Developer Documentation

<?php

$payload = [
    'order_id'       => 'ORD-2024-001',
    'amount'         => 99.00,
    'currency'       => 'USD',
    'customer_name'  => 'John Smith',
    'customer_email' => 'john@example.com',
    'customer_phone' => '+1 555 000 1234',
    'description'    => 'Premium Plan — 1 Month',
    'return_url'     => 'https://yoursite.com/payment/return',
    'cancel_url'     => 'https://yoursite.com/payment/cancel',
];

$ch = curl_init('https://api.tribe-pay.com/api/pay/initiate');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
        'X-Secret-Key: sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload),
]);

$data = json_decode(curl_exec($ch), true);
curl_close($ch);

header('Location: ' . $data['checkout_url']);
exit;

const axios = require('axios');

const { data } = await axios.post(
  'https://api.tribe-pay.com/api/pay/initiate',
  {
    order_id:       'ORD-2024-001',
    amount:         99.00,
    currency:       'USD',
    customer_name:  'John Smith',
    customer_email: 'john@example.com',
    customer_phone: '+1 555 000 1234',
    description:    'Premium Plan — 1 Month',
    return_url:     'https://yoursite.com/payment/return',
    cancel_url:     'https://yoursite.com/payment/cancel',
  },
  { headers: { 'X-API-Key': 'pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'X-Secret-Key': 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' } }
);

res.redirect(data.checkout_url);

import requests

response = requests.post(
    'https://api.tribe-pay.com/api/pay/initiate',
    json={
        'order_id':       'ORD-2024-001',
        'amount':         99.00,
        'currency':       'USD',
        'customer_name':  'John Smith',
        'customer_email': 'john@example.com',
        'customer_phone': '+1 555 000 1234',
        'description':    'Premium Plan — 1 Month',
        'return_url':     'https://yoursite.com/payment/return',
        'cancel_url':     'https://yoursite.com/payment/cancel',
    },
    headers={'X-API-Key': 'pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'X-Secret-Key': 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'}
)

data = response.json()
return redirect(data['checkout_url'])

<?php
$ch = curl_init('https://api.tribe-pay.com/api/pay/status/ORD-2024-001');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['X-API-Key: pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'X-Secret-Key: sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'],
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);

echo $data['status'];

const { data } = await axios.get(
  'https://api.tribe-pay.com/api/pay/status/ORD-2024-001',
  { headers: { 'X-API-Key': 'pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'X-Secret-Key': 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' } }
);
console.log(data.status);

response = requests.get(
    'https://api.tribe-pay.com/api/pay/status/ORD-2024-001',
    headers={'X-API-Key': 'pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'X-Secret-Key': 'sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'}
)
print(response.json()['status'])

const crypto = require('crypto');

app.post('/webhooks/tribepay',
  express.raw({ type: 'application/json' }),
  (req, res) => {
    const signature    = req.headers['x-tribepay-signature'] ?? '';
    const signingSecret = process.env.TRIBE_WEBHOOK_SECRET;

    const expected = crypto
      .createHmac('sha256', signingSecret)
      .update(req.body)
      .digest('hex');

    if (!crypto.timingSafeEqual(
      Buffer.from(expected),
      Buffer.from(signature)
    )) return res.status(401).send('Unauthorized');

    res.status(200).send('OK');

    const event = JSON.parse(req.body);
    if (event.event === 'payment.completed') {
      fulfilOrder(event.data.order_id);
    }
  }
);

import hmac, hashlib, json, os
from flask import Flask, request, abort

SIGNING_SECRET = os.environ['TRIBE_WEBHOOK_SECRET']

@app.route('/webhooks/tribepay', methods=['POST'])
def tribepay_webhook():
    signature = request.headers.get('X-TribePay-Signature', '')
    raw_body  = request.get_data()

    expected = hmac.new(
        SIGNING_SECRET.encode(), raw_body, hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(expected, signature):
        abort(401)

    event = json.loads(raw_body)
    if event['event'] == 'payment.completed':
        fulfil_order(event['data']['order_id'])

    return 'OK', 200