Generate

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --data '
{
  "amount": 10000,
  "expired_at": "2024-05-13T00:00:00+07:00",
  "merchant_reff_no": "INV20240513001"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr"

payload = {
    "amount": 10000,
    "expired_at": "2024-05-13T00:00:00+07:00",
    "merchant_reff_no": "INV20240513001"
}
headers = {
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 10000,
    expired_at: '2024-05-13T00:00:00+07:00',
    merchant_reff_no: 'INV20240513001'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'amount' => 10000,
    'expired_at' => '2024-05-13T00:00:00+07:00',
    'merchant_reff_no' => 'INV20240513001'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr"

	payload := strings.NewReader("{\n  \"amount\": 10000,\n  \"expired_at\": \"2024-05-13T00:00:00+07:00\",\n  \"merchant_reff_no\": \"INV20240513001\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"amount\": 10000,\n  \"expired_at\": \"2024-05-13T00:00:00+07:00\",\n  \"merchant_reff_no\": \"INV20240513001\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"amount\": 10000,\n  \"expired_at\": \"2024-05-13T00:00:00+07:00\",\n  \"merchant_reff_no\": \"INV20240513001\"\n}"

response = http.request(request)
puts response.read_body

{
  "status": 200,
  "success": true,
  "data": {
    "id": 103,
    "reff_no": "6601K5X8Z3M7QF4N2VTB6RYJWPCD",
    "merchant_reff_no": "INV20240513001",
    "status": "open",
    "status_computed": "open",
    "is_expired": false,
    "qr_data": "00020101021226620015ID.SINGAPAY.WWW...",
    "kind": "on-us",
    "type": "mpm-dynamic",
    "amount": 10000,
    "tip_indicator": "",
    "tip_value": 0,
    "tip_amount": 0,
    "total_amount": 10000,
    "mdr_percentage": 1.5,
    "mdr_cost": 150,
    "our_margin": 50,
    "vendor_fee": 150,
    "settled_to_merchant_amount": 9750,
    "acquirer_name": "SingaPay",
    "acquirer_nns": "1234567890",
    "issuer_name": "SingaPay",
    "issuer_nns": "1234567890",
    "customer_pan": "1234567890",
    "customer_name": "John Doe",
    "customer_account_type": "UNSPECIFIED",
    "customer_data": {
      "pan": "1234567890",
      "name": "John Doe",
      "account_type": "UNSPECIFIED"
    },
    "has_reconcile": false,
    "reconcile_at": "2024-05-13T00:00:00Z",
    "reconcile_by": "SYSTEM",
    "had_settled_to_merchant": false,
    "settled_to_merchant_at": "2024-05-13T00:00:00Z",
    "has_settle": false,
    "settle_at": "2024-05-13T00:00:00Z",
    "settle_eligible_at": "2024-05-14T00:00:00+07:00",
    "created_at": "2024-05-13T00:00:00Z",
    "updated_at": "2024-05-13T00:00:00Z",
    "expired_at": "2024-05-13T00:00:00Z",
    "deleted_at": "2024-05-13T00:00:00Z",
    "events_count": 1
  }
}

{
  "status": 400,
  "success": false,
  "error": {
    "code": 400,
    "message": "Bad Request."
  }
}

{
  "status": 401,
  "success": false,
  "error": {
    "code": 401,
    "message": "Unauthorized merchant, please sign in"
  }
}

{
  "status": 403,
  "success": false,
  "error": {
    "code": 403,
    "message": "Access denied."
  }
}

{
  "status": 404,
  "success": false,
  "error": {
    "code": 404,
    "message": "Account not found."
  }
}

{
  "status": 422,
  "success": false,
  "error": {
    "code": 422,
    "message": "Validation error.",
    "errors": {
      "field": [
        "error message"
      ]
    }
  },
  "data": {
    "errors": {
      "field": [
        "error message"
      ]
    }
  }
}

{
  "status": 500,
  "success": false,
  "error": {
    "code": 500,
    "message": "Internal server error."
  }
}

{
  "status": 503,
  "success": false,
  "error": {
    "code": 503,
    "message": "Service temporarily unavailable."
  }
}

QRIS (Money In)

Generate

Generates a new MPM dynamic QRIS for the specified account. The returned transaction has status = open and contains the QR payload in qr_data, which should be rendered as a QR code for the customer to scan.

amount must be within the minimum and maximum limits configured for the merchant.
expired_at is optional. When omitted, the QRIS expires 1 hour after creation.
The account must be active. Managed sub accounts that have not completed KYB verification cannot generate QRIS.
The final payment status is delivered via callback to the merchant’s registered callback URL, including merchant_reff_no. It can also be checked via the inquiry-status or show endpoint using the returned id.

Idempotency. This endpoint is not idempotent. merchant_reff_no is stored as a free-form merchant reference and is not checked for uniqueness; sending the same request again (including with the same merchant_reff_no) creates a new, separate QRIS transaction. If the response to a generate request is lost (e.g. network timeout), first look up the transaction via GET /api/v1.0/qris-dynamic/{account_id} filtered by created_at_from/created_at_to and amount, and match merchant_reff_no on the returned items, before generating a new QRIS. An unpaid QRIS expires automatically at expired_at and does not result in any funds movement.

This endpoint is rate limited per merchant; requests above the limit are rejected with HTTP 429.

POST

api

v1.0

qris-dynamic

{account_id}

generate-qr

Generate

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --data '
{
  "amount": 10000,
  "expired_at": "2024-05-13T00:00:00+07:00",
  "merchant_reff_no": "INV20240513001"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr"

payload = {
    "amount": 10000,
    "expired_at": "2024-05-13T00:00:00+07:00",
    "merchant_reff_no": "INV20240513001"
}
headers = {
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 10000,
    expired_at: '2024-05-13T00:00:00+07:00',
    merchant_reff_no: 'INV20240513001'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'amount' => 10000,
    'expired_at' => '2024-05-13T00:00:00+07:00',
    'merchant_reff_no' => 'INV20240513001'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr"

	payload := strings.NewReader("{\n  \"amount\": 10000,\n  \"expired_at\": \"2024-05-13T00:00:00+07:00\",\n  \"merchant_reff_no\": \"INV20240513001\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"amount\": 10000,\n  \"expired_at\": \"2024-05-13T00:00:00+07:00\",\n  \"merchant_reff_no\": \"INV20240513001\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v1.0/qris-dynamic/{account_id}/generate-qr")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"amount\": 10000,\n  \"expired_at\": \"2024-05-13T00:00:00+07:00\",\n  \"merchant_reff_no\": \"INV20240513001\"\n}"

response = http.request(request)
puts response.read_body

{
  "status": 200,
  "success": true,
  "data": {
    "id": 103,
    "reff_no": "6601K5X8Z3M7QF4N2VTB6RYJWPCD",
    "merchant_reff_no": "INV20240513001",
    "status": "open",
    "status_computed": "open",
    "is_expired": false,
    "qr_data": "00020101021226620015ID.SINGAPAY.WWW...",
    "kind": "on-us",
    "type": "mpm-dynamic",
    "amount": 10000,
    "tip_indicator": "",
    "tip_value": 0,
    "tip_amount": 0,
    "total_amount": 10000,
    "mdr_percentage": 1.5,
    "mdr_cost": 150,
    "our_margin": 50,
    "vendor_fee": 150,
    "settled_to_merchant_amount": 9750,
    "acquirer_name": "SingaPay",
    "acquirer_nns": "1234567890",
    "issuer_name": "SingaPay",
    "issuer_nns": "1234567890",
    "customer_pan": "1234567890",
    "customer_name": "John Doe",
    "customer_account_type": "UNSPECIFIED",
    "customer_data": {
      "pan": "1234567890",
      "name": "John Doe",
      "account_type": "UNSPECIFIED"
    },
    "has_reconcile": false,
    "reconcile_at": "2024-05-13T00:00:00Z",
    "reconcile_by": "SYSTEM",
    "had_settled_to_merchant": false,
    "settled_to_merchant_at": "2024-05-13T00:00:00Z",
    "has_settle": false,
    "settle_at": "2024-05-13T00:00:00Z",
    "settle_eligible_at": "2024-05-14T00:00:00+07:00",
    "created_at": "2024-05-13T00:00:00Z",
    "updated_at": "2024-05-13T00:00:00Z",
    "expired_at": "2024-05-13T00:00:00Z",
    "deleted_at": "2024-05-13T00:00:00Z",
    "events_count": 1
  }
}

{
  "status": 400,
  "success": false,
  "error": {
    "code": 400,
    "message": "Bad Request."
  }
}

{
  "status": 401,
  "success": false,
  "error": {
    "code": 401,
    "message": "Unauthorized merchant, please sign in"
  }
}

{
  "status": 403,
  "success": false,
  "error": {
    "code": 403,
    "message": "Access denied."
  }
}

{
  "status": 404,
  "success": false,
  "error": {
    "code": 404,
    "message": "Account not found."
  }
}

{
  "status": 422,
  "success": false,
  "error": {
    "code": 422,
    "message": "Validation error.",
    "errors": {
      "field": [
        "error message"
      ]
    }
  },
  "data": {
    "errors": {
      "field": [
        "error message"
      ]
    }
  }
}

{
  "status": 500,
  "success": false,
  "error": {
    "code": 500,
    "message": "Internal server error."
  }
}

{
  "status": 503,
  "success": false,
  "error": {
    "code": 503,
    "message": "Service temporarily unavailable."
  }
}

Authorizations

Authorization

string

header

required

JWT issued by POST /api/v1.1/access-token/b2b. Send Authorization: Bearer <token>.

X-PARTNER-ID

string

header

required

Merchant API key (Credential.api_key). Required on every request.

Path Parameters

account_id

string

required

ULID of the account that will receive the QRIS payment. Must belong to the authenticated merchant and be active. Account ULID

Example:

"01H9X8ZK3M7QF4N2VTB6RYJWPC"

Body

application/json

amount

number

required

Payment amount for the dynamic QRIS. Minimum and maximum limits depend on merchant configuration.

Example:

10000

expired_at

string<date-time>

Optional expiration datetime. Must be later than the current time. A value without timezone offset is interpreted as Asia/Jakarta (WIB, UTC+7). Defaults to 1 hour after creation when omitted.

Example:

"2024-05-13T00:00:00+07:00"

merchant_reff_no

string | null

Optional merchant reference number, returned on the transaction resource and in callbacks. Not checked for uniqueness: reusing a value does not prevent a new QRIS from being created.

Maximum string length: 255

Example:

"INV20240513001"

Response

QRIS created

status

integer

required

HTTP status code.

Example:

200

success

boolean

required

Indicates whether the request was successful.

Example:

true

data

object

required

QRIS transaction resource payload.

Show child attributes

Getting Started

Security

Accept Money

Send Money

Transaction Records

Money Accounts

Webhook

Generate

Authorizations

Path Parameters

Body

Response