LIVEQRIS Dinamis + Webhook HMAC-SHA256 — Siap Production

Payment Infrastructureuntuk Bisnis Modern

Terima pembayaran QRIS & bank transfer secara instan. Ledger ganda, idempotency key, dan pencairan manual maksimal 1×24 jam — kepercayaan yang bisa diaudit.

Tidak perlu kartu kredit • Sandbox gratis • Go live 5 menit
Live • JVault Synced

Overview — Hari ini

All systems operational
Available Balance
Rp 48.250.000
+12.4% vs kemarin
Held Balance
Rp 2.850.000
2 payout • 1x24h SLA
Total Incoming
Rp 127.4M
342 transaksi • paid
Volume 7 hariIDR • webhook success 99.2%
SenSelRabKamJumSabMin

Active Invoice — QRIS

PENDING • 04:42
SCAN QRISQRIS
Total Pembayaran
Rp 250.000
INV-7F3A9C • ACAPAY
Polling status tiap 3 detik • Auto-verify PayHook
Dipercaya bisnis Indonesia
UMKM • D2C • SaaS 100% IDR • No decimal
Premium Fintech Stack

Infrastruktur pembayaran yang terasa seperti Stripe, dibuat untuk Indonesia.

Bukan template admin. Setiap piksel dirancang untuk kepercayaan, kecepatan, dan auditability. Whitespace lega, rounded 16px, soft shadow, dan micro-interaction halus.

QRIS Dinamis Real-time

Static QR → dynamic nominal via api-mininxd. Countdown & polling 3s.

Ledger Ganda

Double-entry: available vs held. Idempotency key mencegah double credit.

Payout Manual Aman

Saldo → held → processing → completed. Admin verifikasi & referensi bank.

PayHook HMAC-256

Verifikasi X-Payhook-Signature + timestamp ±5 menit + nonce anti-replay.

REST API Merchant

POST /invoices • Bearer acp_sec_xxx • X-Acapay-Signature callback + retry.

Keamanan Berlapis

AES-256-GCM, bcrypt, JWT httpOnly, rate-limit, CORS strict.

Payment Flow — End to End

Dari invoice hingga dana cair, transparan.

Merchant buat invoice → customer scan QRIS → PayHook notifikasi → matcher → ledger update → webhook ke merchant → payout manual.

01

Buat Invoice

POST /api/v1/invoices

amount: 100000 • callback_url
02

Bayar QRIS

Scan & bayar

QR dinamis • countdown • auto-polling
03

PayHook Webhook

POST /api/webhooks/payhook

HMAC • timestamp • idempotency
04

Pencairan

Request → Hold → Completed

Manual 1×24h • referensi bank
Developer First

Integrasi 5 menit. Webhook yang bisa dipercaya.

Satu POST untuk buat invoice, satu endpoint untuk terima callback. Signature HMAC-SHA256 dengan retry exponential backoff.

Bearer acp_sec_xxx + acp_pub_xxx
X-Acapay-Signature: sha256=... + X-Acapay-Timestamp
Retry 0s → 1s → 5s → 30s • webhook logs di dashboard
POST /api/v1/invoices — 201 CreatedHTTP 201
curl -X POST https://acapay.id/api/v1/invoices \
  -H "Authorization: Bearer acp_sec_xxx" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 250000,
    "description": "Langganan Pro - 1 Bulan",
    "customer": { "name": "Budi", "email": "budi@acme.id" },
    "callback_url": "https://acme.id/webhook/acapay"
  }'

// → { invoice_id, pay_url, status: "pending" }
PayHook → merchant callback verifiedevent: payment.paid
Security & Trust

Keamanan yang bisa diaudit, bukan janji.

HMAC-SHA256 + Timestamp
Validasi ±5 menit + nonce anti-replay pada PayHook & merchant callback.
AES-256-GCM Encryption
ACAPAY_SECRET_KEY untuk rekening & data sensitif. Masking otomatis.
JWT httpOnly + RBAC
SESSION_SECRET 7 hari, role merchant/admin, rate-limit & audit logs.
JVault + Ledger
Bin terdistribusi, double-entry ledger, idempotency & held balance.
Pencairan Manual 1×24 Jam
Transparan • Terverifikasi • Ada referensi bank
“Pencairan diproses secara manual maksimal 1×24 jam.”
Setiap payout: available → held saat request, held → selesai saat admin transfer. Gagal? held kembali ke available. Semua tercatat di ledger & audit log.

Siap menerima pembayaran hari ini?

Daftar gratis, dapat API keys, buat invoice pertama dalam 5 menit. Dashboard merchant siap pakai.

Indonesia • IDR • QRIS • Webhook • Payout manual terverifikasi