menu

Commerce Suite - Integrator Quickstart Guide

Select a workflow part below to see the required steps, review process diagrams, and jump directly to the relevant operations.

Part 1: Integration Preparation - Gather and confirm integration prerequisites.

Getting Started

Before you begin planning or prototyping your Commerce Suite integration, you'll want to first work with our implementation team to ensure each of the below items has been completed:

      1. Gateway Sandbox Account Setup:

        • If you are using a Nuvei gateway, our team will setup your sandbox and provide you with test credentials. For third party gateways, please reach out to your gateway directly.
        • Note: If you are integrating both AR and AP modules, each will require its own set of credentials to authenticate calls to the Commerce Suite API.

      2. Securely Store Your Sandbox Credentials:

        • Once you've obtained your gateway credentials, securely store them for use when obtaining Commerce Suite API tokens throughout your workflow.

      3. Define Your Platform:

        • If your accounting software is not already registered, our team will assist you in adding your platform record so it is available in the API

Part 2: Accounts Receivable (AR) - Sync receivables documents and get paid.

What It's For

Integrate to the Commerce Suite AR Module to sync receivables documents such as invoices, orders, or quotes to seamlessly collect payments against them through Commerce Suite's robust hosted payments engine.

How It Works

    1. Define all receivables document types that are to be enabled in Commerce Suite.
    2. Sync merchant receivables documents (Invoice, Sales Order, etc.) for which payment will be collected through Commerce Suite.
    3. Update previously synced documents to manage things like date, tax, or balance adjustments on-the-fly.
    4. Query any document to retrieve a live payment URL or simply direct end-users to the Commerce Suite portal to make a payment against any synced document.

Key AR Endpoints

    Obtain an API Token:

      • POST /api/Authorize with your AR-Specific username and password to receive a token. This token should then be securely stored and included in the Authorizationheader for all AR related requests.

Part 3: Accounts Payable (AP) - Manage vendors and automate disbursement.

What It's For

Integrate to the Commerce Suite AR module to manage vendor bills and configure payouts for automated disbursements and tracking.

How It Works

  1. Use the endpoints below to create, update, or retrieve bills tied to vendors.
  2. Configure payout options (ACH, Check, RTP) for each merchant gateway before initiating disbursements.

Key AP Endpoints

    Obtain a Commerce Suite API Token

      • POST /api/Authorize with the gateway credentials that you'll be using for AP to receive an access token. Then, securely store this token for use in the Authorization header for all AP operations.

    Create and Track Vendor Bills:

      • POST /api/Bill to create a new vendor bill that you would like to track in Commerce Suite.

    Make Updates to Vendor Bills:

      • PUT /api/Bill to make adjustments or updates to an existing bill.

    Delete Previously Synced Vendor Bills:

    List All Synced Vendor Bills:

      • GET /api/Bill/All to get a list of all bills available for this merchant.

    Fetch a Bill by Bill Id

    Configure Commerce Suite Vendor Payout

Part 4: Commerce Suite API Responses

Understanding API responses and error handling. Commerce Suite APIs use standard HTTP status codes and always return responses in application/json format. Your integration should check the HTTP status code first, then parse the response body for additional error or success details.

Common API Response Codes

    • 201 Created: The request was successful and a new resource was created.
      Action: Parse the response body for the created resource details.
    • 400 Bad Request: The request is not valid (e.g., malformed JSON or missing required fields).
      Action: Check your request for syntax errors or missing/invalid fields. The response body will include details.
    • 401 Unauthorized: The credentials or access token are invalid or missing.
      Action: Ensure you are sending a valid access token. Use the /api/Authorize endpoint to obtain one if needed.
    • 403 Forbidden: The request does not have permission to access the endpoint.
      Action: Verify your user permissions and endpoint access rights.
    • 404 Not Found: The server cannot find the requested resource.
      Action: Check the endpoint URL and resource identifiers.
    • 429 Throttle: The server has received more requests than are permitted in one minute.
      Action: Check the error response to determine how long to wait or check merchant settings to adjust the limnit.
    • 500 Server Error: The server encountered an unexpected error or may be offline.
      Action: Retry the request again at a later time or contact support if the issue persists.

Best Practices for Error Handling

    • Always check the HTTP status code before parsing the response body.
    • For 4xx errors, review the error message in the response body for details on what went wrong.
    • For 401 and 403 errors, verify your authentication and authorization.
    • For 500 errors, consider implementing retry logic and logging the error for further investigation.
graph TD
    A[API Request Sent] --> B{Check HTTP Status Code};
    B -- 201 Created --> C[Success: Resource Created];
    B -- 400 Bad Request --> D[Error: Fix Request Syntax/Fields];
    B -- 401 Unauthorized --> E[Error: Get New API Token];
    B -- 403 Forbidden --> F[Error: Check Permissions];
    B -- 404 Not Found --> G[Error: Check URL/Identifiers];
    B -- 500 Server Error --> H[Error: Retry & Log Issue];
					

Part 5: Integration Certification - What to Expect

Certifying your Commerce Suite integration ensures your ISV solution can securely and reliably support all intended functions in alignment with Nuvei guidelines and best practices. Before production enablement, each Commerce Suite module (e.g. Accounts Receivable or Account Payable) used in your integration must be tested and certified. Below you will find descriptions for the most critical functions to be certified for each Commerce Suite module used.

Account Payable (AP) Functional Certifications

    • Authorize: Before making AP calls, you'll need to exchange your AP gateway credentials for a Commerce Suite API token to be used in subsequent AP requests.
    • Vendors: Vendors represent your payees. Use vendor endpoints to create, update, and delete vendors in Commerce Suite enabling features such as automated payout routing and vendor self-management.
    • Bills: Bills correspond to vendor invoices synchronized from your ERP or created via API. Create, retrieve, update, and delete bills to manage the AP queue prior to payout.
    • Payouts: Once bills are approved, create payouts and adjust or cancel them when necessary. For checks, schedule with sufficient lead time to account for printing and mail delivery.
    • Additional Certifications: Additional certifications may include configuring payout settings (such as methods and schedules) and retrieving data via OData for reporting or automation.


Account Receivable (AR) Functional Certifications

    • Authorize: Before making AR calls, you'll need to exchange your AR gateway credentials for a Commerce Suite API token to be used in all subsequent API requests.
    • Customers: Customers represent the payor. Use customer endpoints to create customer profiles and enable Commerce Suite payments for synced receivable documents.
    • Documents: Documents represent transactional receivable items such as invoices, orders, or quotes. Syncing these documents with Commerce Suite allows you to seamlessly collect payments against them through Commerce Suite's robust, hosted payments engine..
    • Additional Certifications: Additional certifications may include updating your software platform profile, adjustments to available card types, and other supporting follow up tasks depending on exactly how your integration works.


Part 6: Sandbox Transaction Testing and Test Cards by Gateway

Sandbox Testing by Gateway

While the Payment Middleware translates transactional production requests across gateways, transaction testing in sandbox environments requires alignment with each gateway's testing practices and test values. This section centralizes the essential test data and scenarios that integrators need across gateways.

PayaConnect Gateway

PayaConnect Gateway Documentation

Use the trigger amounts below based on the outcome you'd like to test; use AVS and CVV trigger values to force ACS response as needed.

Test Card Numbers
BrandPANCVVExp
Visa4111111111111111999Any future date
Mastercard5454545454545454999Any future date
Amex60110009901394241234Any future date
Discover6011000991300009999Any future date

Outcome Testing Trigger Amounts
Sale AmountOutcome/Response
$29.66APPROVED
$5.001500 DENY
$6.161616 INSUFFICIENT_FUNDS
$6.221622 CARD_EXPIRED
$6.301630 REJECTED_BATCH (first close fails; second succeeds)
$8.xxDelayed response; cents = seconds (e.g., $8.05 ˜ ~5s)

AVS/CVV Test Trigger Values
ValueTypeOutcome
Street: 5800 NW 39th AVE; ZIP: 32606AVS streetAVS - PASS
Street: 2831 NW 41st St STE J; ZIP: 32615AVS streetAVS - DENY
999 (V/MC/Disc)CVV DataCVV match
123 (V/MC/Disc)CVV DataN - not auto declined

Test ACH Accounts
Account TypeBank RoutingAccount NumResponse
checking072000326700953657Success

Note: ACH approvals do not behave like card authorizations. Settlement with the banks typically completes in 1–4 business days. The account above can be used to test a successful payment at the point of entry.

gateway docs

NCP (v1) Gateway

Use the test card data below for each brand (Visa, Mastercard, Amex, Discover). Expiry: any future date; CVV: any valid value (e.g., 123; Amex 1234).

Test Card Numbers
BrandPANCVVExp
Visa4111111111111111123Any future date
Mastercard5454545454545454123Any future date
Discover378282246310005123Any future date
Amex60110009901394241234Any future date

3DS / Flow Trigger Values
ConditionPANHow to trigger in INT
3DS “Force Challenge”4000000000001109amount > 150
3DS “Challenge Flow” (frictionless)4000000000001091cardHolderName = CL-BRW1

Note: Nuvei's INT environment maintains the authoritative test-card database.

gateway docs

Till Payments Gateway

Note: Use the Simulator connector for card outcomes and SEPA Direct Debit testing.

Test Card Numbers
BrandPANCVVExp
Visa (success)4111111111111111123Any future date
Visa (decline)4242424242424242
Mastercard5555555555554444123Any future date
Discover6011111111111117123Any future date

3DS / Special Triggers
TriggerHow
SCA soft-declineSend amount 65.00 (any currency)
3DS scenariosUse listed 3DS test numbers (frictionless/challenge) when enabled

SEPA Outcome IBAN Triggers
IBAN last 4Outcome
1111Success
2222Pending
2003Declined
2006Insufficient funds

gateway docs

PayaCore Gateway

Use the test card data below for each brand (Visa, Mastercard, Amex, Discover). Expiry: any future date; CVV: any valid value (e.g., 123; Amex 1234).

Test Card Numbers
BrandPANCVVExp
Visa4111111111111111123Any future date
Mastercard5454545454545454123Any future date
Discover6011000991300009123Any future date
Amex3714496353984311234Any future date

gateway docs

Check Commerce
Test Account Numbers & Scenarios
Scenario Amount Account No Routing No Expected Result
Declined Deposit / Pre-approval (NSF) 1.27 3666394279 123456780 Declined (NSF)
Declined Deposit / Pre-approval 1.30 3666394279 123456780 Declined
Successful Deposit / Pre-approval 1.25 111111111 123456780 Success

Check Commerce Trigger Amount Codes
Code Status Trigger Amount
0Processed1.23
1Originated1.24
2Funded1.25
3Returned1.26
4Insufficient Funds (NSF)1.27
5Chargeback1.28
6Invalid1.29
7Declined1.30
8Refund1.31
9Credit1.32
10Incomplete1.33
11Cancelled1.34
12BO Exception1.35
13Downloaded1.36
14Credit Originated1.37
15Credit Downloaded1.38
16Credit Return1.39
17Credit Funded1.40

Note: Use the above account numbers and trigger amounts to simulate specific outcomes in the Check Commerce sandbox. For additional details or support, contact your Nuvei Partner representative.

Authorize.Net Gateway

Use the test card data below for each brand (Visa, Mastercard, Amex, Discover). Expiry: any future date; CVV: any valid value (e.g., 123; Amex 1234). Keep the sandbox account in Live Mode for realistic behavior.

Test Card Numbers
BrandPANCVVExp
Visa4111111111111111123Any future date
Mastercard5424000000000015123Any future date
Discover6011000000000012123Any future date
Amex3700000000000021234Any future date

Test Card Trigger Values
TypeValueEffect
Card - approvedany amountApproved
Card - declinezipCode = 46282General decline (Response Code 2)
ACH - approvedamount < $100ACH (eCheck.Net) approved
ACH - declinedamount > $100ACH (eCheck.Net) declined

gateway docs

Part 7: Gateway Level Validation

Why It Matters

Validating that all payment related activity within Commerce Suite is received, recorded, and (when applicable) settled by your payment gateway protects against mapping errors, field mismatches, or lost webhooks and ensures that what your application sends is exactly what your gateway processes.

Validate using Your Gateway's Reporting / Virtual Terminal (VT)

    • Open your gateway's reporting or VT tool and filter by the transaction timestamp window used in testing.
    • Search by a reliable key (amount, last 4, reference/transaction ID, order/invoice number, or customer ID).
    • Open the gateway detail view and compare each item in “What to Validate” against your middleware request/response records.
    • For two-step flows, confirm the relationship: Auth ? Capture (or Sale only) and any subsequent Void/Refund entries are properly linked.
    • Confirm settlement (batch close, deposit/funding line) when applicable.

If any value doesn't match: re-check your request body (types, formatting, currency), confirm the correct headers/token were used, and re-run a controlled test with a unique external reference to isolate the entry in reports.

What to validate when checking gateway payment activity

Field / AspectWhat to Check
Transaction TypeAuth, Capture, Sale, Void, Refund (and APM equivalents) match your intended call (/payment vs. /transaction) and gateway record.
AmountsBase amount, currency, and any surcharge, tax, or tip amounts equal the values displayed in the gateway. For Auth?Capture, ensure captured amount equals or is = authorized amount per your flow.
Status & CodesApproved/Declined/Voided/Refunded states, plus gateway authCode, transactionId/reference, and (if present) AVS/CVV and 3DS results.
Custom DataYour external identifiers (e.g., orderId, invoiceNumber, customerID, metadata) are persisted and searchable in the gateway UI/reports.
Payment MethodMasked PAN (last 4), brand, wallet/APM labels, token indicators, and card-present vs. card-not-present flags appear as expected.
Batch / SettlementFor captured sales, verify the transaction moved to an open/closed batch as expected and appears on funding/deposit reports.
Descriptor / MIDCorrect MID, location, and (if applicable) soft descriptor values are associated to the transaction.
TimestampsTime zone and ordering (Auth before Capture, Refund after Sale, etc.) are consistent between middleware responses and the gateway.

Validation Flow

graph TD
    A[1. API Call to Commerce Suite] --> B(2. CS Processes & Forwards to Gateway);
    B --> C[3. Gateway VT/Reporting];
    A --> D[4. Your API Response Record];
    subgraph 5. Validation Step
        C -.-> E{Compare Records};
        D -.-> E;
    end
    E -- Match --> F[Pass ?];
    E -- Mismatch --> G[Fail ?: Investigate];