What authentication does the PhonePe Payment Gateway API use?

PhonePe uses a SHA256-based verification header called X-VERIFY. It is computed as SHA256(base64EncodedPayload + endpoint + saltKey) concatenated with the salt index. Through Jentic, the salt key is stored in your Jentic One instance and the verification header is computed automatically at execution time.

Can I validate a UPI VPA before initiating payment?

Yes. Use POST /pg/v1/validate/vpa to check whether a Virtual Payment Address is valid and active before sending a payment request. This prevents failed transactions due to incorrect or inactive UPI addresses.

What payment methods does the PhonePe API support?

The POST /pg/v1/pay endpoint supports UPI (collect and intent), credit cards, debit cards, and net banking. The payment method is specified in the request payload. UPI is the most common method, handling both same-device and cross-device flows.

How do I check transaction status through Jentic?

Search Jentic for 'check PhonePe payment status' to find the GET /pg/v1/status/{merchantId}/{merchantTransactionId} operation. Load the schema, provide your merchant ID and transaction reference, and execute. Jentic handles the X-VERIFY header computation using your stored salt key.

How long does a PhonePe refund take to process?

Refund processing time depends on the original payment method. UPI refunds typically complete within 1-5 business days. Use GET /pg/v1/refund/{merchantId}/{merchantTransactionId} to track the current refund status programmatically.

Can I limit what my agent is allowed to do with the PhonePe Payment Gateway API?

Yes. Because you run Jentic One yourself, your own rules decide which PhonePe operations and credentials the agent may use. Since the merchant and transaction IDs sit in the URL path for GET /pg/v1/status/{merchantId}/{merchantTransactionId} and GET /pg/v1/refund/{merchantId}/{merchantTransactionId}, you can pin the agent to reading status for your own merchant. The pay, refund, and VPA-validate operations carry their target in the request body, so you grant only the ones the agent needs; initiating a payment or a refund is excluded unless you add it.