Enterprise API Documentation

Authorization: Bearer pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/json

curl -X GET "https://yourtenant.pinaga.id/api/v1/enterprise/students" \
  -H "Authorization: Bearer pk_live_your_secret_key_here" \
  -H "Content-Type: application/json"

# Subdomain
https://{tenant}.pinaga.id/api/v1/enterprise

# Custom Domain
https://ujian.sekolahanda.sch.id/api/v1/enterprise

# Development
http://localhost:3000/api/v1/enterprise

X-Quota-Used: 1523
X-Quota-Limit: 100000
X-Quota-Remaining: 98477

{
  "success": true,
  "data": { ... },
  "pagination": {
    "current_page": 1,
    "total_pages": 5,
    "total_count": 48,
    "per_page": 10,
    "has_next": true,
    "has_prev": false
  },
  "meta": {
    "request_id": "req_abc123",
    "timestamp": "2026-02-19T10:30:00.000Z"
  }
}

{
  "success": false,
  "error": "Student not found",
  "code": "NOT_FOUND"
}

?page=1        # halaman (default: 1)
&limit=10      # jumlah per halaman (default: 10, max: 100)
&sort=name     # field untuk sorting
&order=asc     # asc atau desc

const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(payload))
    .digest('hex');
  
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

// Di webhook handler Anda:
app.post('/webhooks/pinaga', (req, res) => {
  const signature = req.headers['x-pinaga-signature'];
  
  if (!verifyWebhook(req.body, signature, WEBHOOK_SECRET)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }
  
  // Proses event
  const { event, data, timestamp } = req.body;
  console.log(`Event: ${event}`, data);
  
  res.status(200).json({ received: true });
});

{
  "event": "exam.published",
  "data": {
    "id": "uuid",
    "title": "UTS Matematika",
    "status": "published",
    "published_at": "2026-02-19T10:00:00Z"
  },
  "timestamp": "2026-02-19T10:00:01Z",
  "webhook_id": "uuid",
  "delivery_id": "uuid"
}

const PINAGA_API_KEY = process.env.PINAGA_API_KEY;
const BASE_URL = 'https://yourtenant.pinaga.id/api/v1/enterprise';

// List semua siswa
async function getStudents(page = 1) {
  const res = await fetch(`${BASE_URL}/students?page=${page}&limit=50`, {
    headers: {
      'Authorization': `Bearer ${PINAGA_API_KEY}`,
      'Content-Type': 'application/json',
    },
  });

  if (!res.ok) {
    const err = await res.json();
    throw new Error(`API Error: ${err.error} (${err.code})`);
  }

  return res.json();
}

// Buat siswa baru
async function createStudent(data) {
  const res = await fetch(`${BASE_URL}/students`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${PINAGA_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify(data),
  });

  return res.json();
}

// Contoh penggunaan
const result = await getStudents();
console.log(`Total: ${result.pagination.total_count} siswa`);

import requests
import os

API_KEY = os.environ['PINAGA_API_KEY']
BASE_URL = 'https://yourtenant.pinaga.id/api/v1/enterprise'

headers = {
    'Authorization': f'Bearer {API_KEY}',
    'Content-Type': 'application/json',
}

# List siswa
response = requests.get(f'{BASE_URL}/students', headers=headers)
data = response.json()
print(f"Total: {data['pagination']['total_count']} siswa")

# Bulk import
students = [
    {"name": "Budi", "email": "budi@sekolah.id", "student_id": "10A-001"},
    {"name": "Siti", "email": "siti@sekolah.id", "student_id": "10A-002"},
]
response = requests.post(
    f'{BASE_URL}/students/bulk',
    headers=headers,
    json={"students": students, "options": {"on_conflict": "skip_duplicates"}}
)
print(response.json())

<?php
$apiKey = getenv('PINAGA_API_KEY');
$baseUrl = 'https://yourtenant.pinaga.id/api/v1/enterprise';

function pinagaRequest($method, $endpoint, $data = null) {
    global $apiKey, $baseUrl;
    
    $ch = curl_init($baseUrl . $endpoint);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => [
            "Authorization: Bearer $apiKey",
            "Content-Type: application/json",
        ],
        CURLOPT_CUSTOMREQUEST => $method,
    ]);
    
    if ($data) {
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
    }
    
    $response = curl_exec($ch);
    curl_close($ch);
    return json_decode($response, true);
}

// List ujian
$exams = pinagaRequest('GET', '/exams?status=published');
echo "Ujian published: " . count($exams['data']);

// Ambil hasil ujian
$results = pinagaRequest('GET', '/exams/' . $examId . '/results');
?>