​
Making Requests

To interact with the Dwolla API, all requests must include the Accept header:
  • Accept: application/vnd.dwolla.v1.hal+json
For POST requests, specify either of the following Content-Type:
  • Content-Type: application/vnd.dwolla.v1.hal+json
  • Content-Type: application/json
All request and response bodies are JSON encoded. Requests must be made over HTTPS. Any non-secure requests will be redirected (HTTP 302) to the HTTPS equivalent URI. 
POST https://api.dwolla.com/customers
Content-Type: application/json

Accept: application/vnd.dwolla.v1.hal+json
Authorization: Bearer myOAuthAccessToken123
{
"foo": "bar"
}

... or ...

GET https://api.dwolla.com/accounts/a84222d5-31d2-4290-9a96-089813ef96b3/transfers

​
Authentication

All requests require either an OAuth access token or a client_id and client_secret in order to authenticate with the API. OAuth access tokens are passed via the Authorization HTTP header: Authorization: Bearer {access_token_here}

​
API Host

Production: https://api.dwolla.com Sandbox: https://api-sandbox.dwolla.com