walletlayer/php

WalletLayer PHP SDK for server-side hosted checkout integrations.

Maintainers

Package info

github.com/walletlayerio-spec/walletlayer-php

Homepage

pkg:composer/walletlayer/php

Transparency log

Statistics

Installs: 0

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

Security

Advisories: 0

Aikido package health analysis

v0.2.0 2026-07-17 22:29 UTC

Requires

  • php: >=8.1

Requires (Dev)

MIT 7dabef3dcde144fe73d5f6929d94da9f5eba363a

checkoutpaymentscryptowebhookswalletlayer

Published on Packagist.org on 2026-07-17 22:56 UTC

This package is auto-updated.

Last update: 2026-07-17 22:56:04 UTC

README

WalletLayer PHP SDK for server-side checkout integrations.

This package is free to use. WalletLayer billing is based on confirmed checkout transactions and the active plan on your WalletLayer account.

Setup

  1. Create a WalletLayer merchant account.
  2. Create an API key from the dashboard with your brand name, logo, support email, and enabled currencies.
  3. Copy the API secret when it is shown. It is displayed once only.
  4. Install the PHP SDK with Composer or download the package zip.
  5. Store the API key, API secret, WalletLayer API URL, and local encryption settings in your server environment.
  6. Keep all secrets on your backend only. Do not place the API secret in templates, JavaScript, mobile apps, or public repositories.
  7. Activate the SDK from your backend using signed API credentials.
  8. Create the checkout session from your backend and redirect the customer to the hosted WalletLayer checkout URL.
  9. After your webhook endpoint is available, add the webhook URL in the API key settings inside WalletLayer.
  10. Verify WalletLayer payment events before crediting an order, subscription, wallet balance, or customer account.

Security Notes

  • All operational API communication must be signed with your API secret.
  • Wallet mnemonics, encryption keys, treasury private keys, and sweep signing material must remain on your server.
  • If your integration performs local sweeping, estimate live network gas at sweep time and add a small buffer, usually about 10%, instead of using a fixed hardcoded gas amount.
  • WalletLayer should receive only the checkout and public payment metadata required to process the hosted checkout.
  • Review the package source before production use and pin versions in your deployment pipeline.

Billing Notes

The Free plan includes a small monthly transaction allowance. Paid plans increase the included monthly volume. When a plan allowance is exceeded, WalletLayer can charge overage from the merchant balance. If the balance is insufficient, checkout is disabled until the account is funded or the plan is upgraded.