Trigger Payment Credit

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "reference_number": "INV-20231130-001",
  "account_id": "01K946KF851RK7FX075GJHBVKF",
  "amount": 100000,
  "qr_data": "00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...",
  "customer_name": "John Doe",
  "customer_email": "john.doe@example.com",
  "customer_phone": "081234567890",
  "customer_location": "Jakarta"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit"

payload = {
    "reference_number": "INV-20231130-001",
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "amount": 100000,
    "qr_data": "00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...",
    "customer_name": "John Doe",
    "customer_email": "john.doe@example.com",
    "customer_phone": "081234567890",
    "customer_location": "Jakarta"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    reference_number: 'INV-20231130-001',
    account_id: '01K946KF851RK7FX075GJHBVKF',
    amount: 100000,
    qr_data: '00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...',
    customer_name: 'John Doe',
    customer_email: 'john.doe@example.com',
    customer_phone: '081234567890',
    customer_location: 'Jakarta'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'reference_number' => 'INV-20231130-001',
    'account_id' => '01K946KF851RK7FX075GJHBVKF',
    'amount' => 100000,
    'qr_data' => '00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...',
    'customer_name' => 'John Doe',
    'customer_email' => 'john.doe@example.com',
    'customer_phone' => '081234567890',
    'customer_location' => 'Jakarta'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit"

	payload := strings.NewReader("{\n  \"reference_number\": \"INV-20231130-001\",\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"amount\": 100000,\n  \"qr_data\": \"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...\",\n  \"customer_name\": \"John Doe\",\n  \"customer_email\": \"john.doe@example.com\",\n  \"customer_phone\": \"081234567890\",\n  \"customer_location\": \"Jakarta\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"reference_number\": \"INV-20231130-001\",\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"amount\": 100000,\n  \"qr_data\": \"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...\",\n  \"customer_name\": \"John Doe\",\n  \"customer_email\": \"john.doe@example.com\",\n  \"customer_phone\": \"081234567890\",\n  \"customer_location\": \"Jakarta\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"reference_number\": \"INV-20231130-001\",\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"amount\": 100000,\n  \"qr_data\": \"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...\",\n  \"customer_name\": \"John Doe\",\n  \"customer_email\": \"john.doe@example.com\",\n  \"customer_phone\": \"081234567890\",\n  \"customer_location\": \"Jakarta\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successful",
  "data": {
    "transaction_id": "112220251111135424691",
    "transaction_status": {
      "code": "03",
      "desc": "Pending"
    },
    "qr_data": "00020101021226620015ID.SINGAPAY.WWW0118936012070412260002021035224094080303UME51440014ID.CO.QRIS.WWW02153559174130477690303UME5204601153033605405110005802ID5903eos6005DEPOK6105746786221051017730486640703C0163044D76",
    "type": "mpm-dynamic",
    "scope": "issuer",
    "reference_number": "INV-20231130-001",
    "post_timestamp": "2023-11-30T12:34:56Z",
    "processed_timestamp": "2023-11-30T12:45:00Z",
    "balance_after": {
      "value": "100000.00",
      "currency": "IDR"
    },
    "net_amount": {
      "value": "95000.00",
      "currency": "IDR"
    },
    "fee": {
      "value": "5000.00",
      "currency": "IDR"
    },
    "gross_amount": {
      "value": "100000.00",
      "currency": "IDR"
    }
  }
}

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": []
}

{
  "response_code": "SP016",
  "response_message": "Signature Invalid",
  "data": {
    "message": "Unauthorized. Invalid X-SIGNATURE"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "message": "Unauthorized. Missing header X-SIGNATURE or X-Timestamp or X-PARTNER-ID"
  }
}

{
  "response_code": "SP002",
  "response_message": "Internal Server Error",
  "data": {
    "reference_number": "INV-20231130-001",
    "type": "mpm-dynamic",
    "scope": "issuer"
  }
}

{
  "response_code": "SP005",
  "response_message": "Timeout",
  "data": {
    "reference_number": "INV-20231130-001",
    "type": "mpm-dynamic",
    "scope": "issuer"
  }
}

QRIS (Money Out)

Trigger Payment Credit

Initiates an issuer-side MPM payment (money-out) from the merchant account. The endpoint creates a pending QrisTransaction, performs ledger debit and statement entries, and enqueues the vendor dispatch job. See Response Code for the full SP000–SP020 reference; final settlement is performed asynchronously. CRITICAL: This is a money-out operation requiring X-Signature and X-Timestamp authentication per internal signing protocol.

POST

api

v2.0

qris

issuer

mpm

payment-credit

Trigger Payment Credit

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "reference_number": "INV-20231130-001",
  "account_id": "01K946KF851RK7FX075GJHBVKF",
  "amount": 100000,
  "qr_data": "00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...",
  "customer_name": "John Doe",
  "customer_email": "john.doe@example.com",
  "customer_phone": "081234567890",
  "customer_location": "Jakarta"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit"

payload = {
    "reference_number": "INV-20231130-001",
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "amount": 100000,
    "qr_data": "00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...",
    "customer_name": "John Doe",
    "customer_email": "john.doe@example.com",
    "customer_phone": "081234567890",
    "customer_location": "Jakarta"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    reference_number: 'INV-20231130-001',
    account_id: '01K946KF851RK7FX075GJHBVKF',
    amount: 100000,
    qr_data: '00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...',
    customer_name: 'John Doe',
    customer_email: 'john.doe@example.com',
    customer_phone: '081234567890',
    customer_location: 'Jakarta'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'reference_number' => 'INV-20231130-001',
    'account_id' => '01K946KF851RK7FX075GJHBVKF',
    'amount' => 100000,
    'qr_data' => '00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...',
    'customer_name' => 'John Doe',
    'customer_email' => 'john.doe@example.com',
    'customer_phone' => '081234567890',
    'customer_location' => 'Jakarta'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit"

	payload := strings.NewReader("{\n  \"reference_number\": \"INV-20231130-001\",\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"amount\": 100000,\n  \"qr_data\": \"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...\",\n  \"customer_name\": \"John Doe\",\n  \"customer_email\": \"john.doe@example.com\",\n  \"customer_phone\": \"081234567890\",\n  \"customer_location\": \"Jakarta\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"reference_number\": \"INV-20231130-001\",\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"amount\": 100000,\n  \"qr_data\": \"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...\",\n  \"customer_name\": \"John Doe\",\n  \"customer_email\": \"john.doe@example.com\",\n  \"customer_phone\": \"081234567890\",\n  \"customer_location\": \"Jakarta\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v2.0/qris/issuer/mpm/payment-credit")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"reference_number\": \"INV-20231130-001\",\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"amount\": 100000,\n  \"qr_data\": \"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002...\",\n  \"customer_name\": \"John Doe\",\n  \"customer_email\": \"john.doe@example.com\",\n  \"customer_phone\": \"081234567890\",\n  \"customer_location\": \"Jakarta\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successful",
  "data": {
    "transaction_id": "112220251111135424691",
    "transaction_status": {
      "code": "03",
      "desc": "Pending"
    },
    "qr_data": "00020101021226620015ID.SINGAPAY.WWW0118936012070412260002021035224094080303UME51440014ID.CO.QRIS.WWW02153559174130477690303UME5204601153033605405110005802ID5903eos6005DEPOK6105746786221051017730486640703C0163044D76",
    "type": "mpm-dynamic",
    "scope": "issuer",
    "reference_number": "INV-20231130-001",
    "post_timestamp": "2023-11-30T12:34:56Z",
    "processed_timestamp": "2023-11-30T12:45:00Z",
    "balance_after": {
      "value": "100000.00",
      "currency": "IDR"
    },
    "net_amount": {
      "value": "95000.00",
      "currency": "IDR"
    },
    "fee": {
      "value": "5000.00",
      "currency": "IDR"
    },
    "gross_amount": {
      "value": "100000.00",
      "currency": "IDR"
    }
  }
}

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": []
}

{
  "response_code": "SP016",
  "response_message": "Signature Invalid",
  "data": {
    "message": "Unauthorized. Invalid X-SIGNATURE"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "message": "Unauthorized. Missing header X-SIGNATURE or X-Timestamp or X-PARTNER-ID"
  }
}

{
  "response_code": "SP002",
  "response_message": "Internal Server Error",
  "data": {
    "reference_number": "INV-20231130-001",
    "type": "mpm-dynamic",
    "scope": "issuer"
  }
}

{
  "response_code": "SP005",
  "response_message": "Timeout",
  "data": {
    "reference_number": "INV-20231130-001",
    "type": "mpm-dynamic",
    "scope": "issuer"
  }
}

Authorizations

Authorization

string

header

required

JWT issued by POST /api/v1.1/access-token/b2b. Send Authorization: Bearer <token>.

X-PARTNER-ID

string

header

required

Merchant API key (Credential.api_key). Required on every request.

Headers

X-Signature

string

required

HMAC-SHA512 hex signature, computed as HMAC_SHA512(clientSecret, "{HTTP_METHOD}:{REQUEST_URI}:{ACCESS_TOKEN}:{SHA256_HEX(MINIFIED_BODY)}:{X_TIMESTAMP}"). MINIFIED_BODY is the request body with object keys recursively sorted alphabetically and re-serialised with no whitespace (an empty/missing body hashes the empty string). ACCESS_TOKEN is the bearer token without the Bearer prefix. Missing header returns 422 (response_code=SP018); signature mismatch or unknown X-PARTNER-ID returns 401 (response_code=SP016).

X-Timestamp

string<date-time>

required

ISO-8601 timestamp of the request; used as part of the signed string. Missing header returns 422 (response_code=SP018).

Body

application/json

reference_number

string

required

Merchant idempotency key per account.

Maximum string length: 64

Example:

"INV-20231130-001"

account_id

string

required

Account ULID.

Maximum string length: 99

Example:

"01K946KF851RK7FX075GJHBVKF"

amount

number

required

Net amount to beneficiary side (IDR).

Required range: 1000 <= x <= 10000000

Example:

100000

qr_data

string

required

Maximum string length: 500

Example:

"00020101021226620015ID.SINGAPAY.WWW0118936012070412260002..."

customer_name

string

required

Maximum string length: 100

Example:

"John Doe"

customer_email

string | null

Maximum string length: 100

Example:

"john.doe@example.com"

customer_phone

string | null

Maximum string length: 50

Example:

"081234567890"

customer_location

string | null

Maximum string length: 100

Example:

"Jakarta"

Response

Request accepted. Transaction created and processing started asynchronously. data contains a QrisMoneyOutTransactionData snapshot (commonly status 03 — Pending).

API response envelope for successful QRIS money-out status inquiries. Conforms to the standard MerchantV2ApiEnvelope structure, with data containing a QrisMoneyOutTransactionData object representing the current state of the transaction.

response_code

string

Response code (see Response Code appendix) indicating the result of the inquiry. For successful inquiries, this is typically a code such as "00" or "SP000".

Example:

"SP000"

response_message

string

Human-readable message providing additional context about the response.

Example:

"Successful"

data

object

Inquiry status response data structure. Similar to QrisMoneyOutTransactionData but may be extended with additional fields relevant to status checks.

Show child attributes

Getting Started

Security

Accept Money

Send Money

Transaction Records

Money Accounts

Webhook

Trigger Payment Credit

Authorizations

Headers

Body

Response