Every payment. One gateway. Total control.
Accept payments from every major Malawian provider through one API and one console, with live analytics and reconciliation reports built in.
POST /api/v1/payments/initialize
Authorization: Bearer <access token>
Idempotency-Key: order-1001
{
"gateway": "onekhusa",
"method": "timed_transfer",
"amount": 25000,
"currency": "MWK",
"customer": { "name": "Thoko Phiri" },
"reference": "INV-2044"
}- PayChanguMobile money · Bank transfer
- OneKhusaTimed account transfer · Hosted checkout
Same response shape every time, plus a signed webhook when the payment settles.
- 0
- 0
- HMAC
Everything the money side of your business needs
One integration replaces the patchwork of providers, spreadsheets and manual reconciliations.
One integration, two gateways
Create payments on PayChangu and OneKhusa with the same request and the same response. No separate accounts, no separate code.
Live analytics
Volume, success rate and outcome mix are calculated from your ledger as payments settle.
Credentials you control
One credential per system, each with its own permissions. Rotate, disable or revoke any of them. The secret is shown once and only a one-way hash is kept.
Signed webhooks with retries
Receive a signed event when a payment settles. Deliveries your server misses are retried for up to 12 hours.
Reconciliation-ready reports
Export the transaction ledger, a daily settlement summary and provider performance as CSV for any date range.
Team access and support
Give colleagues only the access they need, and raise a request with the support team from inside the console.
Integrate in an afternoon, not a quarter
One JSON API for transactions, analytics, reports and provider health with a single, consistent error shape.
- Predictable JSON responses and pagination
- Stable error codes with readable messages
- Fully documented, endpoint by endpoint
# Create a payment from your server (token from POST /api/v1/auth/token)curl -X POST https://YOUR-GATEWAY/api/v1/payments/initialize \\ -H "Authorization: Bearer ACCESS_TOKEN" \\ -H "Idempotency-Key: order-1001" \\ -H "Content-Type: application/json" \\ -d '{"gateway":"paychangu","method":"mobile_money","operator":"airtel","amount":5000,"currency":"MWK","customer":{"name":"Chikondi Banda","phone":"0999123456"}}' # Response (201){ "status": "success", "data": { "id": "…", "status": "pending", "next_action": { … } } }Five layers between your money and everyone else
Security is not a feature toggle. Every account, key and transaction passes through the same hardened pipeline.
Funds movement requires explicit confirmation always.
01Encrypted credentials
Integration secrets are stored only as one-way hashes, and your systems sign in with short-lived access tokens. Passwords are hashed and never readable.
02Two-factor sign-in
Protect any account with an authenticator app and single-use backup codes.
03Cards stay with the provider
Card payments use the provider's hosted page. Card numbers never reach this gateway.
04Safe retries
Idempotency keys make sure a retried request can never charge a customer twice.
05Verified provider events
Provider callbacks are signature-checked, and a payment's status is confirmed with the provider before it is trusted.
Live in three steps
Request access
Register your company. The Cool Enterprises team reviews each new account before it can process payments.
Connect with your API keys
Generate credentials in the console, then create payments from your server with a single request.
Watch payments land
Track every payment, fee and failure on the dashboard and get a signed webhook when each one settles.
Questions, answered
Ready to see every payment in one place?
Request access today or sign back in and pick up right where you left off.