If you serve your API through AWS API Gateway, you can do this by enabling mTLS and
uploading the
certificate
above as the truststore.
Security
mTLS
Plain presents a client certificate on outbound requests, so you can verify they came from Plain.
All outbound requests made to your webhook targets and customer card endpoints include a client TLS certificate which you can verify to achieve mutual authentication.
This certificate is self-signed. In order to verify it, we provide our CA’s certificate (in PEM format), which you need to add to your server/truststore:
Was this page helpful?