Payment Sandbox Keys

Digital Creativity — sandbox credentials only — 2026-10-04

One issue to fix

STC Pay — STCPAY_TEST_INQUIRY_URL points at the live host apigw.stcpay.com.sa instead of the QA host. Test inquiries hit production.

1 — HyperPay (OPPWA)

reference: taharksandbox

Field	Value
Base URL	`https://test.oppwa.com`
Entity ID — mada	`8ac7a4c79985c1200199906952900736`
Entity ID — visa	`8ac7a4c79985c1200199906952900736`
Entity ID — applepay	`8ac7a4c99404f9f40194122f86920b74`
Access token	`OGFjN2E0Yzc5OTg1YzEyMDAxOTk5MDY5MDQzYTA3MzJ8RnlSUzlyRytUOkJXJXpVWUhlOTI=`
HMAC key	`865AFF207C745E47DF74DB16548F07496EEB0516E846D7EC3E0DB8535E27FF6E`
Webhook	`https://api.tahark.sa/api/payments/webhook`
Other projects	alsat7ahservices, togorume, homecookapp, nearmeap, first — own test entity IDs, same base URL

2 — Tap

harajalsaidsandbox

Field	Value
Secret — web	`sk_test_kTBv4061mpQ7iz3tLRExDFgX`
Secret — android	`sk_test_ryRsdb29TwEezM4o0ciCULt5`
Public — android	`pk_test_1dDMG8HhJasVoSnEmTb2kxQ7`
Merchant ID	`17260734`
Callback URL	`https://backend.harajalsaid.com/api/post_payment_log`
Force test mode	`false` set true to force sandbox

3 — Tabby

harajalsaidsandbox — mode=test

Field	Value
Base URL	`https://api.tabby.sa`
Merchant code	`QANHFGG4`
Public key	`pk_test_01a07e07-9ddd-3660-68c8-dabc352a6de5`
Secret key	`sk_test_01a07e07-9ddd-3660-68c8-dabd33408b55`
Webhook header	`X-Tabby-Signature`
Webhook secret	`5f87f4684636a48cb8b654e4dcd4f1177806beb49a9b1b96b068addd8ecfe77f` unprefixed var, in use while mode=test
Return base	`https://backend.harajalsaid.com`
Timeout / available	`30`s — `1`

4 — STC Pay

reference: taharksandbox

Field	Value
Base URL	`https://gw.apps.datapower.dev.stcpay.com.sa/stcpay-qa-org01/stcexternal/b2b`
Token URL	`https://gw.apps.datapower.dev.stcpay.com.sa/stcpay-qa-org01/stcexternal/stcpayout-nativeoauth/oauth2/token`
Payment order	`https://gw.apps.datapower.dev.stcpay.com.sa/stcpay-qa-org01/stcexternal/b2b/payment-order`
Payment inquiry	`https://gw.apps.datapower.dev.stcpay.com.sa/stcpay-qa-org01/stcexternal/b2b/payment-order-inquiry`
Client ID	`ce73fdb618e26cbeaa0249967e72f39a`
Client secret	`284fedc7d6db08466e12adf7127900d2`
Merchant ID	`61771835821`
Scope	`B2B-FullAccess`
Other projects	nearmeap — test merchant `61749597799`