Skip to main content

Introduction

Omniware is a full-stack payments platform that lets you accept money, send money, bill customers, and onboard sub-merchants from a single set of APIs.

This documentation covers every endpoint you'll need to integrate.

How the platform fits togetherโ€‹

Solid arrows are synchronous API calls. Dotted arrows are asynchronous callbacks Omniware fires back to your server.

What every Omniware API has in commonโ€‹

  1. HTTPS POST

    All endpoints accept POST over HTTPS. Most expect application/x-www-form-urlencoded; a few accept JSON (noted per endpoint).

  2. api_key + hash auth

    Every request includes your api_key and a SHA-512 hash of the request parameters salted with your salt. See Authentication and Hash calculation.

  3. JSON responses

    Responses are JSON. Successful responses contain a data object; failures contain an error object with code and message. See Error handling.

  4. Verify the response hash

    Many endpoints return a hash in the response. Recompute it on your side to defend against tampering before treating the response as final.

Get your credentialsโ€‹

You'll need four secrets to integrate. They are issued by Omniware at onboarding and visible in your dashboard.

CredentialPurpose
api_keyIdentifies your merchant account on every request.
saltUsed in SHA-512 hash calculations. Server-side only.
encryption_keyAES key for encrypting payment requests (when using encrypted variants).
decryption_keyAES key for decrypting payment responses returned on return_url.
warning

Treat salt, encryption_key, and decryption_key like passwords. Never expose them in HTML forms, mobile binaries, or client-side JavaScript.

Next stepsโ€‹