Payments
Connect BlueSnap
Accept card payments through a BlueSnap merchant account.
Overview
BlueSnap + TackQuote
TackQuote's BlueSnap integration takes card payments on quotes through BlueSnap's hosted checkout. Amounts are sent as an encrypted parameter string generated by BlueSnap itself, so a quote total cannot be altered in the buyer's browser. Settlement is verified twice over by unrelated mechanisms — the notification's authkey digest must match a value derived from your Data Protection Key, and the request must arrive from one of BlueSnap's published addresses — and the paid amount is then read back from BlueSnap directly rather than taken from the notification. Note that BlueSnap's hosted page prices from a product that already exists in your portal, so one placeholder product must be created before checkout will work.
TackQuote connects to BlueSnap with API credentials, your store id and one placeholder contract id. The placeholder is the only unusual step.
Before you start
What you'll need
- BlueSnap merchant account
- API username and password, plus your Store ID
- One placeholder product in your BlueSnap portal, for the per-quote amount override
- Your BlueSnap Data Protection Key
- TackQuote Starter plan or above
Setup
How to connect BlueSnap
Get API credentials
In the BlueSnap Merchant Portal go to Settings → API Settings and create an API username and password.Create a placeholder product
BlueSnap’s hosted page prices from an existing product, so per-quote amounts are sent as an encrypted override on one. Create any single placeholder product and note its contract id.Copy your Data Protection Key
From Settings → Data Protection. This is what verifies incoming settlement notifications.Connect and register the IPN
Enter everything in TackQuote Settings → Payments → BlueSnap, then register the webhook URL shown there in BlueSnap’s IPN Settings.Go live
The buyer starting checkout is what routes a quote to BlueSnap, and only when no higher-priority gateway (Stripe, Authorize.net, Square, Adyen, PayPal, Razorpay, Mollie, Klarna) is connected. Routing order is fixed, so connecting BlueSnap alongside one of those changes nothing until the other is disconnected.
Capabilities
What you get
Encrypted Hosted Checkout
The quote amount and currency are encrypted by BlueSnap before the buyer is redirected, so neither can be tampered with in transit.
IPN Authenticity Digest
Every notification carries an authkey derived from your Data Protection Key, which is checked before anything is acted on.
Source-IP Allowlist
Settlement requests are additionally required to originate from BlueSnap’s published addresses, so the digest is never the only thing standing in the way.
Authenticated Amount Check
BlueSnap’s digest covers identifiers rather than money, so the paid amount and currency are read back from BlueSnap and matched against the quote.
FAQ
BlueSnap questions
Why do I need to create a placeholder product?
BlueSnap’s hosted checkout is built around products and contracts configured in your portal rather than free-form amounts. TackQuote sends each quote total as an encrypted override on an existing contract, so there has to be one for the override to attach to. It is a one-time step and the product is never shown to buyers as a catalogue item.
How is a BlueSnap settlement notification verified?
Two independent checks must both pass: the request must come from one of BlueSnap’s published IP addresses, and the authkey digest must match a value computed from your Data Protection Key. Because that digest covers identifiers rather than the amount, TackQuote then reads the transaction back from BlueSnap to confirm what was actually paid.