Laravel Daraja

Every Safaricom M-Pesa Daraja API, as ordinary Laravel code. Seventeen APIs — STK Push, C2B, B2C, B2B, Dynamic QR, M-Pesa Ratiba, Bill Manager and the rest — with typed responses, cached tokens, and callbacks you can actually test.

📖 Documentation · Install · STK Push · Going live

Daraja::stk()->push(phone: '0712345678', amount: 1500, accountReference: 'INV-001');

Requirements

PHP 8.3+
Laravel 12 or 13

Installation

composer require starnerz/laravel-daraja

DARAJA_MODE=sandbox
DARAJA_CONSUMER_KEY=your-consumer-key
DARAJA_CONSUMER_SECRET=your-consumer-secret
DARAJA_STK_SHORTCODE=174379
DARAJA_STK_PASS_KEY=your-passkey
DARAJA_STK_CALLBACK_URL=https://your-domain/daraja/stk

Verify the credentials:

php artisan daraja:token

Prompt a customer to pay

use Starnerz\LaravelDaraja\Facades\Daraja;

$response = Daraja::stk()->push(
    phone: '0712345678',       // any Kenyan format
    amount: 1500,
    accountReference: 'INV-001',
);

$response->accepted();          // Safaricom sent the prompt
$response->checkoutRequestId;   // identifies this attempt

The payment result arrives later on your callback URL:

use Starnerz\LaravelDaraja\Events\StkCallbackReceived;

Event::listen(function (StkCallbackReceived $event) {
    if ($event->callback->successful()) {
        Order::markPaid(
            $event->callback->checkoutRequestId,
            $event->callback->receipt(),
        );
    }
});

Supported APIs


M-Pesa Express	`Daraja::stk()->push()` / `->query()`
Customer to Business	`Daraja::c2b()->registerUrls()` / `->simulatePayBill()`
Business to Customer	`Daraja::b2c()->business()` / `->salary()` / `->promotion()`
Business to Pochi	`Daraja::b2c()->pochi()`
Business to Business	`Daraja::b2b()->payBill()` / `->buyGoods()` / `->accountTopUp()`
B2B Express Checkout	`Daraja::b2bExpress()->push()`
Account Balance	`Daraja::balance()->query()`
Transaction Status	`Daraja::transaction()->query()`
Reversal	`Daraja::reversal()->reverse()`
Dynamic QR	`Daraja::qr()->generate()`
M-Pesa Ratiba	`Daraja::standingOrder()->create()`
Bill Manager	`Daraja::billManager()->invoice()`
Pull Transactions	`Daraja::pull()->query()`
Lipa na Bonga	`Daraja::bonga()->redeem()`

Testing

Built on Laravel's HTTP client, so Http::fake() drives the whole package — no sandbox credentials, network or handset required.

Http::fake([
    '*/oauth/*' => Http::response(['access_token' => 'test']),
    '*/mpesa/stkpush/*' => Http::response(['ResponseCode' => '0']),
]);

See the testing guide.

Upgrading from 4.x

v5 is a rewrite: the facade is now Daraja, responses are typed objects, and several endpoints moved (C2B to v2, B2C to v3). See the upgrade guide.

Laravel 10 and 11 are not supported — both are past end of life and carry unpatched advisories. Applications on those versions should stay on ^4.0.

Contributing

See CONTRIBUTING.md.

Security

Report vulnerabilities to [email protected] rather than the issue tracker. See SECURITY.md.

Licence

MIT. See LICENSE.

Laravel Daraja Laravel Package