Install
$ agentstack add skill-sepivip-claude-skill-bog-payment-gateway-bog-payment-gateway ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
BOG Payment Gateway Integration
This skill provides guidance for integrating with the Bank of Georgia (BOG) Online Payment API.
Quick Reference
| Item | Value | |------|-------| | Auth URL | https://oauth2.bog.ge/auth/realms/bog/protocol/openid-connect/token | | API Base | https://api.bog.ge/payments/v1 | | Auth Method | OAuth 2.0 Client Credentials | | Data Format | JSON |
IMPORTANT:
- All callback URLs MUST use HTTPS
- All API requests MUST include
Accept-Language: kaorAccept-Language: enheader
Integration Flow
- Authenticate - Get access token using client credentials
- Create Order - Submit order with basket items and callbacks
- Redirect - Send customer to payment page (URL from response)
- Handle Callback - Receive payment result at callback URL
- Verify - Check payment status via API
Authentication
const getAccessToken = async (clientId: string, clientSecret: string) => {
const credentials = Buffer.from(`${clientId}:${clientSecret}`).toString('base64');
const response = await fetch(
'https://oauth2.bog.ge/auth/realms/bog/protocol/openid-connect/token',
{
method: 'POST',
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': `Basic ${credentials}`
},
body: 'grant_type=client_credentials'
}
);
const { access_token, expires_in } = await response.json();
return { access_token, expires_in };
};
Core Endpoints
Create Order
POST https://api.bog.ge/payments/v1/ecommerce/orders
Authorization: Bearer {access_token}
Content-Type: application/json
Request body:
{
"callback_url": "https://example.com/callback",
"external_order_id": "ORDER-123",
"purchase_units": {
"currency": "GEL",
"total_amount": 100.00,
"basket": [
{
"product_id": "PROD-1",
"quantity": 1,
"unit_price": 100.00
}
]
},
"redirect_urls": {
"success": "https://example.com/success",
"fail": "https://example.com/fail"
}
}
Response includes _links.redirect.href for payment page URL.
Get Payment Details
GET https://api.bog.ge/payments/v1/receipt/{order_id}
Authorization: Bearer {access_token}
Refund Payment
POST https://api.bog.ge/payments/v1/payment/refund/{order_id}
Authorization: Bearer {access_token}
Content-Type: application/json
{"amount": 50.00} // Optional - omit for full refund
Response Codes
| Code | Meaning | |------|---------| | 100 | Successful payment | | 200 | Successful preauthorization | | 101 | Card usage limited | | 102 | Saved card not found | | 103 | Invalid card | | 104 | Transaction limit exceeded | | 105 | Card expired | | 106 | Amount limit exceeded | | 107 | Insufficient funds | | 108 | Authentication declined | | 109 | Technical issue | | 110 | Transaction expired | | 111 | Authentication timeout | | 112 | General error |
Detailed References
- Full API Reference: See [references/api.md](references/api.md) for complete endpoint documentation
- TypeScript Types: See [references/types.ts](references/types.ts) for type definitions
- Error Handling: See [references/api.md](references/api.md) for error code details
Implementation Checklist
- Store
client_idandclient_secretsecurely (env vars) - Implement token caching with expiry handling
- Use HTTPS for all callback URLs
- Implement idempotency keys for order creation
- Handle all response codes appropriately
- Log transaction IDs for debugging
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sepivip
- Source: sepivip/claude-skill-bog-payment-gateway
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.