Library

Transaction enrichment library for Laravel

Use TxnKit as a transaction enrichment API from Laravel. This page shows the safe request shape, a short code snippet, and the boundary for keeping sensitive data out of the integration.

Ask about a 100-descriptor cleanup auditInspect the API

Target intent

Laravel applications enriching transaction descriptors through a backend HTTP client.

TxnKit should be called from trusted Laravel server code, not exposed as a public secret-bearing request.

Raw descriptor

SHOPIFY*LOCAL GOODS

Short Laravel API snippet

$response = Http::timeout(1)
    ->withToken(config("services.txnkit.key"))
    ->post("https://api.txnkit.dev/v1/enrich", [
        "raw_description" => $request->input("raw_description"),
        "country" => "CA",
    ]);

return $response->json();

Keep API keys out of browser bundles. For frontend stacks, call a backend route or serverless function that owns the TxnKit request.

API-shaped output

{
  "input": {
    "descriptor": "SHOPIFY*LOCAL GOODS",
    "country": "CA"
  },
  "output": {
    "merchant_name": "Local Goods",
    "category": "Retail",
    "confidence": "medium",
    "signals": [
      "processor_pattern",
      "merchant_alias",
      "category_hint"
    ],
    "warnings": [
      "review_low_confidence_matches_before_showing_logo"
    ],
    "logos": []
  }
}

Low-confidence results should keep fallback labels and warnings visible instead of forcing a guessed logo or website.

When to use

  • You are building in Laravel and need one-descriptor merchant cleanup through an HTTP API.
  • Your app can keep the TxnKit API key on the server side or inside a trusted serverless function.
  • You need merchant display names, categories, confidence, signals, warnings, and logo-ready metadata.

When not to use

  • TxnKit should be called from trusted Laravel server code, not exposed as a public secret-bearing request.
  • Do not use TxnKit to process card numbers, account numbers, full statements, bank credentials, emails, phone numbers, addresses, customer names, or customer PII.
  • Do not use TxnKit when the product requirement is guaranteed merchant identity, every-merchant resolution, or contracted uptime terms.

Proof surfaces

The public contract is POST /v1/enrich, backed by the OpenAPI file, benchmark examples, privacy rules, and deterministic request-path tests.

OpenAPI · Benchmark · Security · Pricing

Related pages