Payment Gateway

Collect money from your customers and pay it out to bank accounts — without holding a payment licence or integrating a provider yourself. Moria is the aggregator; you are the partner.

Written for the developers who integrate it and the operations people who run it. Actual endpoints, actual payloads, and the parts that are easy to get wrong.

Not generally available yet

The gateway is not generally available. The API is reachable only for partners Moria has provisioned, and everything here reflects the implementation as it stands, not a plan.

There is a staging environment you can build against — see Environments below. Talk to your Moria contact before you start.

Environments

	Base URL	Reachable	Credentials
Staging	https://api-stg.moriafund.com/v1	Publicly, from anywhere	Issued by Moria, separate from production
Production	https://api.moriafund.com/v1	Publicly	Issued by Moria

Staging runs the same build as production and the same partner API — the endpoints, the signature rules and the error codes on these pages all behave there.

Confirm what staging is wired to before you move money

Staging is a full deployment, not a simulator. Whether the payment provider behind it is the provider’s own test environment or the live one is a per-deployment setting, so ask your Moria contact to confirm it before you create your first payment or payout there.

Until you have that in writing, treat anything you create on staging as capable of moving real money.

Two surfaces

The API

/v1/partners/* — what your server calls. API key plus signature. This is where money moves.

The console

What your people open in a browser. Email and password. Configure, search, reconcile. It cannot move money.

That the console cannot move money is deliberate. Payouts happen only through the API, with credentials on your server — so a browser session, however obtained, is never enough to take funds out.

Read in this order

	Page	Why
1	How it works	A payment and a payout end to end. The endpoints make sense afterwards
2	Authentication	Key plus signature. The most common integration failure lives here
3	Idempotency	How to retry safely. Getting it wrong charges a customer twice
4	Webhooks	How you find out money arrived
5	Errors	The error shape, and what is safe to retry
6	The console	For your operations team

Then keep the API reference open while you build — one page per endpoint.

Three things to know first

Amounts are strings, never numbers. "100000.00", not 100000.00. A JSON number is an IEEE-754 double, and money must not pass through one. Every amount we send is a string too.

pending is a normal answer, not an error. The customer has something to pay with and has not paid. Most payments spend most of their life here.

Fees are shown as one partner-facing figure. Every payment reports fee alongside gross and net. Moria keeps the provider/margin split internally for accounting and reconciliation; it is not part of the Partner Gateway contract.