Secure credentials
Gateway secrets encrypted at rest. Masked in the admin UI. Never shared across systems.
Universal Integration Payment System connects registered systems to Azam Pay, Yellow Card, and future providers — with per-system credentials, full audit logs, and signed webhooks.
Integration flow
Receive a bearer token and webhook endpoint from the admin panel.
Store encrypted Azam Pay / Yellow Card credentials per environment.
POST amount, method, and reference — UIPS routes to the correct driver.
Status updates delivered to your webhook with HMAC-SHA256 verification.
Everything required to operate a central payment hub across multiple client systems.
Gateway secrets encrypted at rest. Masked in the admin UI. Never shared across systems.
Common PaymentGateway contract — swap or add providers without touching client apps.
Gateway callbacks routed per system. Retries, dead-letter queue, and manual replay in admin.
API requests, gateway calls, and admin actions all recorded in audit_logs.
Mobile money, bank checkout, Bill Pay / USSD, and card collections supported.
Bearer-token authentication, structured JSON responses, and status lookup by reference.
Active drivers in production today, with an open contract for adding further providers.
| Provider | Method | Environment | Status |
|---|---|---|---|
| Azam Pay | Mobile money | Sandbox & Production | Live |
| Azam Pay | Bank checkout | Sandbox & Production | Live |
| Azam Pay | Bill Pay / USSD | Sandbox & Production | Live |
| Yellow Card | Crypto / stablecoin | Sandbox & Production | Live |
| Stripe | Card payments | — | Planned |
| Flutterwave | Multi-method | — | Planned |
Base URL: https://sips.co.tz/api/v1
All API requests must carry a bearer token issued per registered system. Tokens are generated and rotated from the admin panel.
Webhook deliveries are signed with HMAC-SHA256.
Verify the X-UIPS-Signature header on every inbound callback before processing.
Register systems, configure gateways, and monitor webhook deliveries.