DEVELOPER DOCUMENTATION

Allora Merchant API

Base URL: https://pay.alloradigital.in

Create Payment

POST /api/v1/payment/create.php

X-API-KEY: YOUR_API_KEY X-TIMESTAMP: UNIX_TIMESTAMP X-SIGNATURE: HMAC_SHA256_SIGNATURE Idempotency-Key: UNIQUE_REQUEST_ID {"order_id":"ORDER123","amount":"48.00","customer_name":"Customer","customer_mobile":"9999999999"}

Payment Status

GET /api/v1/payment/status.php?order_id=ORDER123

Use the same HMAC authentication. The signed path is /api/v1/payment/status.php.

Signature

METHOD + "\n" + PATH + "\n" + TIMESTAMP + "\n" + RAW_JSON_BODY

Generate HMAC-SHA256 using your API Secret. Never expose the API Secret in frontend JavaScript or mobile client code.

Order ID

Production requests should provide a unique Order ID. If the order ID is blank or exactly New, Allora generates one automatically. Other valid Order IDs are preserved.

Payment Lifecycle

PAYMENT_URL_CREATED → PROCESSING → SUCCESS / FAILURE

Only a verified SUCCESS should be treated as paid. Use the Status API for reconciliation.

Webhook

MYRC callback endpoint:

https://pay.alloradigital.in/api/v1/webhook/myrc.php

Merchant Portal

Login to view your API Key, manage credentials, view reports, export CSV, update profile and read merchant-specific documentation.

Open Merchant Portal →