Embed Checkout (iframe)

Instead of redirecting, you can embed a checkout session in an iframe on your own page. In iframe mode the checkout does not redirect — it renders success/canceled in place and posts messages to the parent window.

Create a session

Create a session from your backend exactly as in the Quickstart, and keep the returned id.

Embed the session URL

Render an iframe pointing at the session URL with iframe=true and your parentOrigin appended as query params.

<iframe
  src="https://checkout.meru.com/c/cmqx8r2f00012abcde34fghij?iframe=true&parentOrigin=https://your-site.com"
  allow="payment; clipboard-write; clipboard-read"
  style="width: 100%; height: 700px; border: 0;"
></iframe>

The allow="payment; clipboard-write; clipboard-read" attribute is required so the embedded checkout can request payment and let the customer copy the QR payload or address.

Listen for postMessage events

The checkout posts messages to the parent window as the payment progresses. Add the listener below to your page.

window.addEventListener("message", (e) => {
  if (e.origin !== "https://checkout.meru.com") return;     // verify origin
  const m = e.data;
  if (!m || m.source !== "meru-checkout") return;
  if (m.type === "success") { /* mark order paid via your backend, then close iframe */ }
  if (m.type === "cancel")  { /* close the iframe */ }
});

Confirm server-side

The success message is a client signal. Confirm the real payment server-side via GET /checkouts/{id} before fulfilling anything of value.

Message shape

Each message posted to the parent window has this shape:

{
  source: "meru-checkout";
  type: "ready" | "processing" | "success" | "failed" | "cancel";
  checkoutId: string;
  status: string;
  reference: string | null;
  amount: string | undefined;
  currency: string | undefined;
  txHash: string | null;
}

`type`	When it fires
`ready`	The embedded checkout has loaded and is interactive.
`processing`	The customer started paying; transfer is in progress.
`success`	The checkout observed a successful payment (client-side).
`failed`	The payment failed.
`cancel`	The customer canceled.

Always check e.origin === "https://checkout.meru.com" and e.data.source === "meru-checkout" before trusting a message, to avoid acting on spoofed events from other frames.

Quickstart

Create a session and redirect, end to end.

Payment status

Confirm payments server-side by polling.

API Documentation

Guides

Balances

Quotes

Payouts

Payins

Checkout

Cards

Webhooks

Embed Checkout (iframe)

Message shape

Quickstart

Payment status

​Message shape

​Related

Quickstart

Payment status

Message shape

Related