Connect your payment gateway

Seven providers, one card each: what to copy from its dashboard, the one-time code and the 24-hour switch-on, the webhook address, and what each gateway can do.

6 min readUpdated 20 Oct 2026

In this guide

Shoppers pay into YOUR provider account — we never hold the money. Choose your provider, type what its dashboard shows, confirm the keys with a one-time code, switch them on after 24 hours. Each card says what the gateway can do and whether it is switched on for the network.

Where

Store console → Settings → Payments for a reseller who sells in their own name; Supplier console → Settings → Payments for a supplier, for the stores where the supplier sells. Only the owner changes payments. If your supplier sells in their own name in your store, the section says that the supplier collects.

The steps, for any provider

Add your provider account

Press Add your provider account, choose the provider and Live account or Test account, and type the account's own id in the words of that provider's dashboard (a Merchant ID for most; an Account ID for Zoho Payments). The card says where to find it and the shape it must have.

Type the keys once

The two or three boxes carry the provider's own names (below). Press Confirm keys with OTP. For your safety new keys can be switched on only after 24 hours: the card then shows the hour in which to type the same keys again and press Switch on these keys.

Tell the provider where to send its notices

Copy the webhook address shown on the card into your provider's webhook settings, with the same secret. A provider that sends no notices has no such step — the card says so, and we check its records every 10 minutes instead.

Check connection

Asks your provider for a ₹1 test order that is never paid — it tells you the keys work. It is one harmless read, never a charge.

Under the keys, Automatic refunds — two sentences you may agree to with Save — I agree: refund a shopper by themselves when they pay twice or too much, or when their order cannot be made, up to the amount you type. Above it, you approve each refund with an OTP. Turn off stops it. And UPI straight to you — type your UPI ID, press Confirm UPI ID with OTP, and switch it on 24 hours later the same way.

“Switched on” and “Not switched on yet”

Every card carries a pill. Not switched on yet means this gateway is not yet switched on for the network as a whole — your account and keys are saved, and payments through it start the day it is. Switched on means shoppers can pay through it now. Nothing you type is lost either way.

Provider by provider

Each card shows What this gateway can do, read from the provider's declared abilities — never a guess. In short:

What to copy, and how shoppers pay

RazorpayMerchant ID (8–20 letters and digits, top of your dashboard); Key ID, Key secret and Webhook secret from Account & Settings → API keys / Webhooks. Shoppers pay inside your store's page; Razorpay tells us about every payment; refunds in parts; disputes and settlements are read from it.

CashfreeMerchant ID; App ID (client ID) and Secret key from Developers → API keys — the same secret verifies its notices, so there is no third box. Shoppers pay inside your store's page; refunds in parts.

PhonePeMerchant ID (starts with M); Client ID, Client secret, the callback username:password and the Client version (usually 1) from PhonePe Business → Developer settings. Shoppers go to PhonePe's page and come back; refunds in parts.

PayUMerchant ID; Merchant key and Salt from Developer → API keys — the same salt verifies the callback. Shoppers are sent to PayU's page with a signed form and come back; refunds in parts.

EasebuzzMerchant ID; Key and Salt from the Developer section — the same salt verifies the callback. Shoppers go to Easebuzz's page and come back; refunds in parts.

CCAvenueMerchant ID (digits) and the Access code + Working key from M.A.R.S. → Settings → API keys (an optional separate access code and working key for its Status API). Shoppers are sent to CCAvenue's page with a signed form and come back; CCAvenue sends no notices — we check its records every 10 minutes and when a shopper comes back; refunds in parts.

Zoho PaymentsAccount ID from Settings → Developer space; Client ID, Client secret and the refresh token of a Self Client from api-console.zoho.in, the Webhook secret, and the API key of the checkout widget. Shoppers pay inside your store's page; refunds in parts.

When a key does not look right

The card refuses a value whose shape cannot be that provider's (the wrong length, spaces, a test key on a live account) before anything is saved, and says what it expected. A refused key is never kept.

Keep your keys in the provider's dashboard and here only. The card never shows a secret again after you confirm it; if you lose one, make a new one at the provider and type it here as a change (24 hours again).