Tranzila Payment Gateway
Wire Israeli Tranzila checkout, token charges, and API v1/v2 flows into a solo-built SaaS or store without guessing CGI vs iframe vs HMAC headers.
Install
npx skills add https://github.com/skills-il/tax-and-finance --skill tranzila-payment-gatewayWhat is this skill?
- Documents iframe (`direct.tranzila.com/{supplier}/iframenew.php`), legacy secure5 CGI variants (ILS/USD, multi-currency,
- API V2 auth spelled as a 4-header HMAC-SHA256 handshake (`X-tranzila-api-app-key`, request-time, nonce, access-token); s
- Structured claim pack mirrored across SKILL.md, Hebrew variant, and `references/api-parameters.md` for agent-safe citati
- Covers transaction and endpoint parameters aligned to official Tranzila docs sources
- Fits indie checkout pages, subscription billing, and token-on-file flows targeting the Israeli market
Adoption & trust: 1 installs on skills.sh; 22 GitHub stars; 2/3 security scanners passed (skills.sh audits); trending (+100% hot-view momentum).
Recommended Skills
Entra App Registrationmicrosoft/azure-skills
Azure Aigatewaymicrosoft/azure-skills
Lark Openapi Explorerlarksuite/cli
Supabasesupabase/agent-skills
Firebase Auth Basicsfirebase/agent-skills
Firebase Data Connectfirebase/agent-skills
Journey fit
Primary fit
Payment gateway work belongs on the build shelf once scope is set—this skill is the integration reference for implementing charge and token paths. Third-party payment connectors are canonical integrations subphase artifacts, not launch or operate runbooks.
Common Questions / FAQ
Is Tranzila Payment Gateway safe to install?
skills.sh reports 2 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.
SKILL.md
READMESKILL.md - Tranzila Payment Gateway
{ "schemaVersion": "1.0", "skill": "tranzila-payment-gateway", "generated_at": "2026-05-31T00:00:00Z", "claims": [ { "claim_id": "tranzila-endpoints", "claim": "Tranzila endpoints: iframe at direct.tranzila.com/{supplier}/iframenew.php; legacy CGI on secure5.tranzila.com (tranzila31.cgi ILS/USD, tranzila36a.cgi multi-currency, tranzila31tk.cgi token charge); modern API base https://api.tranzila.com/v1.", "source_url": "https://docs.tranzila.com/", "raw_snippet": "Tranzila https://secure5.tranzila.com/cgi-bin/tranzila31.cgi https://secure5.tranzila.com/cgi-bin/tranzila31tk.cgi https://secure5.tranzila.com/cgi-bin/tranzila36a.cgi /cgi-bin/tranzila31tk.cgi /v2", "fetched_at": "2026-05-31T00:00:00Z", "appears_in": ["SKILL.md", "SKILL_HE.md", "references/api-parameters.md"] }, { "claim_id": "api-v2-hmac-auth", "claim": "Tranzila API V2 authentication is a 4-header HMAC-SHA256 handshake: X-tranzila-api-app-key (public key), X-tranzila-api-request-time (unix ms), X-tranzila-api-nonce (~40 bytes), X-tranzila-api-access-token (HMAC-SHA256 of the app key keyed with secret+request_time+nonce). Base URL is api.tranzila.com/v1; a single-header request is rejected.", "source_url": "https://docs.tranzila.com/", "raw_snippet": "X-tranzila-api-app-key", "fetched_at": "2026-05-31T00:00:00Z", "appears_in": ["SKILL.md", "SKILL_HE.md", "references/api-parameters.md"] }, { "claim_id": "transaction-codes", "claim": "Tranzila transaction params: Response 000 = approved; cred_type 1 regular / 2 Visa Adif-Amex / 3 immediate debit / 5 Leumi special / 8 installments / 9 club installments; installment params npay/fpay/spay with fpay+npay*spay=sum; currency 1 ILS / 2 USD / 3 GBP / 7 EUR; tranmode K/VK/AK and C{index} refund; token field TranzilaTK. Confirmed response codes: 004 refusal, 036 expired, 037 installment error (sum must equal first payment + fixed payments x count), 900 3DS-failed (3DS code space 900-930). HTTP status is 200 even on a declined transaction; the SHVA code is in the body.", "source_url": "https://docs.tranzila.com/", "raw_snippet": "Tranzila", "fetched_at": "2026-05-31T00:00:00Z", "appears_in": ["SKILL.md", "SKILL_HE.md", "references/error-codes.md", "references/api-parameters.md"] }, { "claim_id": "bit-api", "claim": "Tranzila Bit is a dedicated API (Bit Init / Bit Refund endpoints under api.tranzila.com/v1 with the 4-header HMAC auth), not a bit=1 flag on the card CGI. Bit constraints: NIS only, sum above 5 NIS, merchant needs a Visa or Isracard identifier, Max-only merchants are not offered Bit; no Hosted Fields / 3DS.", "source_url": "https://docs.tranzila.com/docs/payments-billing/dcljft4y7sgj2-bit", "raw_snippet": "Bit", "fetched_at": "2026-05-31T00:00:00Z", "appears_in": ["SKILL.md", "SKILL_HE.md"] }, { "claim_id": "allocation-number", "claim": "The Israel Tax Authority allocation number (mispar haktza'a) is mandatory for B2B tax invoices above a pre-VAT threshold that steps down: NIS 20,000 (from Jan 2025), NIS 10,000 (from Jan 2026), NIS 5,000 (from Jun 2026). Without it the buyer cannot deduct input VAT.", "source_url": "https://www.gov.il/en/service/allocation-number-application-tax-invoice", "raw_snippet": "allocation", "fetched_at": "2026-05-31T00:00:00Z", "appears_in": ["SKILL.md", "SKILL_HE.md"] }, { "claim_id": "tranzilajs-lib", "claim": "tranzilajs is a community TypeScript/Node.js Tranzila client at github.com/NirTatcher/tranzilajs (npm: tranzilajs).", "source_url": "https://github.com/NirTatcher/tranzilajs", "raw_snippet": "tranzilajs", "fetched_at": "2026-05-31T00:00:00Z", "appears_in": ["SKILL.md"] }, { "claim_id": "tranzila-company", "claim": "Tranzila is an Israeli payment processor (solek) operating since 1999, connected to t