> ## Documentation Index > Fetch the complete documentation index at: https://docs.singapay.id/llms.txt > Use this file to discover all available pages before exploring further. # Generate > Generates a new MPM dynamic QRIS transaction for the specified account. Payment amount must be within merchant configuration limits. Optional expiration time may be provided. ## OpenAPI ````yaml https://payment-b2b.singapay.id/api/docs/merchant-api.json post /api/v1.0/qris-dynamic/{account_id}/generate-qr openapi: 3.1.0 info: title: Singa Merchant API description: >- OpenAPI specification for the merchant/partner HTTP API. All routes below are additionally protected by `ip.whitelisted.merchant` — the caller IP must be registered for the credential or merchant. Obtain a JWT using `POST /api/v1.0/access-token/b2b` (Basic auth) or `POST /api/v1.1/access-token/b2b` (X-Signature) before calling secured endpoints. version: 1.0.0 servers: - url: https://sandbox-payment-b2b.singapay.id description: >- API host. Paths include `/api` prefix (see `RouteServiceProvider`). Replace scheme/host with your environment. security: [] tags: - name: Security description: >- Merchant authentication (`OauthMerchantTokenController`). **v1.1** B2B token uses `X-CLIENT-ID`, `X-PARTNER-ID`, and `X-Signature` (no Basic auth). Secured routes also require the issued Bearer JWT plus `X-PARTNER-ID`. - name: Accounts description: >- Account management (`routes/merchantApiRoute.php`, `v1.0`). Path parameter `{id}` is always the account ULID. - name: Balance Inquiry description: >- Merchant and per-account balance inquiry (`BalanceController`, `v1.0`). Path `account_id` is the account ULID. - name: Statements description: >- Per-account statement list and detail (`AccountController::accountStatements`, `accountStatementDetail`, prefix `v1.0/statements`). Flugger responses; detail path param `{statement_id}` maps to `statements.transaction_id`. - name: Payment Link description: >- Payment link CRUD and payment-method catalog (`PaymentLinkApiController`, prefix `v1.0/payment-link-manage`). `account_id` is ULID; `payment_link_id` is numeric `payment_links.id`. - name: Payment Link History description: >- Payment link transaction/history listing and detail (`PaymentLinkApiController`, prefix `v1.0/payment-link-histories`). `history_id` is numeric `payment_link_histories.id`. - name: Virtual Account description: >- Native VA CRUD (`VirtualAccountController`, prefix `v1.0/virtual-accounts`). `account_id` and `virtual_account_id` are ULIDs. - name: VA Transaction description: >- VA money-in transaction listing and detail (`VirtualAccountController`, prefix `v1.0/va-transactions`). - name: QRIS (Money In) description: >- MPM dynamic QRIS list, show, and generate (`QrisMpmDynamicApiController`, prefix `v1.0/qris-dynamic`). - name: QRIS (Money Out) description: >- Issuer MPM decode/inquiry, payment credit (money out), and transaction status (`QrisIssuerMpmController`, `QrisApiV2Controller::checkStatus`, prefix `v2.0/qris`). Related list/detail: `GET /api/v2.0/qris/transaction/...`. - name: E-Wallet (Money In) description: >- E-Wallet Native checkout and transactions (`EwalletNativeApiController`, `EwalletNativeTransactionApiController`, `EwalletNativeV2ApiController`). Paths include `v1.0/ewallet-native`, `v1.0/ewallet-native-transactions`, and `v2.0/ewallet-native`. - name: E-Wallet (Money Out) description: >- E-wallet disbursement / top-up to beneficiary wallets (`EWalletTopUpController`, prefix `v2.0/ewallet`). Responses use the custom **`MerchantV2ApiEnvelope`** with **`MerchantV2ResponseCode`** (SP000–SP020). - name: Card (Money In) description: >- One-time card payment, cancel, and inquiry (`CardPaymentMerchantApiController`, prefix `v2.0/card`). - name: Subscription (Recurring) description: >- Credit-card recurring subscription plans (`SubscriptionPlanApiController`, prefix `v2.0/recurring`). Plan `{id}` is UUID (`sub_plans.id`). - name: Direct Debit description: >- Direct Debit — bind a customer bank account once via hosted webview, then charge it host-to-host (`DirectDebitMerchantController`, prefix `v2.0/direct-debit`). Binding `{binding_id}` and transaction `{transaction_id}` are UUIDs. Responses use the **`MerchantV2ApiEnvelope`** with both standard SP000–SP020 codes and Direct-Debit-specific codes (`SP_DD_*`). The `/charge` endpoint is additionally protected by **`X-Signature`** + **`X-Timestamp`** (`verify.signature-internal`); see operation parameters for the signing scheme. - name: Account Transfer description: >- Move funds between sub-accounts within the same merchant (`AnotherAccountApiController`, prefix `v1.0/account-transfer`). The transfer endpoint requires request signature headers (`verify.signature-internal`). Both accounts must belong to the authenticated merchant and be accessible to the credential. - name: Disbursement (Money Out) description: >- Bank disbursement (`DisbursementController` **v1.0**, `DisbursementV2Controller` **v2.0**). **v1.0** list/show/fee/beneficiary/transfer use Flugg envelopes; v1 inquiry-status uses the **custom v2 envelope** (`MerchantV2ApiEnvelope`, codes **SP000–SP020**). **v2.0** check-beneficiary, transfer, and inquiry-status use the same custom envelope — see component schema **`MerchantV2ResponseCode`** for the full response code table. - name: Cardless Withdrawal description: >- Cardless withdrawal API for initiating ATM cash withdrawals without a physical card. Supports creating withdrawals with OTP generation, listing transaction history, viewing transaction details, canceling pending withdrawals, and deleting canceled records. All endpoints use the `v1.0/cardless-withdrawals` route prefix and the standard success/error response envelope. Path parameter `{id}` refers to the `transaction_id` (platform-assigned business identifier). paths: /api/v1.0/qris-dynamic/{account_id}/generate-qr: post: tags: - QRIS (Money In) summary: Generate description: >- Generates a new MPM dynamic QRIS transaction for the specified account. Payment amount must be within merchant configuration limits. Optional expiration time may be provided. operationId: qrisDynamicGenerateQr parameters: - name: account_id in: path required: true schema: description: Account identifier in ULID format. type: string requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/GenerateQrisDynamicRequest' responses: '200': description: QRIS created content: application/json: schema: $ref: '#/components/schemas/ResponderSuccessQrisTransaction' '400': description: Missing QRIS prerequisite field or Danamon vendor error content: application/json: schema: $ref: '#/components/schemas/ResponderErrorEnvelope400' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ResponderErrorEnvelope401' '403': description: Access denied to this account content: application/json: schema: $ref: '#/components/schemas/ResponderErrorEnvelope403' '404': description: QRIS not found content: application/json: schema: $ref: '#/components/schemas/ResponderErrorEnvelope404' '422': description: Validation error (amount limits, `expired_at`, etc.) content: application/json: schema: $ref: '#/components/schemas/ResponderErrorEnvelope422' '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ResponderErrorEnvelope500' security: - BearerAuth: [] PartnerId: [] components: schemas: GenerateQrisDynamicRequest: required: - amount properties: amount: description: >- Payment amount for the dynamic QRIS. Minimum and maximum limits depend on merchant configuration. type: number example: 10000 expired_at: description: >- Optional expiration datetime. When provided, must be later than the current time. type: string format: date-time example: '2024-05-13T00:00:00Z' merchant_reff_no: description: Optional merchant reference number for this QRIS transaction. type: - string - 'null' maxLength: 255 example: INV20240513001 type: object ResponderSuccessQrisTransaction: required: - status - success - data properties: status: description: HTTP status code. type: integer example: 200 success: description: Indicates whether the request was successful. type: boolean example: true data: $ref: '#/components/schemas/QrisTransactionResource' description: QRIS transaction resource payload. type: object ResponderErrorEnvelope400: required: - status - success - error properties: status: type: integer example: 400 success: type: boolean example: false error: $ref: '#/components/schemas/ResponderErrorBody400' type: object ResponderErrorEnvelope401: required: - status - success - error properties: status: type: integer example: 401 success: type: boolean example: false error: $ref: '#/components/schemas/ResponderErrorBody401' type: object ResponderErrorEnvelope403: required: - status - success - error properties: status: type: integer example: 403 success: type: boolean example: false error: $ref: '#/components/schemas/ResponderErrorBody403' type: object ResponderErrorEnvelope404: required: - status - success - error properties: status: type: integer example: 404 success: type: boolean example: false error: $ref: '#/components/schemas/ResponderErrorBody404' type: object ResponderErrorEnvelope422: required: - status - success - error properties: status: type: integer example: 422 success: type: boolean example: false error: $ref: '#/components/schemas/ResponderErrorBody422' data: type: object example: errors: field: - error message additionalProperties: true type: object ResponderErrorEnvelope500: required: - status - success - error properties: status: type: integer example: 500 success: type: boolean example: false error: $ref: '#/components/schemas/ResponderErrorBody500' type: object QrisTransactionResource: description: >- QRIS transaction resource returned by the API for MPM static and dynamic payments. properties: id: description: >- QRIS transaction identifier. Use this value as `{id}` in path parameters. type: integer example: 103 reff_no: description: System-generated reference number for the QRIS transaction. type: string example: INV20240513001 merchant_reff_no: description: Merchant reference number associated with the transaction. type: - string - 'null' example: INV20240513001 status: description: Configured transaction status. type: string example: open status_computed: description: System-computed status based on transaction state and expiration. type: string example: open is_expired: description: Whether the QRIS transaction is currently expired. type: boolean example: false qr_data: description: QR code payload string for customer scanning. type: - string - 'null' example: 00020101021226620015ID.SINGAPAY.WWW... kind: description: QRIS kind or variant when applicable. type: - string - 'null' example: on-us type: description: Transaction type (for example MPM static or MPM dynamic). type: string example: mpm-dynamic amount: description: Base payment amount before tip. type: number example: 10000 total_amount: description: Total amount paid including tip. type: number example: 10000 mdr_percentage: description: Merchant discount rate percentage applied to the transaction. type: - number - 'null' example: 1.5 mdr_cost: description: Merchant discount rate cost amount. type: - number - 'null' example: 150 our_margin: description: Platform margin amount for the transaction. type: - number - 'null' example: 50 vendor_fee: description: Payment vendor fee amount. type: - number - 'null' example: 150 settled_to_merchant_amount: description: Net amount settled to the merchant. type: - number - 'null' example: 9750 acquirer_name: description: Name of the acquiring institution. type: - string - 'null' example: SingaPay acquirer_nns: description: Acquirer NNS identifier. type: - string - 'null' example: '1234567890' issuer_name: description: Name of the issuing institution. type: - string - 'null' example: SingaPay issuer_nns: description: Issuer NNS identifier. type: - string - 'null' example: '1234567890' customer_pan: description: Customer primary account number when available. type: - string - 'null' example: '1234567890' customer_name: description: Customer name from the payment source. type: - string - 'null' example: John Doe customer_account_type: description: Customer account type from the payment source. type: - string - 'null' example: UNSPECIFIED customer_data: description: Additional customer data returned from the payment network. type: - object - 'null' example: pan: '1234567890' name: John Doe account_type: UNSPECIFIED additionalProperties: true has_reconcile: description: Whether the transaction has been reconciled. type: boolean example: false reconcile_at: description: Reconciliation datetime in ISO 8601 format. type: - string - 'null' example: '2024-05-13T00:00:00Z' reconcile_by: description: Actor or system that performed reconciliation. type: - string - 'null' example: SYSTEM had_settled_to_merchant: description: Whether settlement to merchant has occurred. type: boolean example: false settled_to_merchant_at: description: Settlement-to-merchant datetime in ISO 8601 format. type: - string - 'null' example: '2024-05-13T00:00:00Z' has_settle: description: Whether the transaction has been settled. type: boolean example: false settle_at: description: Settlement datetime in ISO 8601 format. type: - string - 'null' example: '2024-05-13T00:00:00Z' created_at: description: Resource creation datetime in ISO 8601 format. type: string example: '2024-05-13T00:00:00Z' updated_at: description: Last update datetime in ISO 8601 format. type: string example: '2024-05-13T00:00:00Z' expired_at: description: Expiration datetime in ISO 8601 format. type: - string - 'null' example: '2024-05-13T00:00:00Z' deleted_at: description: Soft-deletion datetime in ISO 8601 format when applicable. type: - string - 'null' example: '2024-05-13T00:00:00Z' events_count: description: Number of related transaction events recorded. type: integer example: 1 type: object ResponderErrorBody400: properties: code: type: integer example: 400 message: type: string example: Bad Request. type: object ResponderErrorBody401: properties: code: type: integer example: 401 message: type: string example: Unauthorized merchant, please sign in type: object ResponderErrorBody403: properties: code: type: integer example: 403 message: type: string example: Access denied. type: object ResponderErrorBody404: properties: code: type: integer example: 404 message: type: string example: Account not found. type: object ResponderErrorBody422: properties: code: type: integer example: 422 message: type: string example: Validation error. errors: type: object example: field: - error message type: object ResponderErrorBody500: properties: code: type: integer example: 500 message: type: string example: Internal server error. type: object securitySchemes: BearerAuth: type: http description: >- JWT issued by `POST /api/v1.1/access-token/b2b`. Send `Authorization: Bearer `. bearerFormat: JWT scheme: bearer PartnerId: type: apiKey description: Merchant API key (`Credential.api_key`). Required on every request. name: X-PARTNER-ID in: header ````