Apaxon Payments

Available now£69/year

Gateways connected properly, once.

Card details never touch your server, webhooks verify their signatures, refunds are recorded rather than inferred, and a retried payment cannot charge twice. The unglamorous parts of taking money, done the way the standard requires.

  • Extends free Commerce
  • No card data on your server
  • Signed webhooks
Stripe and PayPal
Refunds
Signed webhooks
No card data stored

What it does.

  • More than one gateway

    Stripe and PayPal to start, behind one interface — so changing provider is a settings change rather than a rebuild of your checkout.

  • Card data never lands here

    Payment details go straight to the gateway from the customer’s browser. Your database never holds a card number, which is the only way to be certain a backup cannot leak one.

  • Refunds recorded against the order

    Full and partial refunds tracked as amounts rather than guessed from a status, because reconciliation needs the figure.

  • Webhooks that cannot be replayed

    Every event has its signature verified and its id recorded before it is processed, so a duplicate delivery is a no-op instead of a second fulfilment.

Why it is separate

The payment layer earns its own review.

Bundling gateway code into a shop plugin means every shop release re-reviews the payment path, or more often does not. Keeping it separate means this plugin is small enough to read end to end — which is the only review that counts on the code that moves money.

  • Idempotency keys on every create and capture
  • Amounts held in minor units; no float ever touches a total
  • Failed and duplicate events logged rather than silently dropped

Requirements

Requires
Apaxon Commerce (free), Apaxon Core
Price
£69 per year, one site
Gateways
Stripe, PayPal at launch
PCI scope
SAQ A — no card data on your server
Licence
GPLv2 or later

Questions

Do you take a cut?

No. The gateway charges its own fees and we are not in the transaction. The plugin is bought once a year; a plugin that also takes a percentage is charging you twice for code you already installed.

What about PCI compliance?

Card details are captured by the gateway’s own hosted fields, which keeps most merchants in SAQ A — the shortest self-assessment there is.

Can I use it without a shop?

Yes. Invoices and Bookings both use it for one-off payments and deposits without Commerce being installed.

Ready to power your WordPress website the smart way?

Start with Apaxon Core — free, GPL, and with nothing to cancel. Add the plugins you need when you need them.