Specification
The failure it is built around
Most lost M-Pesa sales are not failed payments. They are successful payments that the store never recorded, because the callback got lost and nothing went looking for it. That is the problem Attesta exists to close.
- Confirmation
- An order is marked paid against a real M-Pesa receipt and a matching amount. Never on "request accepted".
- Reconciliation
- If the callback does not arrive, Attesta queries M-Pesa until it has a definitive answer, instead of leaving the order hanging.
- Recovery
- When the STK prompt fails, the customer is shown the Pay Bill number and the reference — and the manual payment matches itself to the order.
- Validator
- Checks credentials, callback URL, permalinks and cron before you go live, so setup mistakes surface on your terms.
- Payment page
- Standalone — no theme, no framework, no jQuery. Built for a phone on a slow connection where the customer pays for data by the megabyte.
- Privacy
- Payer phone numbers are masked on every surface, in line with Kenya's Data Protection Act 2019.
- Credentials
- Daraja credentials are stored encrypted in the merchant's own database.
Free vs Pro
The whole payment cycle is free
The complaint on record against the paid M-Pesa plugins is that merchants pay a lot for very little. So the entire billing cycle — STK Push, receipt confirmation, automatic reconciliation, the validators and the C2B fallback — is in the free build and stays there. Pro is about selling in places that are not your shop.
| Capability | Free | Pro |
|---|---|---|
| STK Push (Lipa na M-Pesa)With both Pay Bill and Till. | ||
| Confirmation against a real receiptReceipt and amount must match. Never "request accepted". | ||
| Automatic reconciliationIf the callback is lost, Attesta asks M-Pesa until it knows. | ||
| Recovery when STK failsPay Bill and reference shown; the manual payment matches itself. | ||
| Go-live validatorCredentials, callback URL, permalinks and cron. | ||
| Transaction ledgerEvery M-Pesa receipt stored against its order. | ||
| Encrypted Daraja credentialsStored encrypted in your own database. | ||
| Payment linksCharge over WhatsApp, SMS or an invoice, with no online shop. | ||
| C2B account referencesA reference per customer, tenant or student. | ||
| Standalone till panelTake payments without WooCommerce at all. | ||
| Several shortcodes or branchesMore than one till or location on a single installation. |
Attesta Pro & add-ons
Build your own price
Add-ons are separate products, so you pay only for the ones you need. Nothing you do not buy gets installed. Tick what applies to your business and the total updates as you go.
Attesta Pro
$49 / yearPayment links, C2B account references, the standalone till panel, and several shortcodes or branches on one installation. Always included.
Free is not a demo. The complete payment cycle is in the free build and stays there. If we ever gated it, we would lose the only argument we have.
A lapsed licence never strands a payment. Gating applies to switching on new features, never to a charge already in flight.
Only what you paid for is installed. Add-ons are separate plugins, so you do not carry code for features you never bought.