Changelog
Changes to the partner API and dashboard that affect your integration, newest first.
Breaking changes are marked Breaking and say what to change.
2026-10-11
Breaking: Sandbox never reaches the real network
A Sandbox credential now only accepts the test numbers. Any other number gets
400 GW-400-BAD-REQUEST instead of reaching MTN. This applies to every service, including
KYC_MOMO.
What to change: use the test numbers from GET /api/v1/sandbox/test-scenarios in your Sandbox
tests. Requests to real customers must use a Live credential.
Breaking: Sandbox and Live have separate balances
Sandbox deposits now fund only your Sandbox balance, and Live payouts draw only from your Live
balance. GET /api/v1/ledger/balance and GET /api/v1/ledger/history return the books of the
credential you call them with, and the balance response now includes environment. Daily limits
are also counted per environment. See Partner ledger.
What to change: to test withdrawals or crypto sells in Sandbox, first make a Sandbox deposit with the "approved" test number, so your Sandbox balance can cover them.
Breaking: ids are UUIDs
Every id the API returns (transactionId, callbackDeliveryId, and the rest) is now a UUID
string such as "0192b7a4-6f1e-7c3a-9d2b-4e5f6a7b8c9d", not a number.
What to change: store ids as strings, for example a uuid or varchar(36) column. Your own
partnerOrderId is unchanged.
New
- Low-balance alert. On the dashboard's Funding page, choose an amount and we email your contact address once whenever your Live balance drops below it.
- Code samples and Postman. Signed requests and webhook verification in four languages, plus a ready-made Postman collection. See Code samples & Postman.
- Dashboard funding. Top up your balance from a MoMo wallet on the Funding page. Top-ups are free and are credited automatically once the payer approves.
- AppKey rotation grace period. After a rotation, the previous AppKey keeps working for 24 hours so you can roll the new one out without downtime. Rotating requires your password and a two-factor code.
- Two-factor authentication is now required for every dashboard account.
2026-09-29
- Webhook redelivery from the dashboard, settlement reports, and CSV export of transactions.
- Dashboard sessions you can review and revoke, with an email when a new sign-in happens.