API Deprecations

Overview

Lemonway maintains three active API specifications:

  1. DirectKit API 2.0

  2. Account & Onboarding Management API

  3. KYC Update Simulation API (sandbox only).

    Deprecations apply to all three. Impacted developers are notified by email with at least 60 days' notice before retirement.


Prerequisites

Before migrating away from a deprecated endpoint, confirm the following:

  • API access: You have valid credentials for the target API (DirectKit API 2.0, Account & Onboarding Management API, or KYC Update Simulation API).
  • Environment: Test all migrations in the sandbox environment before promoting to production.
  • PCI-DSS scope: If you handle card data, confirm your environment's PCI-DSS compliance level. Non-compliant environments must use the 3-D Secure flow (POST /v2/moneyins/card/direct/3dinitPUT /v2/moneyins/card/direct/{transactionid}/3dconfirm) and must not store raw card data at any point.
  • Account mapping: Identify all accounts, wallets, and UBOs created through legacy endpoints so you can map them to the replacement resources.
  • Notification channel: Ensure your team monitors the email address registered with Lemonway — deprecation notices are sent there with at least 60 days' notice.

Legacy Account Endpoints - Sunset December 1, 2026

🗓️

Important

After December 1, 2026, all legacy account endpoints listed below will return 410 Gone. Platforms must complete migration before this date to avoid service disruption.

Affected Endpoints

Legacy endpointRetirement dateRecommended replacement
POST /createIndividualAccountDecember 1, 2026POST /accounts/individual
POST /createLegalAccountDecember 1, 2026POST /accounts/legal-entity
POST /createWallet (individuals)December 1, 2026POST /accounts/individual/{id}/profiles/{profileId}/wallets
POST /createWallet (legal entities)December 1, 2026POST /accounts/legal-entity/{id}/profiles/{profileId}/wallets
POST /createUboDecember 1, 2026POST /onboardings/ - when UBO info is required during legal entity onboarding
POST /updatePaymentAccountStatusDecember 1, 2026POST /sandbox/kyc-update/{{accountId}}
💬

Need help?

Contact your Account Manager or Implementation Manager for migration assistance.


Lifecycle states

StatusDescription
ActiveFully supported. Receives updates, bug fixes, and security patches.
To be deprecatedSunset date announced. Still functional, but migration must be completed before retirement.
DeprecatedNo longer recommended. A retirement date and replacement endpoint have been announced.
RetiredEndpoint has been removed. Requests will return 410 Gone. Migration is required.
DiscontinuedPayment method or service discontinued. The parent endpoint may still exist, but will reject those codes.

Migrating to Replacements

When an endpoint is deprecated, migrate all usage to the recommended replacement before the retirement date. Requests to retired endpoints will return a 410 Gone or equivalent error.

For PCI-DSS non-compliant environments, do not store raw card data at any point during migration. The recommended 3-D Secure flow (POST /v2/moneyins/card/direct/3dinitPUT /v2/moneyins/card/direct/{transactionid}/3dconfirm) handles card authentication server-side.


Endpoint status

All endpoints across Lemonway's API specifications and their current lifecycle state.

DirectKit API 2.0 — Cards & Payments

MethodEndpointStatusDeprecatedRecommended replacement
POST/v2/moneyins/card/directDeprecatedJan 2021/v2/moneyins/card/direct/3dinit
POST/v2/moneyins/card/registerDeprecatedJan 2021/v2/moneyins/card/direct/3dinit
POST/v2/moneyins/card/direct/3dinitActive
PUT/v2/moneyins/card/direct/{transactionid}/3dconfirmActive
POST/v2/moneyins/card/webinitActive
POST/v2/moneyins/card/{cardid}/rebillActive
POST/v2/moneyins/card/paymentformActive
POST/v2/moneyins/paybybank/transfer/initActive
POST/v2/moneyins/sdd/initActive
POST/v2/moneyins/paypal/initActive
POST/v2/moneyins/buynowpaylater/initActive
POST/v2/moneyins/bankwire/iban/createActive
POST/v2/moneyoutsActive
POST/v2/p2pActive

Account & Onboarding Management API

MethodEndpointStatusNotes
POST/accounts/individualActiveUse for new accounts. For existing accounts needing onboarding, use POST /onboardings/individual.
POST/accounts/legal-entityActive
POST/onboardings/individualActivePreferred flow for KYC onboarding of individuals.
POST/onboardings/companyActive
POST/onboardings/associationActive
POST/onboardings/sole-traderActive
PUT/accounts/legal/{accountId}DeprecatedRetirement date December 1, 2026. Replacement endpoint TBA.
PUT/accounts/individual/{accountId}DeprecatedRetirement date December 1, 2026. Replacement endpoint TBA.

KYC Update Simulation API (Sandbox)

MethodEndpointStatusNotes
POST/kyc-update/{accountId}ActiveSandbox only. Simulates KYC lifecycle events for integration testing.

Payment Method Status

Several payment method codes accepted by POST /v2/moneyins and related endpoints have been discontinued. Sending discontinued method codes will result in an error. The endpoint itself remains active for supported methods.

Active Payment Methods

CodeMethodStatus
0CardActive
1Bank transfer (MoneyIn)Active
3Bank transfer (MoneyOut)Active
4P2PActive
13iDEALActive
14SEPA Direct DebitActive
15ChequeActive
19MultibancoActive
21MBWAYActive
30Buy Now Pay Later (BNPL)Active
35PayPalActive

Discontinued Payment Methods

🚧

Warning

The following payment method codes are no longer accepted. Remove any references to these codes from your integration and contact your Lemonway account manager if you need an alternative.

CodeMethod
16Neosurf
17Sofort
18PFS Physical Card
20Payshop
22Polish Instant Transfer
23Pagare
24MobilePay
25Paytrail
26WeChat Pay
27P24 (Przelewy24)
28MoneyIn by TPE
29Trustly

Error Handling

Requests to deprecated or retired endpoints return specific HTTP status codes. Handle them explicitly in your integration.

Response Codes

Status codeMeaningRecommended action
200 OKEndpoint is active or deprecated but still functional.Continue using, but plan migration if the endpoint is marked Deprecated.
400 Bad RequestDiscontinued payment method code or invalid deprecated parameter sent.Remove the discontinued code or parameter from your request payload.
410 GoneEndpoint has been retired and is no longer available.Switch to the recommended replacement endpoint listed above.
426 Upgrade RequiredReturned by some endpoints in the deprecation window to signal required migration.Migrate to the replacement endpoint before the retirement date.

Required Error Handling

  • Catch 410 Gone explicitly: Do not retry the request. Route the call to the replacement endpoint.
  • Catch 400 Bad Request on payment method codes: Inspect the error body for discontinued codes (see the Discontinued Payment Methods table) and remove them from your request.
  • Log deprecation warnings: Some responses include a Sunset or Deprecation header. Log these to identify integrations still calling deprecated endpoints.
  • Fail closed in production: If a retired endpoint is called in production, surface the error to your monitoring system rather than silently retrying.

Parameter Deprecations

Occasionally, individual request parameters are deprecated without retiring the parent endpoint.

EndpointParameterStatusNotes
POST /v2/moneyins/card/directspecialConfigDeprecatedLeave empty. No effect on processing.
POST /v2/moneyins/card/registerspecialConfigurationDeprecatedLeave empty. No effect on processing.
POST /v2/moneyins/card/directisPreAuth / delayedDaysActiveMercanet only. Use with caution -delays over 6 days risk authorization failure.
💬

Need help?

Contact [email protected] or your account manager if you need migration assistance or have questions about a specific endpoint retirement timeline.