Merchant & Supervisor Hub

Today's Volume

₹0.00

Successful Payments

In Waiting Queue

Pending Counter Payments

Single Verified (1 Source)

Dual Verified (2 Sources: SMS + Gmail)

🔴 Real-Time Receiving Account Slot Ownership (UPI Invariant)

Guarantees zero payment collision by rotating dynamic slots per receiving UPI VPA.

Active Slot (5-Minute Window)

No customer actively checking out right now.

Processing Slot (30s Verification Window)

No payment in verification window.

⏳ Waiting Customer Queue

Queue #	Order	Amount	Status	Enqueued At
Waiting queue is empty.

🏪 Cash & Card Billing Counter Desk (Live Counter Payment Requests)

Real-time incoming payment requests from checkout screens. Verify banknotes or POS slips and approve immediately.

Cashier Desk #1

Order ID	Payment ID	Amount	Counter Method	Requested At	Cashier Actions
No pending counter payments right now.

Order ID	Payment Ref	Amount	Customer Name	Phone	Placed At	Actions
No COD orders placed yet.

💳 Payment Transactions Ledger

Comprehensive transaction audit history with automated bank observer attribution & verification tiers.

Order ID	Payment ID	Amount	Method	Status	Verification Tier	Channel Sources	Created At	Completed At
Loading transactions...

🎨 White-Label Branding & Visual Gateway Customizer

Customize every visual, textual, and brand asset of your customer checkout experience. Live reflection on smartphone mockup.

100% White-Label Capable

🔑 Merchant ID & API Integration Keys

Active Merchant ID (UUID)

Publishable Key (data-youpi-key)

Universal 1-Script Integration Snippet

Paste this script tag into your storefront HTML <head> or <body> to connect YouPI checkout.

🏷️ 1. Core Brand Identity & Title

Merchant Store / Business Name

Gateway Title / App Name

Brand Logo Image URL Transparent PNG or SVG recommended. When left blank, your store initial letter is used.

🎨 2. Visual Theme & Color Palette

Primary Brand Color (Hex)

Header Styling Theme

Quick FinTech Brand Palettes:

🛡️ 3. Badges & Conversion Banners

Header Sub-banner Text Hide Sub-banner

Hide Psychological Time-Saving Banner

🛡️ 4. Guarantees & Conversion Notices

Sidebar Trust Notice

Footer Guarantee Text

📞 5. Support & Legal Policies

Customer Support Email(s)

Customer Support Mobile(s)

Live Gateway Mockup Preview

Real-time reflection

9:41

5G100%

Merchant Checkout

🛡️ YouPI PG Verified Business

👤

🛒 Verified & Protected by YOUPI PG

⚡ Skip wait: Instant billing counter checkout available

Switch

Order #ORD-78921

₹1,500.00

Direct UPI

Scan with any UPI App (GPay, PhonePe, Paytm)

🛡️ 100% Payment Protection by YOUPI PG

Secured by YOUPI PG & 256-Bit Bank Encryption • Privacy Notice

Total Payable

₹1,500.00

Continue ›

⚡ Receiving UPI Accounts & Multiple VPAs

Manage receiving VPAs. Only ONE VPA can be active at a time for gateway payments. Activating a VPA automatically rotates and deactivates all others.

Active Gateway VPA

Currently Active Gateway VPA

Loading active VPA...

Payee: -

Checkout Mode

✓ Direct Dynamic UPI QR Gateway

➕ Add New Receiving UPI VPA

UPI ID / VPA

Payee / Merchant Display Name

Set as active VPA for customer checkout immediately

📋 Saved Receiving UPI Accounts

UPI ID (VPA)	Payee Name	Gateway Status	Slot State	Created	Actions
Loading UPI accounts...

🏪 Store Selling Mode & Payment Modalities

Toggle between Online Selling Mode (E-Commerce) or Offline Selling Mode (Physical till/POS desk). Reflects instantly on checkout.

ONLINE SELLING MODE

🌐 Online Selling Mode ACTIVE

For websites and courier deliveries. Supports UPI QR (always on) and optional Cash on Delivery (COD).

🏬 Offline Selling Mode

For retail stores and physical checkout desks. Supports UPI QR (always on), configurable Cash, and configurable Card POS.

🌐 Online Payment Options

Digital UPI Payments (QR Code) Default · Always Enabled

Direct QR code scan & pay via any UPI app (GPay, PhonePe, Paytm, CRED).

Cash on Delivery (COD) Doorstep Cash

Customers confirm order with pre-purchase verification and pay cash upon package arrival.

🏪 In-Store Till & POS Instructions

Cash at Till Counter Instructions

Card POS Counter Instructions

🎮

Developer Tools → Payment Simulator

DEVELOPER TESTING ONLY

Simulate incoming bank SMS and Gmail payment notifications against real checkout sessions. The observation enters the REAL 6-stage verification engine without shortcuts. The real engine decides whether it passes, fails, or triggers fraud detection.

Test Mode Status

Checking...

👤 Target Customer

💳 Active Payment Sessions

Please select a customer on the left to inspect their active payment sessions.

📱 SMS STREAM 100% Customizable · Any String

Sender / Short Code

SMS Content (Free-Form Raw Text)

Exact text preserved verbatim as raw.

Received Time

✉️ GMAIL STREAM 100% Customizable · Any String

Sender Email Address

Gmail Content (Free-Form Raw Text)

Exact text preserved verbatim as raw.

Received Time

📜 Simulation History

Timestamp	Source	Sender	Session	Result	Message ID	Reason
Loading history...

🧪 Developer Settings → Test Mode [ OFF ] Test Mode

This mode exists ONLY for development, debugging, QA, and verification-engine testing. While active, AUTOMATIC BAN SYSTEM = DISABLED. Automatically expires after 10 minutes (strictly enforced server-side).

🛡️ Automatic Ban System: ENABLED (Normal)

Test Mode

🎯 Test Payment Observation

Inject synthetic observations directly into the canonical 6-stage production verification flow.

⏱ Test Timestamp Control:

📱 SMS Test Message

Preserved verbatim as raw

✉️ Gmail Test Message

Preserved verbatim as raw

📜 Test Mode Audit Log

Time	Action / Message ID	Source	Result	Raw Message
Loading test audit records...

🎭 UPI Server Health: False Narrative Switch ⚪ OFF · REAL SERVER STATUS

Override the live observer status to test checkout portal behavior under different UPI server health scenarios: Green (Healthy: Server Is Working), Yellow (Degraded: Extra processing seconds), or Red (Downtime: Server Facing Issues). Automatically turns off after 10 minutes.

⚡ QR Code Invariant: The dynamic UPI QR code always loads and displays whether servers are UP, BUSY, or DOWN.

Select Narrative to Test:

🛍️ YOUPI Showcase Store (Port 5000) CHECKING...

Toggle the public YOUPI Showcase Store on or off anytime. When disabled, the Node process is terminated and host port 5000 is freed. When enabled, it launches instantly.

🌐 Open Store (5000) ↗

🖥️ Managed Host Processes (Unified Control Center)

Native child process supervisor. Zero external container dependencies. Start, stop, or restart any gateway service independently.

Service Name & ID	Port	PID	Status	Uptime	Process Controls
Loading managed processes...

📜 Real-Time Aggregate Terminal Console

Live SSE stdout/stderr broadcast stream from all active processes.

[Ready] Unified Control Center operational. Awaiting log streams...

☁️ Cloudflare Tunnel Configuration

Single canonical production gateway routing. Enter your domain and prefix; all routes, local service ports, and dashboard mappings are system-derived.

💻 LOCALHOST MODE

💻 Localhost Mode (Development) ACTIVE

Routes API, Checkout, and Observers directly over local developer ports (7000, 6100, 6001, 6003, 5000).

🌍 Production Mode (Cloudflare Tunnel)

Authoritative production mode using deterministic Cloudflare public hostnames with SSL (https://).

☁️ Cloudflare Domain & Prefix Setup

1. Cloudflare Domain

2. Deployment Prefix

🛣️ CLOUDFLARE TUNNEL ROUTES

Exact routes to create in Cloudflare Dashboard. All ports and roles are system-defined.

📖 EXACT CLOUDFLARE DASHBOARD INSTRUCTIONS

                Cloudflare Dashboard
                ↓
                Networking
                ↓
                Tunnels
                ↓
                Select YOUPI Tunnel
                ↓
                Routes
                ↓
                Add route
                ↓
                Published application
                ↓
                Enter Hostname
                ↓
                Enter Service URL
                ↓
                Save
              

• Public Hostname: The URL users and webhooks access from the internet.

• Service URL: The local service cloudflared forwards incoming traffic to on this host.

• DO NOT EXPOSE: SMS Observer (localhost:6002), Control Center (localhost:8090), and internal database endpoints must NEVER be published to Cloudflare.

• Android SMS observer connects to Payment API (pay-api.example.com / 6100), not directly to internal observer ports.

🔑 Merchant API Keys, Webhook Endpoints & Cryptographic Secrets

View, copy, or rotate your Publishable Merchant ID (data-youpi-key / X-Merchant-Id), Secret Merchant API Key (X-Merchant-Key), and HMAC-SHA256 Webhook Signing Secret.

Merchant ID / Publishable Key (data-youpi-key & X-Merchant-Id)

Safe to embed in frontend HTML (

<script src=".../youpi.js"
                    data-youpi-key="...">

) and pass as X-Merchant-Id in REST API calls.

Secret Merchant API Key (X-Merchant-Key)

Backend-only secret key used to authenticate server-to-server payment creation and status queries via the X-Merchant-Key header.

Webhook Destination URL Server endpoint to receive instant signed transaction status notifications.

Webhook Secret (HMAC-SHA256 Signing)

Used to verify X-Gateway-Signature on incoming server-to-server webhooks. Keep strictly on your backend.

📱 Android SMS Companion App & Device Pairing

Install the APK on your bank-linked phone and scan the pairing QR code to auto-forward incoming bank credit SMS.

STANDBY

1. Scan to Pair Phone

Loading Pairing QR...

Enrollment Secret: Loading...

📲 Download Android APK

Paired Mobile Observers

Device Name	Device ID	Paired At	Action
No devices paired yet. Scan QR above to pair.

🧪 Test Bank SMS Parser

📧 Google Account & Gmail Direct API

Official Google OAuth 2.0 automated observation for real-time UPI credit notifications.

NOT CONFIGURED

Google Account Disconnected

Connect your bank-registered Google account with one click. When you click authorize, YouPI PG handles the full OAuth flow, acquires persistent offline credentials, and activates 1-second UPI credit polling.

OAuth Status: DISCONNECTED

Token Status: NOT CONFIGURED

Connected Account: No account authorized

Last Successful Poll: Never

Observer Pipeline: Standby

⚙️ Advanced OAuth Credentials & Manual Override (Optional)

Google OAuth Client ID

Google OAuth Client Secret

Exact Authorized Redirect URI

Google Refresh Token

💬 WhatsApp Berry Protocol

Automated customer login OTP delivery at checkout.

CHECKING...

● Pairing Standby

                    Phone Number: Not Linked
                  

Click "Connect / Refresh QR" to pair device

🚫 Banned Customer Identities

Server-enforced access blocking. Positive identification of fraudulent payment injection or manual administrative bans.

Name	Email	Phone	Ban Status	Ban Timestamp	Ban Reason	Payment Session	Last Device	Source	Actions
Loading banned users...

🚨 Security & Forensic Events Log

Real-time immutable security event records preserved with exact raw evidence verbatim.

Timestamp	Event Type	Customer	Source	Sender	Fraud Reason	Raw Evidence (Verbatim)	Action
Loading security events...

📜 Ban & Unban History Audit Trail

Historical chronological audit trail of all automatic bans, unbans, manual bans, and re-bans.

Timestamp	Action	Actor	Customer Identity	Details & Transitions
Loading ban history...

➕ Add New Receiving UPI VPA

📋 Saved Receiving UPI Accounts

Developer Tools → Payment Simulator

Processing Result Inspector

Enable Test Mode?

🎯 Test Payment Observation

🔬 Complete Processing Result

➕ Add New Receiving UPI VPA

📋 Saved Receiving UPI Accounts

Developer Tools → Payment Simulator

Processing Result Inspector

Enable Test Mode?

🎯 Test Payment Observation

🔬 Complete Processing Result

📖 Official Gmail API & Refresh Token Guide

Method 1: Direct 1-Click Authorize (Automatic)

Method 2: Google OAuth 2.0 Playground (Manual — 60 Seconds)

Forensic Security & Ban Evidence Dossier

🔓 Restore Customer Access (Unban)

🚫 Manually Ban Abusive Customer

🏪 Onboard New Merchant / Store