Documentation · Malawali Payment

Malawali Payment · REST API v1

Integrasi Pembayaran QRIS

Buat order dari server Anda, tampilkan QR ke pelanggan, lalu terima callback order.paid setelah pembayaran terdeteksi otomatis. API Key dibuat per Project dan hanya aktif selama langganan berjalan.

Base URL http://localhost:3001/api

Autentikasi Header x-api-key: pk_live_…

Format JSON (request & response)

Webhook HMAC-SHA256, retry maksimal 3×, timeout 10 detik

Cancel

Batalkan order selama masih berstatus pending.

Endpoint

POST /api/orders/:id/cancel

POST

Bila order sudah paid, expired, atau cancelled, akan dikembalikan error order_not_pending (409).

curl -X POST http://localhost:3001/api/orders/ord_7f3k9d2m/cancel \
  -H "x-api-key: pk_live_xxxxxxxxxxxxxxxxxxxxxxxx"

const res = await fetch("http://localhost:3001/api/orders/ord_7f3k9d2m/cancel", {
  method: "POST",
  headers: { "x-api-key": "pk_live_xxxxxxxxxxxxxxxxxxxxxxxx" },
});
const order = await res.json(); // status: "cancelled"

<?php
$ch = curl_init("http://localhost:3001/api/orders/ord_7f3k9d2m/cancel");
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => ["x-api-key: pk_live_xxxxxxxxxxxxxxxxxxxxxxxx"],
]);
$order = json_decode(curl_exec($ch), true);

import requests

order = requests.post(
    "http://localhost:3001/api/orders/ord_7f3k9d2m/cancel",
    headers={"x-api-key": "pk_live_xxxxxxxxxxxxxxxxxxxxxxxx"},
    timeout=10,
).json()