Z"
    }
  ],
  "total": 318,
  "page": 1,
  "pageSize": 2,
  "pageCount": 159
}

curl "https://app.lenduh.com/api/v1/borrowers/5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/borrowers/5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const borrower = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/borrowers/5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
borrower = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('borrowers/5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$borrower = json_decode((string) $res->getBody(), true);

{
  "id": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
  "borrowerCode": "BRW-00318",
  "name": "Juan Dela Cruz",
  "status": "active",
  "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
  "createdAt": "2026-08-03T01:15:22.407Z",
  "updatedAt": "2026-09-12T06:40:18.221Z"
}

{
  "statusCode": 404,
  "message": "Borrower not found.",
  "error": "Not Found"
}

{
  "statusCode": 400,
  "message": "Validation failed (uuid is expected)",
  "error": "Bad Request"
}

curl -X POST "https://app.lenduh.com/api/v1/borrowers" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"borrowerCode":"BRW-00319","firstName":"Rosalinda","lastName":"Mabini","mobileNumber":"09171234567","branchId":"b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f"}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/borrowers',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "borrowerCode": "BRW-00319",
      "firstName": "Rosalinda",
      "lastName": "Mabini",
      "mobileNumber": "09171234567",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f"
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const borrower = await res.json();

import os

import requests

res = requests.post(
    "https://app.lenduh.com/api/v1/borrowers",
    json={
        "borrowerCode": "BRW-00319",
        "firstName": "Rosalinda",
        "lastName": "Mabini",
        "mobileNumber": "09171234567",
        "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
borrower = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->post('borrowers', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['borrowerCode' => 'BRW-00319', 'firstName' => 'Rosalinda', 'lastName' => 'Mabini', 'mobileNumber' => '09171234567', 'branchId' => 'b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f'],
]);
$borrower = json_decode((string) $res->getBody(), true);

{
  "id": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
  "borrowerCode": "BRW-00319",
  "name": "Rosalinda Mabini",
  "status": "active",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "createdAt": "2026-09-18T07:41:02.663Z",
  "updatedAt": "2026-09-18T07:41:02.663Z"
}

{
  "statusCode": 409,
  "message": "A client with that code already exists.",
  "error": "Conflict"
}

{
  "statusCode": 403,
  "message": "API write access for \"Push payments collected outside the system\" is not currently granted to this organization. Request it in Settings → Developer API.",
  "error": "Forbidden"
}

curl -X PATCH "https://app.lenduh.com/api/v1/borrowers/6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"mobileNumber":"09179876543"}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/borrowers/6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74',
  {
    method: 'PATCH',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "mobileNumber": "09179876543"
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const borrower = await res.json();

import os

import requests

res = requests.patch(
    "https://app.lenduh.com/api/v1/borrowers/6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
    json={
        "mobileNumber": "09179876543",
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
borrower = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->patch('borrowers/6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['mobileNumber' => '09179876543'],
]);
$borrower = json_decode((string) $res->getBody(), true);

{
  "id": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
  "borrowerCode": "BRW-00319",
  "name": "Rosalinda Mabini",
  "status": "active",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "createdAt": "2026-09-18T07:41:02.663Z",
  "updatedAt": "2026-09-18T08:02:55.401Z"
}

{
  "statusCode": 404,
  "message": "No client with that id.",
  "error": "Not Found"
}

{
  "id": "0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04",
  "loanNo": "LN-000142",
  "borrowerId": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
  "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
  "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
  "principal": "25000.00",
  "totalInterest": "3000.00",
  "totalRepayable": "28000.00",
  "repaymentFrequency": "semi_monthly",
  "installmentCount": 24,
  "installmentAmount": "1166.67",
  "status": "active",
  "restructured": false,
  "releaseDate": "2026-09-15",
  "maturityDate": "2027-09-15",
  "createdAt": "2026-09-14T02:11:47.512Z",
  "updatedAt": "2026-09-15T01:04:12.118Z"
}

curl "https://app.lenduh.com/api/v1/loans?status=overdue&pageSize=2" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans?status=overdue&pageSize=2',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const loans = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loans",
    params={"status": "overdue", "pageSize": 2},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
loans = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loans', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['status' => 'overdue', 'pageSize' => 2],
]);
$loans = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "loanNo": "LN-000141",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "principal": "15000.00",
      "totalInterest": "1800.00",
      "totalRepayable": "16800.00",
      "repaymentFrequency": "monthly",
      "installmentCount": 6,
      "installmentAmount": "2800.00",
      "status": "overdue",
      "restructured": false,
      "releaseDate": "2026-07-01",
      "maturityDate": "2027-01-01",
      "createdAt": "2026-06-29T08:30:15.006Z",
      "updatedAt": "2026-09-02T00:30:04.771Z"
    },
    {
      "id": "d8e4b2c6-0a9f-4e13-8b7d-5c2f1a6e9b30",
      "loanNo": "LN-000118",
      "borrowerId": "f0b3d7a2-6e58-4c1d-9a04-7b2e8d5c3f19",
      "productId": "4c5d6e7f-8a9b-4c0d-8e1f-2a3b4c5d6e7f",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "principal": "8000.00",
      "totalInterest": "960.00",
      "totalRepayable": "8960.00",
      "repaymentFrequency": "weekly",
      "installmentCount": 16,
      "installmentAmount": "560.00",
      "status": "overdue",
      "restructured": true,
      "releaseDate": "2026-05-20",
      "maturityDate": "2026-10-28",
      "createdAt": "2026-05-19T03:42:51.662Z",
      "updatedAt": "2026-09-10T00:30:02.905Z"
    }
  ],
  "total": 11,
  "page": 1,
  "pageSize": 2,
  "pageCount": 6
}

{
  "statusCode": 400,
  "message": "status must be one of the following values: draft, released, active, overdue, paid, cancelled, written_off, foreclosed",
  "error": "Bad Request"
}

curl "https://app.lenduh.com/api/v1/loans/0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans/0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const loan = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loans/0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
loan = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loans/0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$loan = json_decode((string) $res->getBody(), true);

{
  "id": "0b6f3c2e-8d41-4c1a-9f2e-3a7d5e1b9c04",
  "loanNo": "LN-000142",
  "borrowerId": "5d2a9e61-7c3b-4f0a-8e15-b24c6f9d0a37",
  "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
  "branchId": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
  "principal": "25000.00",
  "totalInterest": "3000.00",
  "totalRepayable": "28000.00",
  "repaymentFrequency": "semi_monthly",
  "installmentCount": 24,
  "installmentAmount": "1166.67",
  "status": "active",
  "restructured": false,
  "releaseDate": "2026-09-15",
  "maturityDate": "2027-09-15",
  "createdAt": "2026-09-14T02:11:47.512Z",
  "updatedAt": "2026-09-15T01:04:12.118Z"
}

{
  "statusCode": 404,
  "message": "Loan not found.",
  "error": "Not Found"
}

curl "https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/balance" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/balance',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const balance = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/balance",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
balance = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/balance', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$balance = json_decode((string) $res->getBody(), true);

{
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "asOf": "2026-09-18",
  "outstanding": "12800.00",
  "overdueAmount": "1600.00",
  "overdueInstallments": 1,
  "penaltyOutstanding": "0.00",
  "nextDueDate": "2026-09-01",
  "nextDueAmount": "1600.00",
  "totalPaid": "4000.00",
  "penaltyPaid": "50.00",
  "paidInstallments": 1,
  "totalInstallments": 6
}

{
  "statusCode": 404,
  "message": "Loan not found.",
  "error": "Not Found"
}

curl -X POST "https://app.lenduh.com/api/v1/loans/preview" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"borrowerId":"6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74","loanProductId":"9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d","principal":20000,"interestRate":0.01,"repaymentFrequency":"semi_monthly","installmentCount":24,"releaseDate":"2026-09-30"}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans/preview',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "borrowerId": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
      "loanProductId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "principal": 20000,
      "interestRate": 0.01,
      "repaymentFrequency": "semi_monthly",
      "installmentCount": 24,
      "releaseDate": "2026-09-30"
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const quote = await res.json();

import os

import requests

res = requests.post(
    "https://app.lenduh.com/api/v1/loans/preview",
    json={
        "borrowerId": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
        "loanProductId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "principal": 20000,
        "interestRate": 0.01,
        "repaymentFrequency": "semi_monthly",
        "installmentCount": 24,
        "releaseDate": "2026-09-30",
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
quote = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->post('loans/preview', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['borrowerId' => '6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74', 'loanProductId' => '9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d', 'principal' => 20000, 'interestRate' => 0.01, 'repaymentFrequency' => 'semi_monthly', 'installmentCount' => 24, 'releaseDate' => '2026-09-30'],
]);
$quote = json_decode((string) $res->getBody(), true);

{
  "principal": "20000.00",
  "interestRate": "0.0100",
  "repaymentFrequency": "semi_monthly",
  "installmentCount": 24,
  "totalInterest": "2400.00",
  "totalRepayable": "22400.00",
  "installmentAmount": "933.33",
  "lastInstallment": "933.41",
  "maturityDate": "2027-09-30",
  "installments": [
    {
      "number": 1,
      "dueDate": "2026-10-15",
      "principal": "833.33",
      "interest": "100.00",
      "amountDue": "933.33"
    },
    {
      "number": 2,
      "dueDate": "2026-10-31",
      "principal": "833.33",
      "interest": "100.00",
      "amountDue": "933.33"
    }
  ]
}

curl -X POST "https://app.lenduh.com/api/v1/loans" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"loanNo":"APP-2026-0917","borrowerId":"6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74","loanProductId":"9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d","principal":20000,"installmentCount":24}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "loanNo": "APP-2026-0917",
      "borrowerId": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
      "loanProductId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "principal": 20000,
      "installmentCount": 24
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const application = await res.json();

import os

import requests

res = requests.post(
    "https://app.lenduh.com/api/v1/loans",
    json={
        "loanNo": "APP-2026-0917",
        "borrowerId": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
        "loanProductId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "principal": 20000,
        "installmentCount": 24,
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
application = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->post('loans', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['loanNo' => 'APP-2026-0917', 'borrowerId' => '6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74', 'loanProductId' => '9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d', 'principal' => 20000, 'installmentCount' => 24],
]);
$application = json_decode((string) $res->getBody(), true);

{
  "id": "2a7e5c19-0d63-4b8f-9e14-6c3a8b2d7f05",
  "loanNo": "APP-2026-0917",
  "borrowerId": "6e1f8a20-4b7c-4d39-9f52-8a0c3e6b1d74",
  "productId": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "principal": "20000.00",
  "totalInterest": "2400.00",
  "totalRepayable": "22400.00",
  "repaymentFrequency": "semi_monthly",
  "installmentCount": 24,
  "installmentAmount": "933.33",
  "status": "draft",
  "restructured": false,
  "releaseDate": null,
  "maturityDate": null,
  "createdAt": "2026-09-18T07:44:19.028Z",
  "updatedAt": "2026-09-18T07:44:19.028Z"
}

{
  "statusCode": 404,
  "message": "Borrower not found.",
  "error": "Not Found"
}

{
  "id": "2b3c4d5e-6f7a-4b8c-9d0e-1f2a3b4c5d6e",
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "scheduleVersion": 0,
  "number": 2,
  "dueDate": "2026-09-01",
  "principal": "2500.00",
  "interest": "300.00",
  "amountDue": "2800.00",
  "amountPaid": "1200.00",
  "discount": "0.00",
  "penaltyCharged": "50.00",
  "penaltyPaid": "50.00",
  "status": "overdue",
  "lastPaymentAt": "2026-09-17T01:20:00.000Z"
}

curl "https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/schedule?pageSize=3" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/schedule?pageSize=3',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const installments = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/schedule",
    params={"pageSize": 3},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
installments = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/schedule', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['pageSize' => 3],
]);
$installments = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "scheduleVersion": 0,
      "number": 1,
      "dueDate": "2026-08-01",
      "principal": "2500.00",
      "interest": "300.00",
      "amountDue": "2800.00",
      "amountPaid": "2800.00",
      "discount": "0.00",
      "penaltyCharged": "0.00",
      "penaltyPaid": "0.00",
      "status": "paid",
      "lastPaymentAt": "2026-08-01T02:31:44.019Z"
    },
    {
      "id": "2b3c4d5e-6f7a-4b8c-9d0e-1f2a3b4c5d6e",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "scheduleVersion": 0,
      "number": 2,
      "dueDate": "2026-09-01",
      "principal": "2500.00",
      "interest": "300.00",
      "amountDue": "2800.00",
      "amountPaid": "1200.00",
      "discount": "0.00",
      "penaltyCharged": "50.00",
      "penaltyPaid": "50.00",
      "status": "overdue",
      "lastPaymentAt": "2026-09-17T01:20:00.000Z"
    },
    {
      "id": "3c4d5e6f-7a8b-4c9d-8e0f-2a3b4c5d6e7f",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "scheduleVersion": 0,
      "number": 3,
      "dueDate": "2026-10-01",
      "principal": "2500.00",
      "interest": "300.00",
      "amountDue": "2800.00",
      "amountPaid": "0.00",
      "discount": "0.00",
      "penaltyCharged": "0.00",
      "penaltyPaid": "0.00",
      "status": "unpaid",
      "lastPaymentAt": null
    }
  ],
  "total": 6,
  "page": 1,
  "pageSize": 3,
  "pageCount": 2
}

{
  "statusCode": 404,
  "message": "Loan not found.",
  "error": "Not Found"
}

curl "https://app.lenduh.com/api/v1/schedules?dueDateFrom=2026-09-21&dueDateTo=2026-09-27&status=unpaid,partial,overdue" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/schedules?dueDateFrom=2026-09-21&dueDateTo=2026-09-27&status=unpaid,partial,overdue',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const due = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/schedules",
    params={"dueDateFrom": "2026-09-21", "dueDateTo": "2026-09-27", "status": "unpaid,partial,overdue"},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
due = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('schedules', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['dueDateFrom' => '2026-09-21', 'dueDateTo' => '2026-09-27', 'status' => 'unpaid,partial,overdue'],
]);
$due = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "2b3c4d5e-6f7a-4b8c-9d0e-1f2a3b4c5d6e",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "scheduleVersion": 0,
      "number": 2,
      "dueDate": "2026-09-01",
      "principal": "2500.00",
      "interest": "300.00",
      "amountDue": "2800.00",
      "amountPaid": "1200.00",
      "discount": "0.00",
      "penaltyCharged": "50.00",
      "penaltyPaid": "50.00",
      "status": "overdue",
      "lastPaymentAt": "2026-09-17T01:20:00.000Z"
    },
    {
      "id": "3c4d5e6f-7a8b-4c9d-8e0f-2a3b4c5d6e7f",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "scheduleVersion": 0,
      "number": 3,
      "dueDate": "2026-10-01",
      "principal": "2500.00",
      "interest": "300.00",
      "amountDue": "2800.00",
      "amountPaid": "0.00",
      "discount": "0.00",
      "penaltyCharged": "0.00",
      "penaltyPaid": "0.00",
      "status": "unpaid",
      "lastPaymentAt": null
    }
  ],
  "total": 37,
  "page": 1,
  "pageSize": 25,
  "pageCount": 2
}

{
  "statusCode": 400,
  "message": "status must be one of the following values, comma-separated: unpaid, partial, paid, overdue, waived, restructured, derecognised",
  "error": "Bad Request"
}

curl "https://app.lenduh.com/api/v1/schedules/summary?dueDateFrom=2026-09-21&dueDateTo=2026-09-27" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/schedules/summary?dueDateFrom=2026-09-21&dueDateTo=2026-09-27',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const totals = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/schedules/summary",
    params={"dueDateFrom": "2026-09-21", "dueDateTo": "2026-09-27"},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
totals = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('schedules/summary', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['dueDateFrom' => '2026-09-21', 'dueDateTo' => '2026-09-27'],
]);
$totals = json_decode((string) $res->getBody(), true);

{
  "installments": 37,
  "amountDue": "96400.00",
  "amountPaid": "18200.00",
  "outstanding": "78200.00",
  "penaltyCharged": "350.00"
}

{
  "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
  "paymentNo": "PAY-01877",
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "amount": "1250.00",
  "breakdown": {
    "principal": "1071.43",
    "interest": "128.57",
    "penalty": "50.00"
  },
  "channel": "cash",
  "externalReference": null,
  "paymentDate": "2026-09-17T01:20:00.000Z",
  "status": "posted",
  "reversedAt": null,
  "createdAt": "2026-09-17T01:20:03.884Z",
  "updatedAt": "2026-09-17T01:20:03.884Z"
}

curl "https://app.lenduh.com/api/v1/payments?loanId=3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86&pageSize=2" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/payments?loanId=3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86&pageSize=2',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const payments = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/payments",
    params={"loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86", "pageSize": 2},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
payments = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('payments', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['loanId' => '3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86', 'pageSize' => 2],
]);
$payments = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
      "paymentNo": "PAY-01877",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "amount": "1250.00",
      "breakdown": {
        "principal": "1071.43",
        "interest": "128.57",
        "penalty": "50.00"
      },
      "channel": "cash",
      "externalReference": null,
      "paymentDate": "2026-09-17T01:20:00.000Z",
      "status": "posted",
      "reversedAt": null,
      "createdAt": "2026-09-17T01:20:03.884Z",
      "updatedAt": "2026-09-17T01:20:03.884Z"
    },
    {
      "id": "81f5d3a0-9c2e-4e7b-b6a4-2d0f8e1c7b93",
      "paymentNo": "PAY-01876",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "amount": "1250.00",
      "breakdown": {
        "principal": "1116.07",
        "interest": "133.93",
        "penalty": "0.00"
      },
      "channel": "cash",
      "externalReference": null,
      "paymentDate": "2026-09-03T02:05:00.000Z",
      "status": "reversed",
      "reversedAt": "2026-09-04T03:10:27.915Z",
      "createdAt": "2026-09-03T02:05:41.270Z",
      "updatedAt": "2026-09-04T03:10:27.915Z"
    }
  ],
  "total": 3,
  "page": 1,
  "pageSize": 2,
  "pageCount": 2
}

{
  "statusCode": 400,
  "message": "loanId must be a UUID",
  "error": "Bad Request"
}

curl "https://app.lenduh.com/api/v1/payments/c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/payments/c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const payment = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/payments/c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
payment = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('payments/c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$payment = json_decode((string) $res->getBody(), true);

{
  "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
  "paymentNo": "PAY-01877",
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "amount": "1250.00",
  "breakdown": {
    "principal": "1071.43",
    "interest": "128.57",
    "penalty": "50.00"
  },
  "channel": "cash",
  "externalReference": null,
  "paymentDate": "2026-09-17T01:20:00.000Z",
  "status": "posted",
  "reversedAt": null,
  "createdAt": "2026-09-17T01:20:03.884Z",
  "updatedAt": "2026-09-17T01:20:03.884Z"
}

{
  "statusCode": 404,
  "message": "Payment not found.",
  "error": "Not Found"
}

curl "https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/payments?pageSize=2" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/payments?pageSize=2',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const payments = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/payments",
    params={"pageSize": 2},
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
payments = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loans/3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86/payments', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'query'   => ['pageSize' => 2],
]);
$payments = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37",
      "paymentNo": "PAY-01878",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "amount": "1600.00",
      "breakdown": {
        "principal": "1428.57",
        "interest": "171.43",
        "penalty": "0.00"
      },
      "channel": "external",
      "externalReference": "BC-2026-09-18-004412",
      "paymentDate": "2026-09-18T06:02:00.000Z",
      "status": "posted",
      "reversedAt": null,
      "createdAt": "2026-09-18T06:02:11.907Z",
      "updatedAt": "2026-09-18T06:02:11.907Z"
    },
    {
      "id": "c47a2e19-5f3d-4b86-a0e1-9d6b3f7c5a22",
      "paymentNo": "PAY-01877",
      "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
      "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "amount": "1250.00",
      "breakdown": {
        "principal": "1071.43",
        "interest": "128.57",
        "penalty": "50.00"
      },
      "channel": "cash",
      "externalReference": null,
      "paymentDate": "2026-09-17T01:20:00.000Z",
      "status": "posted",
      "reversedAt": null,
      "createdAt": "2026-09-17T01:20:03.884Z",
      "updatedAt": "2026-09-17T01:20:03.884Z"
    }
  ],
  "total": 3,
  "page": 1,
  "pageSize": 2,
  "pageCount": 2
}

{
  "statusCode": 404,
  "message": "Loan not found.",
  "error": "Not Found"
}

curl -X POST "https://app.lenduh.com/api/v1/payments/preview" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"loanNo":"LN-000141","amount":1600,"externalReference":"BC-2026-09-18-004412"}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/payments/preview',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "loanNo": "LN-000141",
      "amount": 1600,
      "externalReference": "BC-2026-09-18-004412"
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const preview = await res.json();

import os

import requests

res = requests.post(
    "https://app.lenduh.com/api/v1/payments/preview",
    json={
        "loanNo": "LN-000141",
        "amount": 1600,
        "externalReference": "BC-2026-09-18-004412",
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
preview = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->post('payments/preview', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['loanNo' => 'LN-000141', 'amount' => 1600, 'externalReference' => 'BC-2026-09-18-004412'],
]);
$preview = json_decode((string) $res->getBody(), true);

{
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "loanNo": "LN-000141",
  "amount": "1600.00",
  "paymentDate": "2026-09-18T06:02:00.000Z",
  "applied": "1600.00",
  "remainder": "0.00",
  "willClearLoan": false,
  "penaltyCollected": "0.00",
  "outstandingAfter": "11200.00",
  "allocations": [
    {
      "installmentId": "2b3c4d5e-6f7a-4b8c-9d0e-1f2a3b4c5d6e",
      "number": 2,
      "dueDate": "2026-09-01",
      "remainingDue": "1600.00",
      "appliedToDue": "1600.00",
      "appliedToPenalty": "0.00"
    }
  ]
}

{
  "statusCode": 403,
  "message": "API write access for \"Push payments collected outside the system\" is not currently granted to this organization. Request it in Settings → Developer API.",
  "error": "Forbidden"
}

{
  "statusCode": 404,
  "message": "No loan numbered LN-000141.",
  "error": "Not Found"
}

curl -X POST "https://app.lenduh.com/api/v1/payments" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"loanNo":"LN-000141","amount":1600,"externalReference":"BC-2026-09-18-004412","paymentDate":"2026-09-18T06:02:00.000Z"}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/payments',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "loanNo": "LN-000141",
      "amount": 1600,
      "externalReference": "BC-2026-09-18-004412",
      "paymentDate": "2026-09-18T06:02:00.000Z"
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const payment = await res.json();

import os

import requests

res = requests.post(
    "https://app.lenduh.com/api/v1/payments",
    json={
        "loanNo": "LN-000141",
        "amount": 1600,
        "externalReference": "BC-2026-09-18-004412",
        "paymentDate": "2026-09-18T06:02:00.000Z",
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
payment = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->post('payments', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['loanNo' => 'LN-000141', 'amount' => 1600, 'externalReference' => 'BC-2026-09-18-004412', 'paymentDate' => '2026-09-18T06:02:00.000Z'],
]);
$payment = json_decode((string) $res->getBody(), true);

{
  "id": "f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37",
  "paymentNo": "PAY-01878",
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "amount": "1600.00",
  "breakdown": {
    "principal": "1428.57",
    "interest": "171.43",
    "penalty": "0.00"
  },
  "channel": "external",
  "externalReference": "BC-2026-09-18-004412",
  "paymentDate": "2026-09-18T06:02:00.000Z",
  "status": "posted",
  "reversedAt": null,
  "createdAt": "2026-09-18T06:02:11.907Z",
  "updatedAt": "2026-09-18T06:02:11.907Z"
}

{
  "id": "f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37",
  "paymentNo": "PAY-01878",
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "amount": "1600.00",
  "breakdown": {
    "principal": "1428.57",
    "interest": "171.43",
    "penalty": "0.00"
  },
  "channel": "external",
  "externalReference": "BC-2026-09-18-004412",
  "paymentDate": "2026-09-18T06:02:00.000Z",
  "status": "posted",
  "reversedAt": null,
  "createdAt": "2026-09-18T06:02:11.907Z",
  "updatedAt": "2026-09-18T06:02:11.907Z"
}

{
  "statusCode": 400,
  "message": "paymentDate is more than 7 days ago. Payments this old are loaded by migration, not pushed.",
  "error": "Bad Request"
}

{
  "statusCode": 403,
  "message": "This API key lacks the required 'payments:write' scope.",
  "error": "Forbidden"
}

{
  "statusCode": 409,
  "message": "Idempotency-Key was already used with a different request body",
  "error": "Conflict"
}

{
  "statusCode": 400,
  "message": "paymentDate is in the future — a payment cannot be recorded before it is taken.",
  "error": "Bad Request"
}

{
  "statusCode": 400,
  "message": "Send exactly one of loanId or loanNo.",
  "error": "Bad Request"
}

curl -X POST "https://app.lenduh.com/api/v1/payments/f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37/reverse" \
  -H "Authorization: Bearer $LENDUH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"reason":"Cheque returned by the bank — insufficient funds."}'

const res = await fetch(
  'https://app.lenduh.com/api/v1/payments/f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37/reverse',
  {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.LENDUH_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      "reason": "Cheque returned by the bank — insufficient funds."
    }),
  },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const payment = await res.json();

import os

import requests

res = requests.post(
    "https://app.lenduh.com/api/v1/payments/f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37/reverse",
    json={
        "reason": "Cheque returned by the bank — insufficient funds.",
    },
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
payment = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->post('payments/f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37/reverse', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
    'json'    => ['reason' => 'Cheque returned by the bank — insufficient funds.'],
]);
$payment = json_decode((string) $res->getBody(), true);

{
  "id": "f6a1b4c8-3d2e-4790-8a5b-1c6d9e0f2a37",
  "paymentNo": "PAY-01878",
  "loanId": "3e8d1b57-6a2f-4c90-b7d3-1f5a9e0c2b86",
  "borrowerId": "a93c0f4e-2b71-4d6a-9c58-0e7f3b2d1a64",
  "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "amount": "1600.00",
  "breakdown": {
    "principal": "1428.57",
    "interest": "171.43",
    "penalty": "0.00"
  },
  "channel": "external",
  "externalReference": "BC-2026-09-18-004412",
  "paymentDate": "2026-09-18T06:02:00.000Z",
  "status": "reversed",
  "reversedAt": "2026-09-19T01:30:44.216Z",
  "createdAt": "2026-09-18T06:02:11.907Z",
  "updatedAt": "2026-09-19T01:30:44.216Z"
}

{
  "statusCode": 404,
  "message": "No payment pushed through this API has that id.",
  "error": "Not Found"
}

{
  "statusCode": 409,
  "message": "Reversing PAY-01878 needs sign-off in your organization. An API key has no approver behind it, so this one has to be reversed in the office.",
  "error": "Conflict"
}

curl "https://app.lenduh.com/api/v1/me" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/me',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const identity = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/me",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
identity = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('me', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$identity = json_decode((string) $res->getBody(), true);

{
  "organization": {
    "id": "2f9b7d14-0e6c-4a53-8b21-c7d9e4f0a615",
    "name": "Bicol Multipurpose Cooperative"
  },
  "key": {
    "id": "0f4c8b2a-7e15-4d93-a60b-3c9f1e8d2b47",
    "name": "Bayad Center feed",
    "scopes": [
      "read",
      "payments:write"
    ],
    "expiresAt": null
  },
  "grantedWriteScopes": [
    "payments:write"
  ]
}

{
  "statusCode": 401,
  "message": "A valid API key is required (Authorization: Bearer lk_…).",
  "error": "Unauthorized"
}

curl "https://app.lenduh.com/api/v1/loan-products" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loan-products',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const products = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loan-products",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
products = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loan-products', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$products = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "4c5d6e7f-8a9b-4c0d-8e1f-2a3b4c5d6e7f",
      "code": "MICRO-D",
      "name": "Daily microloan",
      "description": null,
      "active": true,
      "branchId": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "defaultRepaymentFrequency": "daily",
      "installmentCountMin": 30,
      "installmentCountMax": 120,
      "termDaysMin": 30,
      "termDaysMax": 120,
      "createdAt": "2026-02-03T01:00:00.000Z",
      "updatedAt": "2026-02-03T01:00:00.000Z"
    },
    {
      "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
      "code": "SAL-12",
      "name": "Salary loan",
      "description": "For employees of partner companies, repaid by payroll deduction.",
      "active": true,
      "branchId": null,
      "defaultRepaymentFrequency": "semi_monthly",
      "installmentCountMin": 6,
      "installmentCountMax": 24,
      "termDaysMin": null,
      "termDaysMax": null,
      "createdAt": "2026-01-12T02:30:00.000Z",
      "updatedAt": "2026-06-01T03:15:40.552Z"
    }
  ],
  "total": 2,
  "page": 1,
  "pageSize": 25,
  "pageCount": 1
}

curl "https://app.lenduh.com/api/v1/loan-products/9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/loan-products/9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const product = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/loan-products/9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
product = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('loan-products/9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$product = json_decode((string) $res->getBody(), true);

{
  "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
  "code": "SAL-12",
  "name": "Salary loan",
  "description": "For employees of partner companies, repaid by payroll deduction.",
  "active": true,
  "branchId": null,
  "defaultRepaymentFrequency": "semi_monthly",
  "installmentCountMin": 6,
  "installmentCountMax": 24,
  "termDaysMin": null,
  "termDaysMax": null,
  "createdAt": "2026-01-12T02:30:00.000Z",
  "updatedAt": "2026-06-01T03:15:40.552Z"
}

{
  "statusCode": 404,
  "message": "Loan product not found.",
  "error": "Not Found"
}

curl "https://app.lenduh.com/api/v1/branches" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/branches',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const branches = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/branches",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
branches = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('branches', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$branches = json_decode((string) $res->getBody(), true);

{
  "items": [
    {
      "id": "7f1d2c3b-4a5e-4f60-8b71-9c0d1e2f3a4b",
      "code": "MAIN",
      "name": "Main office",
      "status": "active",
      "createdAt": "2026-01-12T02:00:00.000Z",
      "updatedAt": "2026-01-12T02:00:00.000Z"
    },
    {
      "id": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
      "code": "NAGA",
      "name": "Naga City",
      "status": "active",
      "createdAt": "2026-03-02T00:45:10.300Z",
      "updatedAt": "2026-03-02T00:45:10.300Z"
    }
  ],
  "total": 2,
  "page": 1,
  "pageSize": 25,
  "pageCount": 1
}

curl "https://app.lenduh.com/api/v1/branches/b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f" \
  -H "Authorization: Bearer $LENDUH_API_KEY"

const res = await fetch(
  'https://app.lenduh.com/api/v1/branches/b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f',
  { headers: { Authorization: `Bearer ${process.env.LENDUH_API_KEY}` } },
);
if (!res.ok) throw new Error(`Lenduh API ${res.status}`);
const branch = await res.json();

import os

import requests

res = requests.get(
    "https://app.lenduh.com/api/v1/branches/b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
    headers={"Authorization": f"Bearer {os.environ['LENDUH_API_KEY']}"},
    timeout=30,
)
res.raise_for_status()
branch = res.json()

<?php
$client = new GuzzleHttp\Client(['base_uri' => 'https://app.lenduh.com/api/v1/']);

$res = $client->get('branches/b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f', [
    'headers' => ['Authorization' => 'Bearer ' . getenv('LENDUH_API_KEY')],
]);
$branch = json_decode((string) $res->getBody(), true);

{
  "id": "b2c4d6e8-1a3b-4c5d-9e7f-0a1b2c3d4e5f",
  "code": "NAGA",
  "name": "Naga City",
  "status": "active",
  "createdAt": "2026-03-02T00:45:10.300Z",
  "updatedAt": "2026-03-02T00:45:10.300Z"
}

{
  "statusCode": 404,
  "message": "Branch not found.",
  "error": "Not Found"
}