List Payment Method Mappings
GET/api/magento2/integration-instances/:magento2IntegrationInstance/payment-method-mappings
Returns the Magento 2 -> SKU.io payment-method mapping table for this instance, plus the catalogue of SKU.io payment types that can be mapped to.
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
The mapping rows are the union of every payment method observed on past imported orders and every persisted mapping — methods seen on orders that are not yet mapped appear with sku_payment_type_id: null, and persisted-but-no-longer-observed methods still appear so stale mappings can be revisited or cleared.
Each mapping row contains:
id— the persisted mapping row ID, or null when the method has been observed on orders but not yet mapped.magento_method— the Magento 2 payment method code (e.g.checkmo,paypal_express,banktransfer).magento_method_title— the human-friendly method title observed on orders (falls back to the code).sku_payment_type_id/sku_payment_type_name— the SKU.io payment type the method maps to; null when unmapped.unpaid_disposition— how orders that arrive UNPAID with this payment method are imported: null (inherit the store-level payment-pending policy),open(import normally, no hold),draft(import without allocating stock), orreserve(allocate stock and hold fulfillment until payment arrives, optionally expiring per the store-level reservation expiry).accounting_sync— when this method's orders sync to the connected accounting provider: null (inherit the store-level trigger),always(sync once confirmed regardless of payment),when_paid(sync only after payment arrives), ornever(this method's orders are excluded from accounting sync).
Response also includes:
data.available_payment_types[]— every active SKU.io payment type (id,name).meta—total_mappings,mapped_count,unmapped_countcounters.
Authenticated. Requires a Bearer token.
Request
Responses
- 200
- 401
- 403
- 404
- 429
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Not found — no record with the given identifier (or the route does not exist). Verify the ID before retrying.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.