Connect Revolut Business for card payments

Why Revolut

If your customers are in the UK or the EEA, this is the cheapest way to take a card payment in kitty — around 1%, against 2.9% almost everywhere else. On a hundred sales that difference is real money.

The catch is geography: rates and coverage are much less attractive outside Europe.

Before you start

You need a Revolut Business account with the Merchant feature enabled. A personal Revolut account will not do. Enabling Merchant is free but Revolut reviews the application.

Careful: there are two Revolut connectors

This one, Revolut Business under Take payments, uses the Merchant API and takes your customers' card payments.

There is a separate Revolut Business balances card under Balances and payouts, which uses a different API and different credentials, and only reads your account balances. If you want both, connect both — they are genuinely different keys.

Where to get the two values

Merchant API secret key — Revolut Business → Merchant → API → the Production secret key. Use the Sandbox one only if you are testing.

Webhook signing secret — the same Merchant → API area, Webhooks section. Add a webhook pointing at the URL kitty gives you (see below), then paste the signing secret it hands back.

Connecting

Settings → Connections → Take payments → the Revolut Business card → Connect → paste both values → Save and connect, then Test connection.

The webhook, which is not optional

kitty needs Revolut to tell it when someone pays. Without that, the checkout takes the money and no order, customer or revenue figure ever appears in kitty.

On the connected card, press Webhook URL, copy it, and paste it into Revolut Business → Merchant → API → Webhooks.

Treat that URL like a password — anyone holding it can post events at this venture. It never expires; you rotate it by disconnecting and reconnecting. Deliveries are capped at 300 a minute per venture.

What it can and cannot do here

One-off card payments, with refunds you can issue from kitty. No subscriptions and no failed-payment recovery through kitty.

After it's connected

Test connection proves the key works right now, and names the account it reached — so a member with two logins can see they pasted the wrong one. Do that before you put anything on sale.

Then, in Where new checkouts go, pick this provider on its own or One page, every method, which offers every provider you've connected on a single page and quietly hides one that starts failing.

Anything already on sale keeps the provider it was armed on. A price, once created at a provider, cannot be moved — so to switch, open the venture's Revenue tab, Take off sale, then put it back on sale.

How the keys are stored

Encrypted at rest with AES-256-GCM, used server-side only, never returned to the browser, never written to a log, and never shown again after saving.

Payment keys are scoped to a venture or the whole workspace, never to you personally — two businesses in one workspace settle into two different bank accounts, so a personal key is refused for money on purpose.