Riverty (formerly AfterPay) at checkout: pay by invoice in 14 or 30 days for Germany, Austria, Switzerland, the Netherlands, Belgium and the Nordics.
Tested on 2 buildsUpdated Nov 9, 2026Version 1.0.0CS-Cart, Multi-Vendor 4.17.2 – 4.21.x No core file edits
Built for
Riverty for CS-Cart and Multi-Vendor: Riverty pay by invoice at checkout with capture, void and refund from the order page1 of 6
What it does
Riverty, formerly AfterPay, lets customers receive the goods first and pay by invoice in 14 or 30 days. This add-on connects CS-Cart, CS-Cart Ultimate, Multi-Vendor and Multi-Vendor Ultimate to the Riverty payment API for Germany, Austria, Switzerland, the Netherlands, Belgium, Sweden, Norway, Finland and Denmark. It is for shops that sell to private and business customers in these countries and need a Riverty account.
How it works
Enter the Riverty test key of each country, test the connection, add a payment method with the Riverty processor and go live with your live keys. At checkout the customer picks private or company, gives the data for the country and accepts Riverty's terms; Riverty's page handles identity checks. Riverty reserves the amount, the order moves to your status, and when it reaches the capture status Riverty issues the invoice. Void and refund are on the order tab. Failed calls are retried and listed in the log.
Features
Pay by invoice in 14 or 30 days on Riverty's hosted checkout
Private and company buyers: date of birth, identity number in the Nordics, mobile phone, company data and legal form where the country needs them
Riverty's terms and privacy sentence with links for the buyer's country
Method shown only for country and currency pairs Riverty serves
Capture on a chosen order status, manual full or partial capture by item, void, refund by item or amount
Idempotency keys stored before every call, lost answers read back from Riverty
Pending authorizations are never treated as cancelled, declines show Riverty's own message
One key per country, stored encrypted, test and live mode, a rejected key pauses the add-on
Multi-Vendor: owner mode with capture per vendor order, or one Riverty account per vendor
Job queue with retries, log without buyer data, CSV export
What you get
Package
kv_riverty-1.0.0.zip, installed through Add-ons → Manage add-ons
Updates & support
12 months included. Download new versions from your account and install them in Add-ons → Manage add-ons or the Upgrade Center.
License
1 production installation. Staging, dev and localhost are free and unlimited. The add-on keeps working after the update period ends. How licensing works
For developers
Uses 4 CS-Cart PHP hooks. No core files are changed.
Compatibility
We list only the builds we install and test on. “Tested” means the full test plan was run on that build; “Supported” means the build is inside the supported range and uses the same hooks.
CS-Cart version and edition compatibility
CS-Cart version
CS-Cart
CS-Cart Ultimate
Multi-Vendor
Multi-Vendor Ultimate
4.22 and later
Testing next
Testing next
Testing next
Testing next
4.21.2
Supported
Supported
Supported
Supported
4.20.x
Supported
Supported
Supported
Supported
4.19.x
Supported
Supported
Supported
Supported
4.18.x
Supported
Supported
Supported
Supported
4.17.2
Supported
Supported
Tested
Supported
Before 4.17.2
Not supported
Not supported
Not supported
Not supported
Last tested build: Multi-Vendor 4.17.2, Nov 9, 2026Tested on: Multi-Vendor 4.17.2
Requirements
Platform
CS-Cart or Multi-Vendor 4.17.2 or later (Ultimate editions included)
Requirement
Administrator access to the store's admin panel
Requirement
A Riverty merchant account. Riverty issues one X-Auth-Key per web shop and per country: the test keys come from the Riverty Merchant Portal for the Partner Test environment (you can register there yourself), the live keys are issued by Riverty after their onboarding (contract and checks). Riverty's own steps decide how long that takes; the add-on cannot speed it up
Requirement
A cron job on your server (see step 7)
Requirement
For notifications from Riverty (optional): a public HTTPS address of your store. Ask your Riverty implementation manager to send the checkout events to the webhook address of the Connection page and to give you the shared secret. The add-on also works without events: it reads the order back from Riverty after the customer returns and on every cron run
Core changes
None. Hooks and template overrides only
1.0.0
Nov 9, 2026
Latest
Added 10
Riverty (formerly AfterPay) payment method for CS-Cart, CS-Cart Ultimate, Multi-Vendor and Multi-Vendor Ultimate (4.17.2 to 4.21.x): invoice in 14 or 30 days, authorized on Riverty's hosted checkout.
Direct debit, instalments, Pay in 3 and Riverty's selection page as payment types that are not verified with Riverty yet: off by default, labelled "not verified" and enabled only by the merchant after Riverty confirmed them (instalments and Pay in 3 also need Riverty's checkout rules for credit products from 20 November 2026).
Checkout block with private / company buyer, date of birth, national identity number (Nordics), mobile phone, company name, VAT id and legal form, and the terms and privacy sentence with links Riverty prescribes per country; server-side validation before the order is placed.
Method shown only for country and currency pairs Riverty serves (EUR for DE AT NL BE FI, CHF, SEK, NOK, DKK) and only when the billing country has a key.
Connection page with one X-Auth-Key per country, sealed (AES-256-GCM), Partner Test and live mode, connection test through Get Version, merchant ID, order number prefix; a rejected key (401) pauses the add-on.
Capture on a chosen order status, manual full or partial capture by item, void, refund by item, amount or everything left of an invoice, from the order page; the refund status refunds every invoice of the order; the rest of a reservation stays capturable after a partial refund; captures made in the Riverty portal are adopted so they can be refunded; a refund or capture never changes the order status the merchant set.
Idempotency: every authorize, capture, void and refund stores its key (unique across reinstalls) and reference before the call; a lost answer is repeated with the same key and read back from Riverty; a refund is confirmed by its own refund number; no new operation starts while one is unconfirmed; pending authorizations are never treated as cancelled or failed.
Webhooks with Riverty's signature scheme (t + v1 HMAC-SHA256, 5 minute window), idempotent by message id, state always read back.
Multi-Vendor: marketplace owner mode (one Riverty account, each vendor's shipped order captures that vendor's own lines, refunds limited to the order's share, vendors cannot capture, void or refund) or one account per vendor.
Job queue with retries and back-off, cron (command line and secret address), log viewer without buyer data, CSV export.
Tested on Multi-Vendor 4.17.2. First release.
Does it work with CS-Cart and Multi-Vendor?
Yes: CS-Cart, CS-Cart Ultimate, Multi-Vendor and Multi-Vendor Ultimate. In Multi-Vendor the marketplace owner can use one Riverty account for everyone (each vendor's shipped order is captured on its own) or let each vendor connect their own.
Which CS-Cart versions are supported?
4.17.2 to 4.21.x.
Is this the AfterPay add-on?
Riverty is the new name of AfterPay. Existing AfterPay merchants keep their contract; Riverty issues the API keys. The add-on talks to Riverty's current BNPL API.
Which countries and payment types?
Invoice (14 or 30 days), the verified payment type: Germany, Austria, Switzerland, the Netherlands, Belgium, Sweden, Norway, Finland, Denmark. Company invoice (B2B): Germany, Austria, the Netherlands. What you can actually sell depends on your contract with Riverty.
Direct debit, instalments, Pay in 3 and Riverty's selection page are built from Riverty's API reference but are not verified with Riverty yet: they are off by default, labelled "not verified – needs Riverty confirmation" and should only be switched on (Enable payment types not verified with Riverty) after your Riverty integration manager confirmed them for your contract in the Partner Test environment. Where Riverty offers them: direct debit in Germany, Austria and the Netherlands (the buyer enters an IBAN), instalments in Germany, Austria and the Nordics (needs your instalment profile number), Pay in 3 in the Netherlands.
Instalments, Pay in 3 and the Consumer Credit Directive (from 20 November 2026)
Instalments and Pay in 3 are credit products. From 20 November 2026 the EU Consumer Credit Directive 2023/2225 (CCD2) applies, and Riverty publishes separate checkout rules for payment methods in its scope. Those rules were not available to us when this version was built. Before you switch instalments or Pay in 3 on, ask your Riverty integration manager to confirm what your checkout must show (method name, representative example, pre-contractual information, consent) and whether Riverty's hosted page covers it. The invoice is not affected by this note.
Who carries the risk?
Riverty decides on every purchase in its risk check and, with an accepted and invoiced order, pays you and carries the non-payment risk according to your contract with Riverty. The add-on does not change that; ask Riverty for your terms.
Does it replace the invoice for the customer?
No. When you capture an order Riverty creates and sends its own invoice to the customer. Your own shop invoice (for example from our invoicing or e-invoicing add-ons) stays separate; the Riverty invoice number you see on the order tab is the one we send as the invoice number.
Where are my keys stored?
In your own database, encrypted. The key is derived from your store's secret in config.php, so a database dump alone does not reveal them. They are never shown again after saving.
Does it send data to Kavio Labs?
No. The add-on talks to Riverty only. The license check sends your domain name to the Kavio Labs license server once a day (Kavio Labs downloads).
What data goes to Riverty?
What Riverty's API requires for the purchase: the order lines and amounts, the buyer's name, address, e-mail, phone, date of birth or identity number (depending on the country), company data for B2B, IP address and browser identification for the risk check, and the shop and add-on identification. The buyer sees Riverty's privacy statement link at checkout. Birth date and identity number are removed from your stored order data right after the call.
What happens when Riverty is down?
Authorizations fail with a message and the customer can choose another method; captures, voids and refunds wait and are retried automatically (5 minutes up to 12 hours) with the same key, so nothing is lost and nothing is sent twice.
What happens when the license expires?
New work stops (the method is hidden at checkout). Work already under way is still finished.
How do I get updates?
Install the new package over the old one. See Installation.