Payment infrastructure you actually control
Merchant onboarding, a hosted UPI checkout, a documented create-order API and signed webhooks — running on your own server, with your own database.
Hosted checkout
Every order gets a payment page with a UPI QR code and one-tap deep links for GPay, PhonePe, Paytm and BHIM.
Signed webhooks
Callbacks are HMAC-SHA256 signed with a per-merchant secret and retried on a backoff schedule until they stick.
Server-side verification
A check-order-status endpoint is the source of truth. Never trust a browser redirect alone.
Amount matching
Inbound confirmations are reconciled against the expected amount. Short payments are held, never silently credited.
Credential hygiene
API secrets are stored only as SHA-256 hashes. KYC fields are encrypted with AES-256-GCM at rest.
Audit trail
Every login, key rotation, webhook change and payment confirmation is written to an append-only log.
Integration in three calls
# 1. Create an order (server-side)
curl -X POST $BASE/api/v1/create-order \
-d user_token=$SK_LIVE \
-d amount=499.00 \
-d order_id=ORD_1042 \
-d redirect_url=https://yoursite.com/return
# 2. Send the customer to result.payment_url
# 3. Verify server-side — never trust the redirect
curl -X POST $BASE/api/v1/check-order-status \
-d user_token=$SK_LIVE -d order_id=ORD_1042