About this plugin
Paymos Stablecoin Checkout for WooCommerce supports Sandbox and Live payments, HMAC-signed Merchant API requests, authenticated webhooks, event deduplication, reconciliation, HPOS, and Checkout Blocks.
The official package contains no merchant secrets. Connect it from WooCommerce settings using the one-time Paymos device approval flow. Credentials are encrypted with AES-256-GCM using WordPress installation security salts and are never rendered back into the settings page.
External services
This plugin connects your WooCommerce store to Paymos. Click Connect Paymos in the store admin to begin. io/connect/token.
Your browser opens the Paymos approval page with the plugin identifier, store origin, admin return URL, and user_code. The secret device_code goes from the plugin to the token endpoint. After approval, the plugin stores Sandbox and Live credentials in WordPress options encrypted with AES-256-GCM, then discards the short-lived OAuth token.
io/v1/invoices to create invoices, GET /v1/invoices/{invoice_id} to check status, and POST /v1/invoices/{invoice_id}/cancel to cancel them. Requests carry a key ID, timestamp, and HMAC signature; the API secret signs requests locally. Invoice data includes project_id, amount, currency, and external_order_id, plus the native customer ID as client_id when available.
The WooCommerce order reference includes the order access key.
io over HTTPS. Paymos sends signed invoice and payment webhooks back to your store so the plugin can update the order.
Read the Paymos Terms and Privacy Policy before connecting.