Paytrace Gateway Integration
Introduction
The PayTrace integration allows UltraCart merchants to securely process credit card transactions using the PayTrace payment gateway.
This guide walks you through:
Creating PayTrace API credentials
Configuring the PayTrace gateway in UltraCart
Testing and validating your integration
This integration uses OAuth 2.0 token-based authentication, aligning with modern payment security standards. ucdoc-Paytrace Gateway Integrat…
Prerequisites
Before configuring PayTrace in UltraCart, ensure you have the following:
An active PayTrace merchant account
Permission to create API Users within PayTrace
UltraCart administrative access to:
Payment gateway configuration
Checkout settings
Prerequisite: Do not use your primary PayTrace login credentials. Always create a dedicated API user for integrations. ucdoc-Paytrace Gateway Integrat…
Step 1: Create a PayTrace API User
To authenticate UltraCart with PayTrace, you must create a dedicated API user.
Log in to your PayTrace account
Navigate to:
Users → New UserSelect API User as the user type
Enter:
Username
Password
Assign permissions:
Recommended: Select All (or minimum required permissions)
Click Save
The API username and password created here will be used in UltraCart.
Note: The API password is separate from your PayTrace account login password. ucdoc-Paytrace Gateway Integrat…
Step 2: Understand PayTrace Authentication
PayTrace uses an OAuth 2.0 authentication flow to generate a bearer token.
UltraCart handles this process automatically, but understanding it helps with troubleshooting.
Example Token Request
curl -X POST https://api.paytrace.com/oauth/token \
-H "Accept: */*" \
-d "grant_type=password&username=YourUserName&password=YourPassword"This request returns a Bearer token, which is used for all subsequent API requests.
Warning: Never expose API credentials in client-side code or public repositories. ucdoc-Paytrace Gateway Integrat…
Step 3: Configure PayTrace in UltraCart
Navigate to the UltraCart payment gateway configuration:
Main Menu → Configuration → Checkout → Payments → Transaction Gateways
Create or edit a Single Transaction Gateway
Select PayTrace as the gateway type
Configuration Fields
Field | Description |
|---|---|
Gateway Type | Select PayTrace |
API Username | API user created in PayTrace |
API Password | API password for the API user |
Transaction Source Key | Provided by PayTrace (if applicable) |
Test Mode | Enable for sandbox/testing |
Currency | Must match your PayTrace account |
Authorization Type | Authorize or Authorize + Capture |
Step 4: Save and Test the Configuration
Click Save
Place a test order in your storefront
Verify:
Transaction completes successfully
No gateway errors appear in order logs
Authorization/capture behavior is correct
Security Best Practices
Follow these best practices to protect your integration:
Use dedicated API users for integrations
Assign minimum required permissions
Store credentials securely (server-side only)
Rotate API credentials periodically
Never expose credentials in:
JavaScript
Public repositories
Client-side applications
Tip: Use PayTrace Protect.js or equivalent client-side encryption tools for secure card handling. ucdoc-Paytrace Gateway Integrat…
Troubleshooting
Invalid Credentials Error
Error Example:
Invalid CredentialsResolution:
Verify API username and password
Ensure API user is active
Reset API password if needed
Confirm OAuth request format
Transactions Failing
Confirm the gateway is active
Check for:
Currency mismatches
Authorization type conflicts
Review UltraCart order logs for gateway responses
Unable to Generate Token
Verify the following:
Endpoint is correct:
https://api.paytrace.com/oauth/tokenGrant type is
passwordCredentials are valid
If issues persist, contact PayTrace support.
FAQ
Q: Can I use my PayTrace login credentials?
No. You must create a dedicated API user. Using your primary login is not supported and introduces security risks. ucdoc-Paytrace Gateway Integrat…
Q: Where is the API password generated?
The API password is created when defining the API user:
Users → New User → API User
Q: Should I give full permissions to the API user?
Initial setup: Select All is acceptable
Production: Reduce to only required permissions
Q: Does UltraCart store the OAuth token?
No action is required. UltraCart manages authentication internally using the credentials you provide. ucdoc-Paytrace Gateway Integrat…
Conclusion
Integrating PayTrace with UltraCart provides a secure and scalable way to process payments using modern API authentication.
By properly configuring API users and following security best practices, you ensure:
Reliable transaction processing
Secure handling of payment data
Reduced risk of credential exposure