Description

Cleo Payments for WooCommerce integrates Cleo/Sweetpay’s BNPL payment method into your
WooCommerce checkout. It lets your customers pay in 14 days, 30 days, or 3 installments,
without a credit card.

The plugin creates a checkout session with the Cleo API, redirects the customer to complete
payment off-site, and automatically updates the order status in WooCommerce via confirmation
callbacks.

Supported markets and currencies

Chile — CLP

This version only supports Chile (CLP). The payment method is only enabled when the store’s
configured currency is CLP.

Features

Test mode and live mode with independent credentials.
Optional HMAC signature verification for payment confirmation callbacks (see the security
section below).
“Payment Method” column in the admin order list.

Callback security

Payment confirmation callbacks can be verified with an HMAC signature shared with Cleo. This
verification is disabled by default until you confirm the signature header name and shared
secret for your account with your Cleo integration contact. Enable it under Settings Cleo
“Enforce Webhook Signature” once configured.

External services

This plugin connects to the Cleo API to offer Buy Now, Pay Later as a payment method at checkout.

It sends order data to Cleo (amount, order items, and the customer’s billing contact/address
details from checkout) when the customer selects Cleo and starts the checkout session. Cleo then
redirects the customer back to your store and sends a payment confirmation callback to update the
order status — no data is sent to Cleo outside of these two moments.

This service is provided by Cleo (Chile): Terms and Conditions,
Privacy Policy.

Installation

Upload the plugin folder to /wp-content/plugins/, or install it from the WordPress admin
(Plugins Add New Upload Plugin).
Activate the plugin from the ‘Plugins’ menu.
Go to WooCommerce Settings Payments Cleo te fía! to configure your credentials.
Enter your MerchantID and Auth Token (test or live, depending on the mode) and select your
country.
Enable the payment method.

FAQ

Which currencies does Cleo support?: CLP. The payment method is automatically hidden if your store’s currency isn’t CLP.
How do I test checkout before going live?: Enable “Test mode” in the gateway settings and enter your test credentials (Test MerchantID /
Test Auth Token). Test mode transactions don’t process real payments.
The confirmation callback isn’t updating the order status: Check that https://your-site.com/wc-api/sweetpay_payment_success is publicly reachable (no
firewall/WAF blocking it), and that, if you enabled “Enforce Webhook Signature”, the configured
header and secret match exactly what Cleo sends.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Cleo Payments for WooCommerce” is open source software. The following people have contributed to this plugin.

cleodevs

Translate “Cleo Payments for WooCommerce” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.1.4

Sanitized webhook callback data before storing it in order meta.
Scoped supported markets to Chile (CLP) only.
Added the Requires Plugins: woocommerce header.
Fixed the Contributors field to match the WordPress.org account.
Documented the Cleo API as an external service, with links to its Terms and Privacy Policy.

1.1.3

Removed the Plugin URI header (was identical to Author URI, flagged by the WordPress.org
submission form as an error — both must be different or only one provided).

1.1.2

Removed a hardcoded fallback API key. The gateway is now disabled at checkout if no real
merchant credentials are configured, instead of falling back to a generic embedded key.

1.1.1

Renamed the plugin (name and slug) to comply with the WordPress.org trademark policy.
Removed the unused i18n class (load_plugin_textdomain() is discouraged since WP 4.6).
Fixed remaining Plugin Check warnings: unescaped output, missing translators comments,
missing direct-access guards, non-prefixed global function names, and nonce-verification
false positives on webhook callbacks (documented with phpcs:ignore, not worked around with
a fake nonce).

1.1.0

High-Performance Order Storage (HPOS) compatibility.
Support for the WooCommerce Cart/Checkout Block.
Fixed HMAC callback signature verification to match the API’s real format and enabled
sign_callback when creating a session.
Fixed the Authorization header (was missing the Bearer prefix).
Deduplication of callbacks retried by Cleo (avoids reprocessing the same confirmation).
Removed unused code and fixed non-translatable strings.

1.0.0

Initial integration of Cleo/Sweetpay’s BNPL payment method into WooCommerce.
Test/live mode support with independent credentials per mode.
Optional HMAC signature verification for payment confirmation callbacks.