Merchant Warrior for Woo WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Adds Merchant Warrior as a WooCommerce payment gateway using the MW Payframe for PCI-compliant card tokenisation.

Description

This plugin integrates Merchant Warrior with WooCommerce via the MW Payframe method.

Card details are entered by the customer inside a Merchant Warrior-hosted iframe. Sensitive payment data never touches your server, allowing you to achieve SAQ A PCI DSS compliance.

Features

• MW Payframe integration — card data never stored on your server
• Sandbox / test mode for safe development and QA
• Refund support via the WooCommerce order screen
• HPOS (High-Performance Order Storage) compatible

Requirements

• An active Merchant Warrior account
• WooCommerce 7.0 or later
• PHP 8.1 or later

Installation

1. Upload the plugin folder to /wp-content/plugins/.
2. Activate the plugin through the Plugins screen in WordPress.
3. Go to WooCommerce > Settings > Payments and click Merchant Warrior.
4. Enter your Merchant UUID, API Key, and API Passphrase (from your Merchant Warrior Barracks/Camp dashboards).
5. Disable Sandbox Mode when you are ready to accept live payments.

Frequently Asked Questions

Where do I find my API credentials?

For live credentials, log in to Barracks and navigate to Settings to find your Merchant UUID, API Key, and API Passphrase. For sandbox credentials, log in to Camp and navigate to Settings to find your Merchant UUID, API Key, and API Passphrase.

Is this plugin PCI compliant?

Yes. Because card details are captured inside the Merchant Warrior-hosted Payframe iframe, your server never processes raw card data. This qualifies for SAQ A compliance.

Does this support refunds?

Yes. Partial and full refunds can be initiated from the WooCommerce order screen.

External Services

This plugin connects to the Merchant Warrior payment platform to process credit and debit card payments. The following third-party services are used:

• Merchant Warrior API (https://www.merchantwarrior.com/) — Used to obtain a Payframe access token and to process card payments. Customer billing data (name, address, email, phone, IP address) and the tokenised card reference are transmitted to Merchant Warrior's servers on checkout. This service is subject to the Merchant Warrior Terms of Service and Privacy Policy.
• Merchant Warrior Payframe (https://secure.merchantwarrior.com/payframe/) — A hosted iframe loaded from Merchant Warrior's servers into the checkout page. Card details are entered directly into this iframe and are never transmitted to or stored on your server. The sandbox equivalent is loaded from https://securetest.merchantwarrior.com/payframe/.

Privacy Policy

This plugin transmits the following customer data to Merchant Warrior's servers when a payment is processed:

• Billing name, address, city, state, postcode, and country
• Billing email address and phone number
• Customer IP address
• A tokenised card reference (no raw card data is ever transmitted through your server)

Card details themselves are entered inside a Merchant Warrior-hosted iframe and transmitted directly to Merchant Warrior — they never pass through your web server.

Please refer to the Merchant Warrior Privacy Policy for details on how Merchant Warrior handles this data.

Changelog

1.5.0

• Added 3DS 2.0 support.
• Added Settings link on the Plugins screen.
• Fixed fatal error when editing the checkout page in the block editor.

1.4.0

• Initial public release.

Upgrade Notice

1.4.0

Initial public release.