How to go live on Tuma Payments integration

Tuma is primarily built to bridge and simplify access to financial APIs i.e all major commercial banks, microfinance institutions as well as Saccos in Kenya. The platform is 100% self-onboarding and a developer can access production APIs within two hours.

Onboarding

1) Sign up on Tuma Merchant Portal here

2) Verify your KYC details

3) Go to Businesses > add new and configure business details(name, email, mobile number and more importantly your bank details)

4) Go to Developer API > Keys & Docs > Select business> Generate API keys

5) Follow our documentation or download this postman collection

6) Integrate Tuma payment gateway with our application business logic and test thorughly.

NB: On sign up, the account is initially created in sandbox environment where you can only process amounts between KES 1-100. Also, if a number cancels three STK push prompts consecutevely, the number gets banned permanently.

Going live on Tuma

To process higher limits, the acocunt has to be moved to production enviromnents with better latency, security features as well as ability to process higher limits above KES 100.

To go live, please complete the following steps:

1. Share the page or URL where the Tuma payment gateway is integrated in your application. Include test login credentials if the page is restricted, or provide navigation guidelines if there is no direct link.
2. Create a test item or product priced at KES 1 so the integration can be verified.
3. Indicate and describe the nature of your business (e.g., e-commerce, SaaS, services, etc.).
4. Provide your physical business address or location.
5. Send all of the above details to [email protected] using the email address you used to sign up on Tuma.

Critical Requirements:

1. Do not submit a go-live request if you have not tested your integration in sandbox mode first; unverified integrations cannot be reviewed.
2. For mobile apps, it must be published on official stores that is, Google Play for Android and App Store for iOS. For web applications, they must be deployed on custom domains/subdomains like your-business.co.ke, app.your-business.co.ke or any extension and not in freemium provider owned platforms like *.vercel.app, *.grok, *.netlify.app, *.lovable etc
3. Submitting a go-live request before completing integration testing will result in a permanent ban from the Tuma platform.
4. Remember that the test amount must be KES 1, and you must ensure your integration handles all callback responses correctly before requesting to go live. As a proof, your app must acknowledge payment receipt either by SMS, Email or realtime UI update.
5. For regulated businesses like betting, finance etc, attach the appropriate licences or letter of no objection from the regulator(s).

NB: It typically takes two working hours to review and approve the integration. However, the it could take weeks or even months if you fail to follow these instructions.