Authentication

Endpoint requests to Galileo's Program API should be sent over HTTPS using TLS. Although TLS 1.2 is the minimum supported version, the use of TLS 1.3 is strongly recommended to ensure enhanced security.

❗️

Alert

All Galileo clients must use this format for the URI: https://api-{corename}.{env}.gpsrv.com/intserv/4.0/endPointName. Do not omit /intserv/4.0/. Do not put double slashes (//) in the path.

• corename is the name of your core, as assigned by Galileo
• env is the environment: cv for client validation and pd for production.

All non-standard URIs will return a 404 error.

Each endpoint request must be authenticated with these four parameters:

• apiLogin
• apiTransKey
• providerId
• transactionId

The table below describes the required authentication parameters, as well as two optional parameters that you can use for your internal reporting purposes.

Authentication setup

📘

Note

If you are connecting to the Program API for the first time, see our Quickstart guide before you start here.

During onboarding, Galileo will give you the apiLogin, apiTransKey, and providerId for the IP address that you send requests from. You provide the transactionId, which must be unique for each request (UUID is preferred, except for Create Adjustment, which requires a 64-bit integer). Optionally, you can pass providerTransactionId and providerTimestamp for your own internal records.

Along with the four parameters above, when you send an endpoint request, you also send:

• The endpoint URI for the environment you are using, provided by Galileo
• The request type (always POST)
• Any additional parameters for the request
• The format in which you will accept response data (json or xml)
• The content type for the request data (application/x-www-form-urlencoded)

Authentication steps

The steps below describe setup and authentication for a Ping endpoint request.

1. You obtain authentication credentials from Galileo and generate a unique transactionId for the request.

2. You build and post your endpoint request with:

• The endpoint URI
• The request type (always POST)
• The four authentication parameters from step 1
• The response-content-type field, with your preferred response data format: json or xml
• The content-type field, with application/x-www-form-urlencoded

import requests

url = "https://sandbox-api.gpsrv.com/intserv/4.0/ping"

payload = "apiLogin=aaaa-bbbb&apiTransKey=1212&providerId=9988&transactionId=777-777-777"
headers = {
    "response-content-type": "json",
    "content-type": "application/x-www-form-urlencoded"
}

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)

curl --request POST \
	 --url https://sandbox-api.gpsrv.com/intserv/4.0/ping \
	 --header 'response-content-type: json' \
	 --header 'content-type: application/x-www-form-urlencoded' \
	 --data apiLogin=aaaa-bbbb \
	 --data apiTransKey=1212 \
	 --data providerId=9988 \
	 --data transactionId=777-777-777

3. Galileo sends you response data in your requested format. See Responses for details.

{
  "status_code": 0,
  "status": "Success",
  "processing_time": 0.022,
  "response_data": {},
  "echo": {
    "provider_transaction_id": "",
    "provider_timestamp": null,
    "transaction_id": "A43ZQ5ZMR4XALONBW1G3"
  },
  "rtoken": "8cc16de0-5eda-4e2a-968e-3b08fce6f778",
  "system_timestamp": "2025-07-13 10:48:07"
}