On this page
WooCommerce Plugin
Install the official Paymos plugin for WooCommerce, connect project credentials securely, test checkout, and update orders by signed webhook.
1. Requirements
- WordPress 6.2 or later
- WooCommerce 8.0 or later
- PHP 7.4 or later with OpenSSL
- A Paymos account with a project selected in the dashboard
The package bundles the Paymos PHP SDK; Composer is not required on the store.
2. Install the official release
Download the latest package from Paymos WooCommerce Releases, then upload and activate it in WordPress Admin → Plugins → Add New → Upload Plugin.
Official release archives are identical for every merchant and contain no API key, API secret, project ID, webhook secret, access token, or device code.
3. Connect the store
- Open the project that should receive this store's invoices in the Paymos dashboard. This current project is used automatically.
- Open WooCommerce → Settings → Payments → Paymos.
- Click Connect Paymos.
- Approve the request in the Paymos tab. The confirmation page shows the store URL and the currently selected project; there is no second project selector.
- Return to WooCommerce. The settings page reloads after connection.
For Sandbox and Live, Paymos reuses the merchant's single active Payment key or creates one when none exists. It reuses a webhook only when the exact callback URL, Invoice category, and current project match; otherwise it creates a dedicated Invoice webhook. A conflicting webhook at the same URL is never silently overwritten:
https://shop.example.com/wp-json/paymos/v1/webhook
The OAuth device token is short-lived and discarded. Normal Merchant API calls continue to use HMAC authentication.
4. Credential storage
Sandbox and Live credentials are validated and stored in a non-autoloaded WordPress option encrypted with AES-256-GCM. Encryption key material is derived from the installation's WordPress security salts. Saved values are never returned to the browser and cannot be entered or edited manually. Reconnect the store after a key or webhook secret is revoked or rotated.
5. Test and go live
- Select Sandbox, enable Paymos, and place a test order.
- Confirm that the invoice appears in the selected Paymos project and the webhook updates the order.
- Select Live when ready. The same plugin installation uses the connected Live credentials.
If an order does not update, check WooCommerce → Status → Logs, confirm the site is publicly reachable, and verify that the order environment matches the plugin mode.