UPI API
The seamless UPI API flow allows merchants to collect UPI payments. The primary API is used to create a collect request to customers phone. Once the payment is confirmed a callback will be sent to the notifyUrl. As an alternate, Order Status API also can be used to poll the status of the order. To improve the success rates, Validate VPA API can also be used.
Collect: Send a collect request to a particular user VPA. (Default method)
Google Pay: Send direct notification to google pay for the customers to make the payment. Customers can also enter the phone number to complete the payment. To use this mode, verify your VPA and do a penny test on the Google Pay Dashboard. Google Pay will send the MID to Cashfree. This will enable GPay OMNI channel flow.
QR Code: Customer can scan and pay the QR code using any UPI app.
Link: Pay using a UPI scheme link using any UPI app.
Intent: Customers select the UPI app in the device to make the payment. Click here to know more.
URL | Environment |
Test | |
Production |
Parameter | Required | Description |
appId | Yes | Your app id |
secretKey | Yes | Your Secret Key |
orderId | Yes | Order/Invoice Id |
orderAmount | Yes | Bill amount of the order |
orderCurrency | No | Currency for the order. INR if this parameter is left empty. See the Currency Codes below for a list of available currencies. Write to [email protected] to enable new currencies. |
orderNote | No | A help text to make customers know more about the order. |
customerName | Yes | Name of the customer |
customerPhone | Yes | Phone number of customer |
customerEmail | Yes | Email ID of the customer |
returnUrl | Yes | Return URL to which user will be redirected after the payment (max-length is 500) |
notifyUrl | No | Notification URL for server-server communication. Useful when user’s connection drops while re-directing (max-len 500) notifyUrl should be an https URL |
signature | Yes | Request signature |
paymentOption | Yes | Value should be "upi" |
responseType | Yes | Value should be "json" |
upiMode | No | The mode of UPI request that is being used. By default, a collect request is raised. Optional Values are as follows - 1. ‘gpay’(Google Pay) which will use customerPhone instead of upi_vpa parameter to send notification directly to Google Pay app 2. ’qrcode’ this will provide with qrCode in response 3. ’link’ this will provide the UPI pay scheme link as response |
upi_vpa | Yes | User VPA for the transaction. Not required for upiMode = ‘gpay’,’qrcode’,’link’. Mandatory for other collect requests. |
Parameter | Type | Description |
status | String | Status of API call “OK”, “ERROR” |
orderId | String | Order/Invoice Id |
referenceId | String | ReferenceId of the UPI transaction |
message | String | Message if any |
qr | String | Base64 png image. This is returned when upiMode ‘qrcode’ is used |
link | String | UPI scheme link that can be used to pay using a UPI app returned when upiMode ‘link’ is used |
Request Sample
curl -X POST \https://test.cashfree.com/billpay/checkout/post/submit \-H 'Cache-Control: no-cache' \-H 'content-type: multipart/form-data' \-F appId=MTA2OTkyMDE1ODE0NDIyNTExNjYjI \-F orderId=A001 \-F orderAmount=1 \-F customerName=Test \-F customerPhone=9895270649 \-F [email protected] \-F returnUrl= ""\-F notifyUrl=https://test.cashfree.com/notify.php \-F responseType=json \-F paymentOption=upi \-F [email protected] \-F signature=0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA=
<?php$curl = curl_init();curl_setopt_array($curl, array(CURLOPT_URL => 'https://test.cashfree.com/billpay/checkout/post/submit',CURLOPT_RETURNTRANSFER => true,CURLOPT_ENCODING => '',CURLOPT_MAXREDIRS => 10,CURLOPT_TIMEOUT => 0,CURLOPT_FOLLOWLOCATION => true,CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,CURLOPT_CUSTOMREQUEST => 'POST',CURLOPT_POSTFIELDS =>'{"appId": "MTA2OTkyMDE1ODE0NDIyNTExNjYjI","orderId": "A001","orderAmount": "1","customerName": "Test","customerPhone": "9895270649","customerEmail": "[email protected]","returnUrl": "[email protected]","responseType": "json","notifyUrl": "test.cashfree.com/notify.php","paymentOption": "upi","upi_vpa": "[email protected]","signature": "0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA="}',CURLOPT_HTTPHEADER => array('Cache-Control: no-cache','content-type: multipart/form-data'),));$response = curl_exec($curl);curl_close($curl);echo $response;
OkHttpClient client = new OkHttpClient().newBuilder().build();MediaType mediaType = MediaType.parse("multipart/form-data");RequestBody body = new MultipartBody.Builder().setType(MultipartBody.FORM).addFormDataPart("appId", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI").addFormDataPart("orderId", "A001").addFormDataPart("orderAmount", "1").addFormDataPart("responseType", "json").addFormDataPart("paymentOption", "upi").addFormDataPart("customerEmail", "[email protected]").addFormDataPart("customerName", "Test").addFormDataPart("customerPhone", "9999999999").addFormDataPart("returnUrl", "[email protected]").addFormDataPart("notifyUrl", "test.cashfree.com/notify.php").addFormDataPart("upi_vpa", "[email protected]").addFormDataPart("signature", "0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA").build();RequestBody body = RequestBody.create(mediaType, "{\n \"appId\": \"MTA2OTkyMDE1ODE0NDIyNTExNjYjI\",\n \"orderId\": \"A001\",\n \"orderAmount\": \"1\",\n \"customerName\": \"Test\",\n \"customerPhone\": \"9895270649\",\n \"customerEmail\": \"[email protected]\",\n \"returnUrl\": \"[email protected]\",\n \"responseType\": \"json\",\n \"notifyUrl\": \"test.cashfree.com/notify.php\",\n \"paymentOption\": \"upi\",\n \"upi_vpa\": \"[email protected]\",\n \"signature\": \"0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA=\"\n}");Request request = new Request.Builder().url("https://test.cashfree.com/billpay/checkout/post/submit").method("POST", body).addHeader("Cache-Control", "no-cache").addHeader("content-type", "multipart/form-data").build();Response response = client.newCall(request).execute();
package mainimport ("fmt""strings""net/http""io/ioutil")func main() {url := "https://test.cashfree.com/billpay/checkout/post/submit"method := "POST"payload := strings.NewReader(`{"appId": "MTA2OTkyMDE1ODE0NDIyNTExNjYjI","orderId": "A001","orderAmount": "1","customerName": "Test","customerPhone": "9895270649","customerEmail": "[email protected]","returnUrl": "[email protected]","responseType": "json","notifyUrl": "test.cashfree.com/notify.php","paymentOption": "upi","upi_vpa": "[email protected]","signature": "0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA="}`)client := &http.Client {}req, err := http.NewRequest(method, url, payload)if err != nil {fmt.Println(err)return}req.Header.Add("Cache-Control", "no-cache")req.Header.Add("content-type", "multipart/form-data")res, err := client.Do(req)if err != nil {fmt.Println(err)return}defer res.Body.Close()body, err := ioutil.ReadAll(res.Body)if err != nil {fmt.Println(err)return}fmt.Println(string(body))}
import http.clientconn = http.client.HTTPSConnection("test.cashfree.com")payload = "{\n \"appId\": \"MTA2OTkyMDE1ODE0NDIyNTExNjYjI\",\n \"orderId\": \"A001\",\n \"orderAmount\": \"1\",\n \"customerName\": \"Test\",\n \"customerPhone\": \"9895270649\",\n \"customerEmail\": \"[email protected]\",\n \"returnUrl\": \"[email protected]\",\n \"responseType\": \"json\",\n \"notifyUrl\": \"test.cashfree.com/notify.php\",\n \"paymentOption\": \"upi\",\n \"upi_vpa\": \"[email protected]\",\n \"signature\": \"0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA=\"\n}"headers = {'Cache-Control': 'no-cache','content-type': 'multipart/form-data'}conn.request("POST", "/billpay/checkout/post/submit", payload, headers)res = conn.getresponse()data = res.read()print(data.decode("utf-8"))
var client = new RestClient("https://test.cashfree.com/billpay/checkout/post/submit");client.Timeout = -1;var request = new RestRequest(Method.POST);request.AddHeader("Cache-Control", "no-cache");request.AddHeader("content-type", "multipart/form-data");request.AddParameter("multipart/form-data", "{\n \"appId\": \"MTA2OTkyMDE1ODE0NDIyNTExNjYjI\",\n \"orderId\": \"A001\",\n \"orderAmount\": \"1\",\n \"customerName\": \"Test\",\n \"customerPhone\": \"9895270649\",\n \"customerEmail\": \"[email protected]\",\n \"returnUrl\": \"[email protected]\",\n \"responseType\": \"json\",\n \"notifyUrl\": \"test.cashfree.com/notify.php\",\n \"paymentOption\": \"upi\",\n \"upi_vpa\": \"[email protected]\",\n \"signature\": \"0LqbexARvzFuKfMg0I6GoUunr7239G5gZdZZGAXNMXA=\"\n}", ParameterType.RequestBody);IRestResponse response = client.Execute(request);Console.WriteLine(response.Content);
Parameter | Description |
orderId | Order id for which transaction has been processed. Ex: GZ-212” |
orderAmount | Amount of the order. Ex: 256.00 |
referenceId | transaction reference id, if payment has been attempted |
txStatus | Transaction status, if a payment has been attempted |
paymentMode | payment mode of transaction, if payment has been attempted |
txMsg | transaction message, if payment has been attempted |
txTime | transaction time, if payment has been attempted |
signature | response signature |
Cashfree uses API keys to allow access to the API. Once you have signed up at our merchant site, you will be able to retrieve your AppId and SecretKey. Click here to view the merchant appId and secret key.
Cashfree expects API key to be included in all API requests to the server. Use the endpoint /api/v1/credentials/verify to verify your credentials first.
URL | Environment |
Test | |
Production |
Parameter | Type | Description |
X-Client-Id | String | Your app id |
X-Client-Secret | String | Secret Key |
Content-Type | String | Application/JSON |
Validate customers VPA before initiating the payment to improve the transaction conversion rate.
GET /upi/validate/@vpa
Parameter | Type | Description |
vpa | String | UPI VPA of the user |
Parameter | Type | Description |
status | String | Status of API call “OK”, “ERROR” |
valid | String | VPA validation status- True or False |
name | String | VPA User Name this can be “NA” in some cases |
vpa | String | UPI VPA of the user |
Request Sample
curl -X GET \http://test.cashfree.com/api/v2/upi/validate/[email protected] \-H 'Cache-Control: no-cache' \-H 'X-Client-Id: MTA2OTkyMDE1ODE0NDIyNTExNjYjI \-H 'X-Client-Secret: 63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63
<?php$curl = curl_init();curl_setopt_array($curl, array(CURLOPT_URL => 'http://test.cashfree.com/api/v2/upi/validate/[email protected]',CURLOPT_RETURNTRANSFER => true,CURLOPT_ENCODING => '',CURLOPT_MAXREDIRS => 10,CURLOPT_TIMEOUT => 0,CURLOPT_FOLLOWLOCATION => true,CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,CURLOPT_CUSTOMREQUEST => 'GET',CURLOPT_HTTPHEADER => array('Cache-Control: no-cache','X-Client-Id: MTA2OTkyMDE1ODE0NDIyNTExNjYjI','X-Client-Secret: 63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63'),));$response = curl_exec($curl);curl_close($curl);echo $response;
OkHttpClient client = new OkHttpClient().newBuilder().build();Request request = new Request.Builder().url("http://test.cashfree.com/api/v2/upi/validate/[email protected]").method("GET", null).addHeader("Cache-Control", "no-cache").addHeader("X-Client-Id", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI").addHeader("X-Client-Secret", "63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63").build();Response response = client.newCall(request).execute();
package mainimport ("fmt""net/http""io/ioutil")func main() {url := "http://test.cashfree.com/api/v2/upi/validate/[email protected]"method := "GET"client := &http.Client {}req, err := http.NewRequest(method, url, nil)if err != nil {fmt.Println(err)return}req.Header.Add("Cache-Control", "no-cache")req.Header.Add("X-Client-Id", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI")req.Header.Add("X-Client-Secret", "63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63")res, err := client.Do(req)if err != nil {fmt.Println(err)return}defer res.Body.Close()body, err := ioutil.ReadAll(res.Body)if err != nil {fmt.Println(err)return}fmt.Println(string(body))}
<?php$curl = curl_init();curl_setopt_array($curl, array(CURLOPT_URL => 'http://test.cashfree.com/api/v2/upi/validate/[email protected]',CURLOPT_RETURNTRANSFER => true,CURLOPT_ENCODING => '',CURLOPT_MAXREDIRS => 10,CURLOPT_TIMEOUT => 0,CURLOPT_FOLLOWLOCATION => true,CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,CURLOPT_CUSTOMREQUEST => 'GET',CURLOPT_HTTPHEADER => array('Cache-Control: no-cache','X-Client-Id: MTA2OTkyMDE1ODE0NDIyNTExNjYjI','X-Client-Secret: 63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63'),));$response = curl_exec($curl);curl_close($curl);echo $response;
var client = new RestClient("http://test.cashfree.com/api/v2/upi/validate/[email protected]");client.Timeout = -1;var request = new RestRequest(Method.GET);request.AddHeader("Cache-Control", "no-cache");request.AddHeader("X-Client-Id", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI");request.AddHeader("X-Client-Secret", "63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63");IRestResponse response = client.Execute(request);Console.WriteLine(response.Content);
To check the status of the orders.
GET /orders/@orderId/status
Parameter | Type | Description |
orderId | String | OrderId used for creating the payment |
Parameter | Description |
status | Status of API call “OK”, “ERROR” |
txStatus | Transaction status, if a payment has been attempted |
txMsg | Transaction message, if payment has been attempted |
txTime | Transaction time, if payment has been attempted |
referenceId | Transaction time, if payment has been attempted |
paymentMode | Payment mode of transaction, if payment has been attempted |
orderCurrency | Currency of the order |
txTime | Transaction time, if payment has been attempted |
paymentDetails.paymentMode | Payment mode of transaction, if payment has been attempted |
paymentDetails.bankName | Name of the bank if payment has been attempted (only for Netbanking) |
paymentDetails.cardNumber | Masked card number if payment has been attempted(only in case of Debit & Credit Cards) |
paymentDetails.cardCountry | Country code of the card if payment has been attempted (only in case of Debit & Credit Cards) |
paymentDetails.cardScheme | Scheme of the card (eg: VISA) if payment has been attempted (only in case of Debit & Credit Cards) |
paymentDetails.utr | UTR of UPI transaction (only in case of UPI) |
Request Sample
curl -X GET \http://test.cashfree.com/api/v2/orders/1540568899/status \-H 'Cache-Control: no-cache' \-H 'X-Client-Id: MTA2OTkyMDE1ODE0NDIyNTExNjYjI \-H 'X-Client-Secret: 63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63
<?php$curl = curl_init();curl_setopt_array($curl, array(CURLOPT_URL => 'http://test.cashfree.com/api/v2/orders/1540568899/status',CURLOPT_RETURNTRANSFER => true,CURLOPT_ENCODING => '',CURLOPT_MAXREDIRS => 10,CURLOPT_TIMEOUT => 0,CURLOPT_FOLLOWLOCATION => true,CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,CURLOPT_CUSTOMREQUEST => 'GET',CURLOPT_HTTPHEADER => array('Cache-Control: no-cache','X-Client-Id: MTA2OTkyMDE1ODE0NDIyNTExNjYjI','X-Client-Secret: 63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63'),));$response = curl_exec($curl);curl_close($curl);echo $response;
OkHttpClient client = new OkHttpClient().newBuilder().build();Request request = new Request.Builder().url("http://test.cashfree.com/api/v2/orders/1540568899/status").method("GET", null).addHeader("Cache-Control", "no-cache").addHeader("X-Client-Id", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI").addHeader("X-Client-Secret", "63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63").build();Response response = client.newCall(request).execute();
package mainimport ("fmt""net/http""io/ioutil")func main() {url := "http://test.cashfree.com/api/v2/orders/1540568899/status"method := "GET"client := &http.Client {}req, err := http.NewRequest(method, url, nil)if err != nil {fmt.Println(err)return}req.Header.Add("Cache-Control", "no-cache")req.Header.Add("X-Client-Id", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI")req.Header.Add("X-Client-Secret", "63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63")res, err := client.Do(req)if err != nil {fmt.Println(err)return}defer res.Body.Close()body, err := ioutil.ReadAll(res.Body)if err != nil {fmt.Println(err)return}fmt.Println(string(body))}
import http.clientconn = http.client.HTTPSConnection("test.cashfree.com")payload = ''headers = {'Cache-Control': 'no-cache','X-Client-Id': 'MTA2OTkyMDE1ODE0NDIyNTExNjYjI','X-Client-Secret': '63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63'}conn.request("GET", "/api/v2/orders/1540568899/status", payload, headers)res = conn.getresponse()data = res.read()print(data.decode("utf-8"))
var client = new RestClient("http://test.cashfree.com/api/v2/orders/1540568899/status");client.Timeout = -1;var request = new RestRequest(Method.GET);request.AddHeader("Cache-Control", "no-cache");request.AddHeader("X-Client-Id", "MTA2OTkyMDE1ODE0NDIyNTExNjYjI");request.AddHeader("X-Client-Secret", "63ca0b83c8ca85d73fff9c3fd29a7c87e292fd63");IRestResponse response = client.Execute(request);Console.WriteLine(response.Content);
