Documentation · Malawali Payment

Malawali Payment · REST API v1

Integrasi Pembayaran QRIS

Buat order dari server Anda, tampilkan QR ke pelanggan, lalu terima callback order.paid setelah pembayaran terdeteksi otomatis. API Key dibuat per Project dan hanya aktif selama langganan berjalan.

Base URL http://localhost:3001/api

Autentikasi Header x-api-key: pk_live_…

Format JSON (request & response)

Webhook HMAC-SHA256, retry maksimal 3×, timeout 10 detik

Setup QRIS

Simpan QRIS statis merchant lewat API agar order LIVE berikutnya memakainya.

Endpoint

POST /api/merchant/qris

POST

providerKunci provider QRIS (mis. shopee, gopay).

qrisString QRIS statis merchant.

set_activeBoolean, jadikan QRIS ini yang dipakai order LIVE.

curl -X POST http://localhost:3001/api/merchant/qris \
  -H "x-api-key: pk_live_xxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "provider": "shopee",
    "qris": "00020101021126610014COM.GO-JEK.WWW0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005204000053033605802ID5910KIZUSHOP6007BEKASI6304ABCD",
    "set_active": true
  }'

const res = await fetch("http://localhost:3001/api/merchant/qris", {
  method: "POST",
  headers: { "x-api-key": "pk_live_xxxxxxxxxxxxxxxxxxxxxxxx", "Content-Type": "application/json" },
  body: JSON.stringify({
    provider: "shopee",
    qris: QRIS_STRING,
    set_active: true,
  }),
});
const data = await res.json();

<?php
$ch = curl_init("http://localhost:3001/api/merchant/qris");
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => ["x-api-key: pk_live_xxxxxxxxxxxxxxxxxxxxxxxx", "Content-Type: application/json"],
  CURLOPT_POSTFIELDS => json_encode([
    "provider" => "shopee",
    "qris" => $QRIS_STRING,
    "set_active" => true,
  ]),
]);
$data = json_decode(curl_exec($ch), true);

import requests

res = requests.post(
    "http://localhost:3001/api/merchant/qris",
    headers={"x-api-key": "pk_live_xxxxxxxxxxxxxxxxxxxxxxxx"},
    json={
        "provider": "shopee",
        "qris": QRIS_STRING,
        "set_active": True,
    },
    timeout=10,
)
data = res.json()