← Back to SmartGen Checkout Checking Worker…

Developer demo · API lab · Partner onboarding proof

SmartGen Mastercard MPQR Sandbox Integration & Payment Orchestration Prototype.

This is SmartGen’s server-side Mastercard Merchant Presented QR sandbox integration and payment-orchestration prototype. The browser sends only sandbox test data; OAuth signing keys and provider credentials remain inside the Cloudflare Worker.

Sandbox only: this creates simulated transactions and does not charge a real card or move real funds. No result from this public page authorizes live merchant fulfillment.

QR code status

No customer-scannable QR is generated by this direct sandbox transfer test. The Worker uses Mastercard test fixtures to verify server-side payment connectivity. Do not scan this page or treat the test result as a live merchant checkout.

  1. An approved Receiving Institution or processor issues the merchant’s Mastercard QR payload.
  2. SmartGen binds that approved static or dynamic QR payload to an internal order and amount.
  3. The customer scans it with an eligible payment application.
  4. The approved payment participant authorizes the transfer; a protected SmartGen order service verifies the final status before fulfillment.

Use a new reference for every sandbox attempt. Amounts above 50 are configured to simulate approval in the Mastercard sandbox.

Recent prototype transactions

Saved only in this browser tab for Sandbox demonstration. This is not server-side order storage and must not be used as production payment history.

Retrieve an existing sandbox transfer

Public arbitrary-ID retrieval is disabled. Production verification requires an authenticated internal order and exact stored transfer binding.

Sandbox use policy: This lab is for developer testing and partner demonstrations only. It does not process real money, create a live merchant QR, authorize live fulfillment, or provide a production Mastercard account. Do not enter real card data or private credentials. The browser receives no secret, OAuth header, private key, CVV, PIN, OTP, or full payment credential.