# API reference
source: https://developer.mastercard.com/mastercard-supplier-payment-agent/documentation/api-reference/index.md

Note: For more information on how to generate a client library using OpenAPI, refer to the [Using OpenAPI](https://developer.mastercard.com/mastercard-supplier-payment-agent/documentation/tutorials_guides/tutorials/connect-to-the-bps-using-open-api/index.md) section. All inbound endpoints are secured using OAuth1.0a. All outbound endpoints are secured using Mutual TLS (MTLS). For more information on fields to decrypt, refer to the [Encryption](https://developer.mastercard.com/mastercard-supplier-payment-agent/documentation/api-basics/index.md#encryption) section.

## Environment domains {#environment-domains}

### Mastercard Track Business Payment Service {#mastercard-track-business-payment-service}

* MTF
* Production

```MTF
https://sandbox.api.mastercard.com/track/bps
```

```Production
https://api.mastercard.com/track/bps
```

## Swagger UI {#swagger-ui}


API Specification: `https://static.developer.mastercard.com/content/mastercard-supplier-payment-agent/swagger/bps-spa.yaml`

### Event notification {#event-notification}


API Reference: `GET /supplier-payment-agents/notifications`