ShieldClimb

<p>Enhance your WooCommerce store by accepting cryptocurrency payments seamlessly. This plugin enables instant crypto payments directly on your website with automatic payouts to your wallet—no intermediaries, no holds, and no verification requirements.</p>
<p>Each transaction generates a unique wallet address and QR code, ensuring smooth and secure payments while maintaining complete privacy. Our system automatically detects payments and forwards them to your wallet, even if the customer sends funds via the wrong token or network (for supported cryptocurrencies).</p>
<p>Why choose ShieldClimb’s Crypto Payment Gateway?</p>
<ul>
<li>No Registration & No KYC – Start accepting payments instantly.</li>
<li>Instant Payouts – Funds are forwarded directly to your wallet with no delays.</li>
<li>Fully On-Site Payment Process – Customers pay on your website without redirections.</li>
<li>Automatic Payment Detection – Orders are marked as paid instantly.</li>
<li>Seamless multi-network and multi-currency support – accept crypto payments across multiple blockchains with ease.</li>
<li>Privacy & Security – Unique wallet addresses for every order enhance anonymity.</li>
</ul>
<h3>Features</h3>
<ul>
<li>Auto-Hide Coins Below Minimum – Coins that do not meet the minimum threshold will be automatically removed from checkout.</li>
<li>Automatic Payment Detection & Order Processing – Orders are marked as paid automatically.</li>
<li>Instant Access & Approval – No sign-ups, no verifications.</li>
<li>No Holding of Funds – Payments are forwarded instantly to your wallet.</li>
<li>Unique Wallet Address per Order – Enhances payment tracking and privacy.</li>
<li>QR Code Integration – Customers can easily scan and pay.</li>
<li>Intelligent Misdirected Payment Handling – If a customer sends funds via an incorrect network/token, the system still forwards them to you for supported cryptocurrencies.</li>
<li>Low Fees – 1.5% flat rate + blockchain transaction fees.</li>
<li>Track Transactions in WP-Admin – View TXIDs and payouts within WooCommerce.</li>
<li>Borderless Payments – Accept crypto globally without restrictions.</li>
</ul>
<p>📺 <strong>Watch the full install and setup tutorial here:</strong><br />
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/M_QZMqRItxM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>ShieldClimb API – Third-Party Service Documentation</h3>
<p>The plugin and offered service through <a href="https://shieldclimb.com/" rel="nofollow ugc">shieldclimb.com Crypto Payment Gateway API</a> is subject to the <a href="https://shieldclimb.com/terms-of-service/" rel="nofollow ugc">service terms</a> and <a href="https://shieldclimb.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>.</p>
<h3>Coingecko API – Third-Party Service Documentation</h3>
<p>This plugin integrates the <a href="https://www.coingecko.com/" rel="nofollow ugc">Coingecko API</a> to fetch cryptocurrency exchange rates, ensuring that payment options are accurately hidden below the correct minimum threshold.</p>
<p>It is subject to the <a href="https://www.coingecko.com/en/terms" rel="nofollow ugc">service terms</a> and <a href="https://www.coingecko.com/en/privacy" rel="nofollow ugc">Privacy Policy</a>.</p>
<h3>Frankfurter API – Third-Party Service Documentation</h3>
<p>This plugin integrates the <a href="https://frankfurter.dev/" rel="nofollow ugc">Frankfurter API</a> to fetch exchange rates, ensuring that payment options are accurately hidden below the correct minimum threshold across stores with different currencies.</p>
<h4>Terms of Service & Privacy Policy</h4>
<ul>
<li>The Frankfurter API does not have official Terms of Service or a standalone Privacy Policy.</li>
<li>According to their website, the API does not collect personal data, but it runs behind Cloudflare for performance, which may collect basic analytics data.</li>
<li>More details can be found on their website: https://frankfurter.dev/</li>
</ul>
<h4>Data Usage & Processing</h4>
<ul>
<li>This plugin does not send any personal user data to the <a href="https://frankfurter.dev/" rel="nofollow ugc">Frankfurter API</a>.</li>
<li>Only currency codes and requested exchange rates are sent in API requests.</li>
<li>All data comes from the European Central Bank, and the API provides it as-is.</li>
</ul>


ShieldClimb – Crypto Payment Gateway for WooCommerce

Crypto Payment Gateway with instant payouts—accept cryptocurrency with no registration, no KYC, and no delays. Your crypto, your control.

SouthPay

<p>SouthPay Crypto Payment Gateway lets your WooCommerce store accept cryptocurrency payments through SouthPay’s secure hosted checkout. Connect in one click via OAuth, and the plugin handles webhook setup, token refresh, and on-chain confirmation automatically — no key copy-pasting and no manual webhook configuration.</p>
<p>Customers are redirected to a secure SouthPay-hosted checkout where they can pay using supported cryptocurrencies. The order status updates automatically via webhook once payment is confirmed on-chain.</p>
<h3>Features</h3>
<ul>
<li>One-click “Connect with SouthPay” — OAuth 2.0 with PKCE, no key copy-pasting</li>
<li>Automatic background token refresh — the connection stays live without merchant action</li>
<li>Accept cryptocurrency payments via a hosted checkout</li>
<li>Automatic order status updates via secure webhooks</li>
<li>Automatic webhook endpoint registration after first connection</li>
<li>HMAC-SHA256 webhook signature verification</li>
<li>Configurable invoice prefix</li>
<li>Minimum order amount filter</li>
<li>Debug logging via WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Status <span aria-hidden="true" class="wp-exclude-emoji">→</span> Logs</li>
<li>Customisable checkout title and description</li>
<li>Block checkout (Gutenberg) support</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.8 or higher</li>
<li>WooCommerce 6.0 or higher</li>
<li>PHP 7.4 or higher (cURL and OpenSSL extensions enabled)</li>
<li>HTTPS on your store domain — required for OAuth redirect and webhook delivery</li>
<li>A publicly reachable site URL so SouthPay can POST webhook events</li>
<li>A SouthPay merchant account at https://southpay.io/</li>
</ul>
<h3>Configuration</h3>
<p>All settings live at <strong>WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Payments <span aria-hidden="true" class="wp-exclude-emoji">→</span> SouthPay</strong>.</p>
<p><strong>Your SouthPay Account</strong></p>
<ul>
<li><strong>Status</strong> — shows the current connection state (Connected, Disconnected, or Reconnect Required) and the connected store name.</li>
<li><strong>Connect / Disconnect</strong> — manages the OAuth connection. Disconnecting revokes the refresh-token family on SouthPay’s side, not just the local copy.</li>
<li><strong>API Key</strong> — only used as a manual fallback when OAuth isn’t possible (see <em>Authentication</em> below). Leave blank in the normal OAuth flow.</li>
</ul>
<p><strong>Checkout Appearance</strong></p>
<ul>
<li><strong>Payment Method Name</strong> — what customers see at checkout (default: <em>SouthPay</em>). Customise this to something like “Pay with Crypto”.</li>
<li><strong>Payment Method Description</strong> — short text shown below the name at checkout.</li>
</ul>
<p><strong>Advanced</strong></p>
<ul>
<li><strong>Minimum Order Amount</strong> — hides SouthPay at checkout when the cart total is below this value. Set to <code>0</code> to always show it. Default: <code>1</code>.</li>
<li><strong>Order Reference Prefix</strong> — prepended to the order number sent to SouthPay (default: <code>WC-</code>), so orders are easy to identify in the SouthPay dashboard.</li>
<li><strong>Debug Logging</strong> — writes detailed request/response logs to <strong>WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Status <span aria-hidden="true" class="wp-exclude-emoji">→</span> Logs</strong> under the <code>southpay</code> source. Enable only when troubleshooting; the logs can contain order metadata.</li>
</ul>
<h3>Authentication</h3>
<p>The plugin uses <strong>OAuth 2.0 with PKCE</strong> and the <code>offline_access</code> scope, so the connection survives access-token expiry without merchant intervention:</p>
<ul>
<li>Access tokens are short-lived (one hour) and refreshed automatically before each API call.</li>
<li>Refresh tokens rotate on every use, and the previous refresh token is invalidated server-side.</li>
<li>If the refresh-token family is ever revoked (for example, an admin clicks <em>Disconnect</em> in the SouthPay dashboard), the plugin surfaces a <strong>Reconnect your account</strong> admin notice in WooCommerce and the gateway is hidden at checkout until reconnected.</li>
<li>Disconnecting from the WooCommerce side calls SouthPay’s revoke endpoint to invalidate the entire token family — not just the locally cached access token.</li>
</ul>
<p><strong>Manual API Key fallback.</strong> For environments without browser access (air-gapped boxes, whitelabel deployments, automated provisioning), paste a long-lived API key from <strong>SouthPay Dashboard <span aria-hidden="true" class="wp-exclude-emoji">→</span> Developers <span aria-hidden="true" class="wp-exclude-emoji">→</span> API Keys</strong> into the <strong>API Key</strong> field. This mode bypasses OAuth and does not auto-refresh; you are responsible for rotating the key yourself. The webhook still needs to be created manually in this mode.</p>
<h3>Webhook Setup</h3>
<p>In the standard OAuth flow there is nothing to configure — the plugin registers a webhook endpoint pointing at your site automatically the first time you connect, and stores the signing secret locally.</p>
<ul>
<li>The active endpoint URL is shown in the <strong>Webhook URL</strong> row on the settings page (it is the WooCommerce REST route <code>/wc-api/southpay_webhook</code>).</li>
<li>Every inbound delivery is signed with <strong>HMAC-SHA256</strong> over the raw request body plus a timestamp. The plugin rejects requests with a missing, malformed, or stale signature before any order state is touched.</li>
<li>If you ever need to rotate the signing secret (for example, after a security incident or when migrating environments), click <strong>Reconnect webhook</strong> on the settings page. The plugin will deregister the old endpoint and create a new one with a fresh secret in one step.</li>
</ul>
<h3>How It Works</h3>
<ol>
<li>The customer selects SouthPay at checkout and clicks <strong>Place order</strong>.</li>
<li>WooCommerce creates the order with status <strong>Pending payment</strong>.</li>
<li>The plugin calls <code>POST https://api.southpay.io/api/v2/payments</code> with the order total, currency, order reference, and return URLs to create a hosted-checkout session.</li>
<li>The customer is redirected to SouthPay’s hosted checkout, where they choose a cryptocurrency, see the quoted amount and exchange rate, and send the funds from their wallet.</li>
<li>Once the transaction is confirmed on-chain, SouthPay POSTs a signed webhook to your store.</li>
<li>The plugin verifies the HMAC-SHA256 signature, matches the event to the WooCommerce order, and transitions the order:
<ul>
<li><strong>paid</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> order moves to <em>Processing</em> (or <em>Completed</em> for virtual orders), and a payment note is added.</li>
<li><strong>expired</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> order moves to <em>Cancelled</em>.</li>
<li><strong>failed</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> order moves to <em>Failed</em>; the customer can retry from the order-pay page.</li>
</ul>
</li>
<li>The customer is redirected back to your store’s order-received page.</li>
</ol>
<p>All state transitions are driven by webhooks — the customer’s browser returning is not required to mark the order as paid.</p>
<h3>External Services</h3>
<p>This plugin connects to the SouthPay API to create cryptocurrency payment sessions and receive order status updates via webhook. Connection to this service is required for the gateway to function.</p>
<p>When a customer places an order using SouthPay as the payment method, the plugin sends the order total, currency, and return URLs to https://api.southpay.io/api/v2/payments to generate a hosted checkout session. No data is sent at any other time during normal store operation.</p>
<p>This service is provided by SouthPay: https://southpay.io/<br />
Terms of service: https://southpay.io/terms<br />
Privacy policy: https://southpay.io/privacy</p>


SouthPay Crypto Payment Gateway

Accept cryptocurrency payments in WooCommerce via SouthPay's hosted checkout, with one-click OAuth connect and automatic webhook registration.

ShieldClimb – Crypto Payment Gateway for WooCommerce vs SouthPay Crypto Payment Gateway