grow-payment-gateway

An integration guide for Grow by Meshulam, an Israeli online payment service. It covers connecting an application to Grow's Light API for payments and related transactions.

In plain words
What is it for?
Accept card, Bit, Apple Pay, and Google Pay payments; save payment tokens, charge recurring bills, create payment links and invoices, issue refunds, process 3DS checks, and handle webhook notifications.
Why use it?
It explains how to connect to an Israeli payment provider without having to work out each payment step and notification format from scratch.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/squadcodercom/squadcoder/grow-payment-gateway
Any agent
npx skills add squadcodercom/squadcoder --skill grow-payment-gateway
Clone the repo
git clone --depth 1 https://github.com/squadcodercom/squadcoder

Made for: Claude Code, Codex.

Per session 274 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,188 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00274 $0.04188
Opus 5 $0.00137 $0.02094
Sonnet 5 $0.00055 $0.00838
Haiku 4.5 $0.00027 $0.00419

Measured 2d ago against content hash 398474d3458e, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

grow-payment-gateway scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/grow-payment-helper.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -X POST https://sandbox.meshulam.co.il/api/light/server/1.0/createPaymentProcess \
.squadcoder/skills/grow-payment-gateway/SKILL.md · 407 lines

How it starts

The opening of the file, as written. The whole thing — 407 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Grow Payment Gateway (Meshulam)

Overview

Grow (formerly Meshulam) is one of Israel's leading payment gateways, powering thousands of businesses with credit card processing, Bit payments, Apple Pay, Google Pay, and more. Unlike other Israeli gateways, Grow offers a unified API (the "Light API") that covers payment pages, tokenization, recurring billing, payment links, invoices, and webhooks in a single integration.

This skill guides integration with Grow's Light API for the full payment lifecycle: accepting payments, saving tokens for recurring charges, creating payment links for invoices, processing refunds, and handling real-time webhook notifications.

Official docs: https://grow-il.readme.io/

Developer support: [email protected]

Instructions

Step 1: Understand Grow's Authentication

Grow uses three credentials provided during merchant onboarding:

Credential Purpose Notes
userId Merchant identifier Unique per business account
pageCode Payment page configuration Different page codes for different payment types (credit card, Bit, recurring, etc.)
apiKey API authentication Required when managing multiple businesses or specific configurations

Environments:

Environment Base URL
Sandbox (testing) https://sandbox.meshulam.co.il
Production https://secure.meshulam.co.il

Critical: Server-side only. All API requests must originate from your server. Client-side (browser) requests are blocked by Grow.

Critical: FormData format. All request bodies use multipart/form-data, NOT JSON. This is a common mistake -- if you send application/json, the API will reject the request.

Step 2: Choose Your Integration Pattern

Pattern How It Works Best For
Payment Page (iframe/redirect) Grow hosts the payment form; you embed via iframe or redirect E-commerce checkout, one-time payments
SDK Wallet Modular JS SDK embedded in your page Custom UX without iframe/redirect overhead
Payment Link Generate a URL to send to customers Invoicing, freelancer billing, remote payments
Token Charge (server-to-server) Charge a saved token directly Recurring billing, subscriptions, repeat customers

Read the full file on GitHub · 407 lines

Files

What ships with it

9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 407 lines · 274 tokens per session scan A 398474d3458e

Subscribe to this mod's changes

grow-payment-gateway is a skill published in the GitHub repository squadcodercom/squadcoder (11 stars, last pushed 2mo ago), licensed MIT. It adds 274 tokens to every session and 4,188 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

write-zot-themes

Help the user create, install, or package zot themes, including theme-only extensions.

patriceckhart/zot · 23 tokens

python-testing

Python testing best practices using pytest including fixtures, parametrization, mocking, coverage analysis, async testing, and test organization. Use when writing or improving Python tests.

mturac/everything-openai-codex · 35 tokens

database-migrations

Database migration best practices for schema changes, data migrations, rollbacks, and zero-downtime deployments across PostgreSQL, MySQL, and common ORMs (Prisma, Drizzle, Django, TypeORM, golang-migrate). Use when planning or implementing database schema changes.

mturac/everything-openai-codex · 61 tokens

docker-patterns

Docker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration. Use when setting up containerized development environments or reviewing Docker configurations.

mturac/everything-openai-codex · 40 tokens

python-patterns

Python-specific design patterns and best practices including protocols, dataclasses, context managers, decorators, async/await, type hints, and package organization. Use when working with Python code to apply Pythonic patterns.

mturac/everything-openai-codex · 45 tokens

st-full-workflow

Use when the user asks to run the complete end-to-end Strikethroo workflow for a work order in one shot in this repository — triggers include full workflow, end-to-end, plan and execute, do everything, run the whole strikethroo workflow. Do not use when the user wants only one stage (create a plan, generate tasks, or…

e0ipso/strikethroo · 90 tokens