How to Build an Airtime & Bundles API – Developer Guide 2026

If you run a business that sells airtime, data bundles, or minutes (e.g., a cyber café, shop, or online platform), automating the purchase process via an API can save hours of manual work. This guide walks you through the options available in Kenya, from using a reseller’s API to integrating M‑PESA STK Push directly.

🚀 Why Use an API for Airtime & Bundles?

• Automation: No more manual USSD dialling or app clicks.
• Speed: Instant delivery to your customers after payment.
• Scalability: Sell to thousands of users without extra labour.
• Inventory control: Keep track of bundle stock automatically.

⚙️ Option 1 – Use a Reseller API (Quickest)

Several Kenyan bundle resellers offer APIs (e.g., BingwaSokoni, other similar platforms). You send a POST request with the phone number, bundle code, and amount – and the API triggers the purchase using their automated till system.

Example API Request (Node.js)

fetch('https://api.reseller.com/pay', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    till: '509947',
    amount: 55,
    phone: '0712345678',
    bundle: '1.25GB'
  })
});

Most reseller APIs use M‑PESA STK push – the customer receives a PIN prompt on their phone. After authorisation, the bundle is delivered instantly. You get a webhook callback to confirm success.

📡 Option 2 – Integrate Daraja API (Safaricom Direct)

For large-scale operations, you can apply for a Safaricom developer account and use the official Daraja API. This gives you access to STK push, reversal, and transaction status. However, you will not get subsidised prices – you pay the full network rate.

Daraja API Flow

• Register as a Safaricom developer → Get consumer key & secret.
• Generate an OAuth token.
• Initiate STK push using the /stkpush endpoint.
• Listen for callback to confirm payment.

This route is complex and requires a production‑ready server with proper SSL, but it gives you complete control.

🛠️ Option 3 – Build Your Own Middleware

You can create a system that purchases bundles via USSD simulation (not recommended, as it’s fragile and violates carrier terms). The safest middle ground is to become an authorised reseller for a telecom (e.g., Airtel Reseller Program) and use their provided APIs. However, those are not widely available to small businesses.

📊 Comparison of API Options for Kenyan Developers

🔐 Security Best Practices for Airtime APIs

• Never store M‑PESA PINs – use STK push only.
• Validate phone numbers with regex before sending to API.
• Use HTTPS for all API calls.
• Implement idempotency keys to prevent double charging.
• Log all transactions for auditing and customer support.

Written by the BingwaSoko Developer Team
Experienced developers and telecom automation specialists. Helping you integrate airtime APIs seamlessly.
Last reviewed: 26 May 2026

For more background on how M‑PESA payments work, read our M‑PESA error codes guide – useful when debugging API failures.