Skip to main content
VTPE is the platform that initiates payments on behalf of customers and calls your systems for payment details and status updates. This guide walks you through configuring your integration with Mizaniya Pay so VTPE can reach your endpoints securely.
1

Create a Partner Account

Register at the Partner Portal and complete the onboarding process. Mizaniya Pay will review your application and, upon approval, issue your API Secret and HMAC Secret.
2

Receive Credentials from Mizaniya Pay

After onboarding, you receive two secrets:
  • API Secret: used to authenticate requests from VTPE in the Authorization header
  • HMAC Secret: used to verify webhook signatures sent by VTPE
Store both as environment variables in your server environment:
Store secrets in environment variables or a secrets manager. Never commit them to source code or expose them in client-side code.
3

Expose Your Product Information API

You must implement and host a GET endpoint that VTPE calls to retrieve payment details before initiating a payment. Ensure this endpoint is publicly reachable over HTTPS at your chosen API URL.Example URL:
4

Expose Your Webhook Endpoint

You must implement and host a POST endpoint that VTPE calls to notify you about payment events. Ensure this endpoint is publicly reachable over HTTPS at your chosen webhook URL.Example URL:
Both your Product Information API and your Webhook URL must be served over HTTPS. VTPE will not call HTTP endpoints.
5

Provide Your URLs to Mizaniya Pay

Share your API URL and Webhook URL with Mizaniya Pay so VTPE knows where to send requests.
6

Test the Integration

Mizaniya Pay will test your configuration by calling your API URL with a reference and sending a test webhook to your Webhook URL. Verify that:
  • Your Product Information API returns the correct payment details
  • Your Webhook URL responds with HTTP 200 and { "success": true }
  • Your server receives and can inspect the Authorization, X-Timestamp, and X-Signature headers
7

Verify Signature Handling

Ensure that your webhook handler verifies the X-Signature header on every incoming webhook request before processing the event. This prevents spoofed or tampered requests from being accepted.
After completing these steps, your VTPE integration is fully configured and ready to process live payments.