1. Merchant Registration

Before accessing the Payment Platform, provide the following data to your account manager:

After registration, you will receive your credentials:

2. Protocol Mapping

Ensure the S2S CARD protocol is mapped in your account. Payments cannot be processed without proper mapping.

3. API Interaction

Send HTTPS POST requests to PAYMENT_URL with the required parameters. All responses are JSON-encoded.

3D-Secure (3DS) Flow

For 3DS-enabled transactions, the API returns a redirect response. You must redirect the cardholder to the provided redirect_url with the redirect_params using the specified redirect_method (POST/GET). After verification, the cardholder returns to your term_url_3ds.

{
    "action": "SALE",
    "client_key": "9e48fe5c-7653-824c-71a3-ad155d18ad27",
    "order_id": "order-12345",
    "order_amount": "99.99",
    "order_currency": "USD",
    "term_url_3ds": "https://your-site.com/3ds-return",
    "hash": "a1b2c3d4..."
}

{
    "action": "SALE",
    "result": "REDIRECT",
    "status": "3DS",
    "trans_id": "txn-67890",
    "redirect_url": "https://acs.bank.com/3ds",
    "redirect_method": "POST",
    "redirect_params": { "PaReq": "...", "MD": "..." }
}

4. Possible Actions

SALE Request

Use auth=Y for AUTH transactions (DMS). For sub-accounts, specify channel_id.

Request Parameters

* Optional if card_token is provided.

Response (Successful Sale)

{
    "action": "SALE",
    "result": "SUCCESS",
    "status": "SETTLED",
    "order_id": "order-12345",
    "trans_id": "txn-67890",
    "amount": "99.99",
    "currency": "USD",
    "descriptor": "LIPAPAP*Merchant"
}

{
    "action": "SALE",
    "result": "DECLINED",
    "status": "DECLINED",
    "order_id": "order-12345",
    "trans_id": "txn-67890",
    "decline_reason": "Insufficient funds"
}

CAPTURE Request

Captures a previously authorized transaction (auth=Y).

MOMOAPM Request

Processes payments using mobile money and alternative payment methods. Supports 20+ currencies.

Request Parameters

Supported Currencies

Sample Response

{
    "action": "MOMOAPM",
    "result": "REDIRECT",
    "status": "REDIRECT",
    "order_id": "pay-1643-11001",
    "trans_id": "pay-1643-11001",
    "amount": "113.00",
    "currency": "PHP",
    "txMsg": "Transaction successful",
    "redirect_url": "https://lipapap.net/pgate/refer.php?token=...",
    "redirect_method": "GET"
}

CREDITVOID Request

Completes a REFUND (full/partial) or REVERSAL transaction.

Response

{
    "action": "CREDITVOID",
    "result": "ACCEPTED",
    "order_id": "order-12345",
    "trans_id": "txn-67890"
}

{
    "action": "CREDITVOID",
    "result": "SUCCESS",
    "status": "REFUND",
    "order_id": "order-12345",
    "trans_id": "txn-67890",
    "amount": "99.99",
    "hash": "a1b2c3d4..."
}

VOID Request

Cancels a previously authorized transaction.

DEBIT Request

Transfers funds from a credit card to a merchant's account.

CREDIT2CARD Request

Transfers funds from a merchant's account to a credit card.

RECURRING_SALE Request

Implements SALE or AUTH transactions using a stored recurring_token from a previous transaction with recurring_init=Y.

CARD2CARD Request

Transfers money between two credit cards.

CREATE_SCHEDULE Request

Creates a recurring payment schedule.

Schedule Management

All management actions require client_key, action, schedule_id, and hash (Formula 2).

GET_TRANS_STATUS

Retrieves the status of a specific transaction.

GET_TRANS_DETAILS

Retrieves full order details including all associated transactions.

Status Codes

Formula 1: Request Signature

Signature = HMAC-SHA256(
    CONCAT(
        client_key,
        order_id,
        order_amount,
        order_currency,
        order_description,
        card_number,
        card_exp_month,
        card_exp_year,
        payer_email,
        payer_phone,
        payer_ip,
        secret_key
    ),
    secret_key
)
                

Non-required parameters not provided should be replaced with an empty string.

Formula 2: Response/Callback Signature

Signature = HMAC-SHA256(
    CONCAT(
        action,
        result,
        status,
        order_id,
        trans_id,
        trans_date,
        amount,
        currency,
        decline_reason,
        secret_key
    ),
    secret_key
)
                

If decline_reason is not present, use an empty string.

Error Codes

Testing