# API Validation Results — gitlab_pharmalink_id
# Date: 2026-09-07

## BCA Bank API

| Parameter | Value |
|-----------|-------|
| Endpoint | api.bca.co.id |
| Client ID | b9bc8c62-55f7-43e4-bd9c-c9ad5530ff1c |
| Client Secret | 9f4e928f-35e6-4772-931a-86f8784fc338 |
| Status | ❌ **UNREACHABLE** |

**Error:** `No route to host` — api.bca.co.id not reachable from our IP (Indonesia-only or blocked).

**Conclusion:** BCA API **NOT VALIDATED** — network unreachable. May require Indonesian IP.

## Tokopedia API

| Parameter | Value |
|-----------|-------|
| Endpoint | accounts.tokopedia.com |
| Client ID | 0e2a20c2a8b741989f3f8b40db14d0f5 |
| Client Secret | a82e90b8e21d49c8a63f78cdf45a70ea |
| Status | ❌ **TIMEOUT** |

**Error:** Connection timeout — accounts.tokopedia.com not responding.

**Conclusion:** Tokopedia API **NOT VALIDATED** — connection timeout. May require Indonesian IP or different endpoint.

## Network Analysis

| Target | Reachable | Notes |
|--------|-----------|-------|
| api.bca.co.id | ❌ | No route to host |
| accounts.tokopedia.com | ❌ | Timeout |
| 34.126.145.28 | ✅ | GCP Singapore |
| 13.250.197.171 | ✅ | AWS Singapore |

**Pattern:** Indonesian services unreachable from our IP.

## Recommendations

1. **Indonesian proxy/VPN** — required for BCA/Tokopedia
2. **Alternative endpoint** — check for regional endpoints
3. **Manual validation** — ask operator with Indonesian access

## Files

- `SECRETS_COLLECTION.md` — all secrets
- `SECRETS_NIP.md` — NIP pairs
- `NIP_TEST.md` — NIP login tests
- `B2B_FINAL.md` — B2B validation
- `API_VALIDATION.md` — this file