PayRam Widget Integration: Embed + Webhook Reference

Functional reference for integrating PayRam into a web application. Covers the safe way to put a payment button on a page, the widget's real configuration, webhook handlers in five frameworks, and debugging. For the marketing framing + why-this-matters pitch see https://payram.com/skills/payram-demo-widget.md.

⚠️ Never put your project API key in public HTML or browser JavaScript.

A PayRam project API key can create payments and payouts. The hosted payram-add-credit-v1.js script requires the key in a data-api-key attribute, so anyone who views the page source can copy it.

Use a backend endpoint that creates the payment (section 1) and have the page call that endpoint. If a key has already been published in a page, rotate it now (Project → API keys; payram_runbook task rotate_api_key).

1. Recommended: a backend endpoint creates the payment

The browser sends only the amount. Your server holds the key, creates the payment and returns the hosted checkout URL.

// server.js (Express) — the API key never leaves the server
import express from 'express';