WP Manifestindependent plugin directory
manifest / ecommerce / brimstone-gateway

Brimstone Gateway

PCI-compliant NMI payment gateway for WooCommerce with Collect.js, 3D Secure, Customer Vault, webhooks, and WooCommerce Subscriptions support.

by Brimstone Hill · github.com/kailanwyatt/brimstone-gateway · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/kailanwyatt/brimstone-gateway/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/kailanwyatt/brimstone-gateway ↗

PCI-compliant NMI payment gateway for WooCommerce with Collect.js, 3D Secure, Customer Vault, webhooks, and WooCommerce Subscriptions.

Description

Brimstone Gateway connects WooCommerce to NMI (Network Merchants / InterGateway) using:

  • Collect.js tokenization (card data never touches your server)
  • Gateway.js 3D Secure 2
  • Customer Vault and saved cards
  • Auth/capture, refunds, and voids
  • Webhook signature verification with order status updates
  • WooCommerce Subscriptions renewals via vault
  • Separate eCheck/ACH gateway
  • WooCommerce Blocks checkout support

Default processor host: secure.intergateway.com (configurable to secure.nmi.com or custom URL).

Installation

  1. Upload brimstone-gateway to /wp-content/plugins/
  2. Activate the plugin
  3. Go to WooCommerce → Settings → Payments → Brimstone NMI
  4. Enter your private security key and public tokenization key from the NMI control panel
  5. Configure webhook URL in NMI: copy the Webhook URL from gateway settings to NMI → Settings → Webhooks

Configuration

  • Private security key — API transactions (Settings → Security Keys)
  • Public tokenization key — Collect.js (required)
  • Checkout public key — Gateway.js 3D Secure (optional but recommended)
  • Webhook signing key — Webhook HMAC verification

Migration

If migrating from nmi-for-woocommerce or wp-nmi-gateway-pci-woocommerce:

  1. Configure Brimstone Gateway with the same NMI credentials
  2. Disable the old gateway plugins
  3. Customers may need to re-save payment methods (gateway ID changed to brimstone_nmi)

WooCommerce Subscriptions

Install WooCommerce Subscriptions for membership renewals. Renewals charge the Customer Vault ID stored on the subscription (not NMI recurring plans).

Testing

Use sandbox mode with test card 4111111111111111 and sandbox keys from your NMI sandbox account.

NMI / bank underwriting checklist

If your processor requires a compliant website before enabling live payments:

  • Terms & Conditions, Privacy Policy, and Return/Refund Policy — publish pages and assign them in WooCommerce → Settings (the Brimstone Hill theme can seed pages under Settings → Payment compliance).
  • Card logos — Visa, Mastercard, and Discover are shown in the site footer and at checkout when Brimstone NMI is active.
  • SSL / secure host — production checkout must use HTTPS. The gateway disables itself when checkout is not served over SSL (unless bsg_nmi_allow_non_ssl is filtered on for local dev only).
  • Page before payment — use Book tickets, Donate, or Membership pages before WooCommerce checkout (recommended).
  • Software updates — keep WordPress, WooCommerce, PHP, and plugins current on production.
  • Captcha — required for NMI hosted payment pages. This integration uses embedded Collect.js on WooCommerce checkout; add reCAPTCHA or Turnstile via a WooCommerce checkout plugin, or enable captcha in the NMI hosted portal if you use that flow.

Changelog

1.0.0

  • Initial release