setup-chip

name

setup-chip

description

Set up, build, debug, and explain CHIP Collect payment integrations using the official CHIP Collect API documentation. Use when working with CHIP Collect purchases, checkout URLs, payment links, direct post, FPX, DuitNow QR, cards, e-wallets, callbacks, webhooks, signature verification, clients, recurring tokens, subscriptions, pre-authorization, refunds, captures, releases, payment methods, statements, account balance, account turnover, API keys, Brand ID, or CHIP Collect endpoint schemas.

CHIP Collect API

Use this skill for CHIP Collect payment integration work.

Source

Read references/chip-collect-docs.md before giving factual API guidance or writing integration code. It contains all downloaded CHIP Collect markdown pages plus embedded OpenAPI blocks from:

https://docs.chip-in.asia/chip-collect/overview/introduction

Read references/account-setup.md when user asks how to register, which API keys are needed, where credentials come from, or what dashboard setup is required.

Core Facts

• Base URL: https://gate.chip-in.asia/api/v1/
• Auth: Authorization: Bearer <secret key> for every request.
• Credentials: API key and Brand ID come from CHIP Collect Developers pages in portal.
• Amounts: money values are smallest currency units. Example: price: 100 equals RM 1.00.
• Create checkout/payment link flow: POST /purchases/, then use response checkout_url.
• Payment status options: success callback, GET /purchases/{id}/, or webhook events.
• Test cards: 4444 3333 2222 1111 non-3DS, 5555 5555 5555 4444 3DS, CVC 123, expiry >= current month/year.
• Callback signature: X-Signature is base64 RSA PKCS#1 v1.5 over SHA256 digest of raw request body.
• Success callback public key: GET /public_key/; webhook public key: Webhook.public_key.

Lookup Map

• Purchases: create, retrieve, cancel, capture, charge token, refund, release, resend invoice, mark paid.
• Clients: create/list/retrieve/update/delete, recurring token list/retrieve/delete.
• Webhooks: create/list/retrieve/update/delete.
• Payment methods: GET /payment_methods/, usually with brand_id and currency.
• Direct post: intro, card, FPX, DuitNow QR, e-wallet.
• Online flows: payment link, pre-authorization, subscriptions, custom flow.
• Account/reporting: balance, turnover, company statements.

Working Rules

• Use exact endpoint paths and request fields from reference OpenAPI blocks.
• Preserve trailing slashes on CHIP Collect endpoints as documented.
• For code, keep secrets in env vars and never hard-code API keys or Brand IDs.
• For webhooks/callbacks, require raw request body for signature verification.
• If user asks for latest pricing, legal terms, supported methods, or production portal state, verify live docs first.