Paybox Direct (by Verifone) is a powerful API-based payment solution that enables merchants to process credit card payments through secure server-to-server (S2S) communication, widely trusted across France and Europe.

Accept Visa, Mastercard and other major card networks directly from your Odoo website. Card details are collected via an inline form and securely transmitted to the Paybox API, with full HMAC-SHA512 signature authentication. Card data is never stored in Odoo.

This module fully integrates Paybox Direct into Odoo with support for authorization, capture, refund, void, and manual capture workflows. It supports many currencies and provides comprehensive error handling with detailed transaction tracking.

Why Paybox Direct for your Odoo store?

Unlike hosted payment pages that redirect customers to an external site, Paybox Direct keeps the entire checkout experience on your website. This reduces cart abandonment and increases conversion rates while maintaining the highest security standards.

Key Features

• Secure server-to-server (S2S) card payment processing via Paybox Direct API
• Inline payment form - no redirect, seamless checkout experience that boosts conversion rates
• Full HMAC-SHA512 cryptographic signature on every API request
• Support for authorize-only and authorize + capture payment workflows
• Full refunds directly from the Odoo backend
• Void/cancel unauthorized transactions with a single click
• Many currencies supported via ISO 4217 standard
• Real-time transaction processing with instant order confirmation
• Comprehensive error handling with detailed French error code mapping
• Lightweight integration - only requires the standard Python requests library
• Card data never stored in Odoo for maximum PCI compliance
• Test (sandbox) and Production environments with separate URLs
• Backed by Verifone, a global leader in payment processing trusted by thousands of merchants

Security & Compliance

• HMAC-SHA512 Authentication: Every API request is cryptographically signed to prevent tampering and fraud
• No Card Storage: Card data is transmitted directly to the Paybox API and never persisted in your Odoo database
• Access Token Protection: CSRF-protected endpoints ensure only legitimate payment requests are processed
• Client-Side Validation: Card number, expiry date, and CVV are validated before submission to prevent unnecessary API calls
• Encrypted Communication: All data exchanged over HTTPS with Paybox production and test servers
• Full Traceability: Every transaction stores Paybox NUMTRANS and NUMAPPEL references for audit and reconciliation

Supported Operations

Payment

• Authorize + Capture (immediate payment)
• Authorize only (manual capture later)

Post-Authorization

• Capture (full amount)
• Refund (full amount)
• Void / Cancel

Accepted Cards

• Visa
• Mastercard
• And other card networks supported by the Paybox platform (CB, American Express, Maestro, etc.)

Multi-Currency

Process payments in many currencies using ISO 4217 numeric codes, including EUR, USD, GBP, CHF, CAD, AUD, JPY, and many more.

Use Cases and Compatibility

The module is fully compatible and thoroughly tested for the following use cases:

• E-commerce: Accept card payments on your Odoo website shop checkout
• Customer Portal - Orders: Let customers pay their sales orders via the portal
• Customer Portal - Invoices: Accept invoice payments directly from the portal
• Payment Links: Generate and share payment links from Odoo for remote payments

Setting up Paybox Direct card payments is simple, fast, and perfectly integrated with Odoo.

1. Install the module via your Odoo back office.
2. Create your Paybox merchant account

   Contact Verifone / Paybox to obtain your credentials.

3. Configure the provider in Odoo

   Go to Accounting > Configuration > Payment Providers, select Paybox Direct, and fill in:

   • Site Number: Your merchant site number (7 digits)
   • Rank: Your merchant rank (2 digits)
   • Identifier: Your merchant identifier
   • HMAC Key: Your HMAC-SHA512 secret key (hexadecimal string)
4. Choose the environment

   Set the state to Test (sandbox) or Enabled (production).

Congratulations, you are ready to accept Paybox Direct card payments!

When a customer selects the Paybox Direct payment method, the module:

1. Displays an inline card form (card number, expiry month/year, CVV)
2. Validates input client-side (card format, expiry, CVV digits)
3. Sends card data securely to the backend via access-token-protected endpoint
4. Backend constructs the HMAC-SHA512 signed request and calls the Paybox Direct API
5. Transaction is authorized (or authorized + captured) based on provider settings
6. Customer sees the order confirmation immediately - no external redirect

The entire flow happens in real-time with no external redirect, providing a seamless checkout experience for your customers.

Once the payment is validated by the Paybox API, the transaction status is updated instantly in Odoo. The order is confirmed seamlessly with no delay.

Paybox Direct payment transactions are available in the Odoo backend with full details including Paybox transaction number and call number. From the transaction view, you can perform capture, refund, or void operations directly.

Manage the full lifecycle of your payments directly from the Odoo backend:

• Manual Capture: Authorize first, then capture the full amount when ready
• Full Refund: Refund the entire transaction amount with one click
• Void: Cancel an authorized transaction before capture

All post-authorization operations are performed via the Paybox Direct API with HMAC-SHA512 authentication, ensuring maximum security.