Four adapters · One contract
Payment providers
Same PaymentProvider contract, four interchangeable implementations: Braintree, Cashfree, PayPal, and a self-hosted Blackbaud mock. Switch in one click — every downstream surface, from generated code to the harness to guardrails, stays identical.
One SPI to rule them all
The PaymentProvider contract spans auth, checkout, tokenize, charge, and webhook verification. Adapters supply the provider-specific behavior; everything else stays identical.
A day to add a fifth
Mirror the Braintree adapter, plug in the new credentials, register in the catalogue. The harness and guardrails light up automatically — no UI work.
Provider quirks handled
Braintree’s form-body HMAC, Cashfree’s ms timestamps, PayPal’s PayPal-Request-Id, Blackbaud’s OAuth-plus-subscription-key — every quirk lives inside its adapter.
Capability matrix
Live = end-to-end harness pass against a real provider sandbox today. Code-ready = Pulse generates runnable scaffolds; live harness lands in a later release. Partial = capability reachable but the convenience layer is on the roadmap.
| Provider | Hosted Checkout | Tokenized Card Vault | Payouts | Webhook Verify | Idempotency (native) | MCP Callable |
|---|---|---|---|---|---|---|
| braintree | ||||||
| cashfree | ||||||
| paypal | ||||||
| blackbaud-mock | ||||||
| blackbaud | ||||||
| razorpay |
Braintree
PayPal-owned global processor. Hosted Fields tokenization, SHA1 HMAC webhooks.
Cashfree
India PG. Drop-in checkout, HMAC-SHA256 webhooks. Direct REST against sandbox.cashfree.com/pg.
PayPal
Orders v2 REST. OAuth client-credentials, native PayPal-Request-Id idempotency, verify-webhook-signature API.
Blackbaud (mock)
Self-hosted real-shape mock — OAuth 2.0 with consent screen, Bb-Api-Subscription-Key dual-credential gate, HMAC-signed webhooks.
Blackbaud
Real SKY Payments API. OAuth 2.0 authorization-code + rotating refresh token, Bb-Api-Subscription-Key, server-driven CreateTransaction against a BBMS Test merchant.
Razorpay
India live rail. Standard Checkout against api.razorpay.com, Basic-auth Orders API, HMAC-SHA256 (hex) payment + webhook signatures.