Anakalice for WooCommerce

Anakalice for WooCommerce adds a hosted-checkout payment gateway that talks only to
the Anakalice API. Anakalice routes each payment to your connected provider, verifies and normalizes the provider webhook,
and calls your store back with a single signed webhook. You integrate once; adding,
switching, or failing over between providers happens inside Anakalice with no change
to your store.

Why store owners use it

• Keep selling when a provider is down. Routing and failover live inside
  Anakalice, so a single provider outage does not have to cost you the sale.
• One dashboard across providers. Payments, refunds, disputes, and
  reconciliation in one place instead of one dashboard per provider.
• No provider keys in your store. The plugin never touches provider
  credentials; it only holds your Anakalice keys.

Features

• Hosted checkout redirect (no card data touches your store)
• Verify-on-return: the order is confirmed against the Anakalice API when the payer
  comes back, so completion never depends solely on a webhook arriving
• Signed webhook verification (HMAC-SHA256 over the exact raw body)
• Event-ID deduplication (at-least-once delivery handled safely)
• payment.success / payment.failed / payment.refunded handling
• Refunds from the WooCommerce order screen
• Classic checkout and the WooCommerce Checkout Block (new checkout) both supported
• HPOS (custom order tables) compatible
• TEST / LIVE environment selector

This plugin requires an Anakalice account and a running WooCommerce store. Anakalice
is payment orchestration software; it is not a bank and does not hold customer funds.

Configuration

• Mode: Test or Live.
• Anakalice API base: https://api.anakalice.com (leave as default unless told
  otherwise).
• Anakalice secret key: your sk_test_... or sk_live_... key. Used
  server-side only; never sent to the browser.
• Webhook signing secret: the whsec_... value from your Anakalice webhook
  endpoint. Required to verify incoming webhooks.

A live store must be served over HTTPS so the payer can be returned securely after
checkout.

Security

• Secret keys are stored in WooCommerce settings and used only server-side; they are
  never sent to the browser.
• Webhooks are verified by HMAC signature over the exact raw body before any state
  change; failures return HTTP 400 and are retried by Anakalice.
• The plugin logs via the WooCommerce logger and never logs secret values.

External services

This plugin connects to the Anakalice API to process payments. Anakalice is a
payment orchestration service operated by Anakalice Digital: your store sends a
payment request to Anakalice, and Anakalice routes it to a licensed provider
(such as your connected provider), then returns a signed result to your
store. The plugin does not function without an Anakalice account.

What the plugin sends, and when:

• When a shopper places an order and selects Anakalice at checkout, the plugin
  sends the order total and currency, your store’s order reference, the shopper’s
  name and email address, and a return URL to https://api.anakalice.com, in
  order to create a hosted checkout session and receive a checkout URL.
• When the shopper returns from the hosted checkout, the plugin asks
  https://api.anakalice.com to verify the final status of that payment
  reference.
• Anakalice then sends a signed webhook back to your store to confirm the final
  payment status.

Card and bank details are entered on the provider’s hosted checkout, not on your
store, and are never sent to or stored by this plugin.

Service provider: Anakalice Digital, https://www.anakalicedigital.com
Terms of Use: https://www.anakalicedigital.com/terms
Privacy Notice: https://www.anakalicedigital.com/privacy