Connect Airwallex

Why Airwallex

Global card acceptance at around 2.9%, with noticeably better rates and coverage in Asia-Pacific than most alternatives.

Its second advantage is that one credential does two jobs. The same client id and API key that take card payments also let kitty read your multi-currency balances into the venture's Finance panel, so you can see what you are holding in each currency beside the revenue that filled it.

Before you start

You need an Airwallex business account, which requires their KYB check. Start that first.

Where to get the three values

Client ID and API key — Airwallex → Developer → API keys. Create a key; the client id sits alongside it on the same page.

Webhook secret — Airwallex → Developer → Webhooks. Add an endpoint pointing at the URL kitty gives you (see below), then copy the secret.

Connect with the client id and API key first, copy the webhook URL, add the endpoint at Airwallex, then Replace keys with the secret filled in.

Connecting

Settings → Connections → Take payments → the Airwallex card → Connect → fill the fields → Save and connect, then Test connection.

Your balances appear on the venture's Finance → Revenue tab once the connection works. They are strictly read-only: kitty can see them and cannot move money on them.

What it can and cannot do here

One-off card payments and chargeback reporting. No subscriptions and no failed-payment recovery through kitty, and refunds are issued in Airwallex's own dashboard.

The webhook, which is not optional

kitty needs Airwallex to tell it when someone pays. Without that, the checkout takes the money and no order, customer or revenue figure ever appears in kitty.

On the connected card, press Webhook URL, copy it, and paste it into Airwallex → Developer → Webhooks.

Treat that URL like a password — anyone holding it can post events at this venture. It never expires; you rotate it by disconnecting and reconnecting. Deliveries are capped at 300 a minute per venture.

After it's connected

Test connection proves the key works right now, and names the account it reached — so a member with two logins can see they pasted the wrong one. Do that before you put anything on sale.

Then, in Where new checkouts go, pick this provider on its own or One page, every method, which offers every provider you've connected on a single page and quietly hides one that starts failing.

Anything already on sale keeps the provider it was armed on. A price, once created at a provider, cannot be moved — so to switch, open the venture's Revenue tab, Take off sale, then put it back on sale.

How the keys are stored

Encrypted at rest with AES-256-GCM, used server-side only, never returned to the browser, never written to a log, and never shown again after saving.

Payment keys are scoped to a venture or the whole workspace, never to you personally — two businesses in one workspace settle into two different bank accounts, so a personal key is refused for money on purpose.