E-commerce integration
X-Cart
A native payment module for X-Cart 4 and X-Cart 5.
An official Superior Payments module for X-Cart's open-source storefront platform. Hosted-field checkout, tokenized customer vault, and Level II/III enrichment for B2B carts — drop-in for X-Cart 5 and supported on the X-Cart 4 LTS branch.
What you get
Hosted-field checkout
Card and ACH inputs render in an iframe served from our vault domain. Storefront PHP, X-Cart core, and your custom modules never see raw PAN — collapsing PCI scope to SAQ A.
Tokenized customer vault
Returning customers see saved payment methods at checkout. Tokens are stored against the X-Cart user profile so one-click checkout works on every return visit.
Subscription billing
Compatible with X-Cart's Recurring Orders module. Tokenized renewals process even after the customer's card is reissued, via account-updater coverage.
B2B / corporate-card optimization
X-Cart B2B cart line-item, customer-code, and tax data is auto-enriched into Level II/III payment fields — qualifying corporate-card transactions for the lowest interchange tiers without manual entry.
How it works
From install to live traffic on X-Cart.
No middleware to maintain, no PCI-scoped infrastructure to host. The flow below is the same whether you're a small business or processing nine figures a year.
- 1
Install the X-Cart module
Composer-install or upload the module from our merchant portal. Enable from X-Cart admin → Payment methods, paste your Superior API credentials, and the payment method becomes available on checkout.
- 2
Customers see hosted iframe
On the X-Cart checkout, card and ACH inputs render inside our hosted iframe. X-Cart's PHP, your custom modules, and your theme never see PAN — PCI scope stays at SAQ A.
- 3
Tokens + subscriptions
Saved cards live in our vault and surface as saved payment methods inside the X-Cart customer profile. Recurring Orders trigger tokenized drafts on schedule, with retry logic for soft declines.
- 4
B2B optimization automatic
When an X-Cart B2B cart processes a corporate card, line items, tax, and customer-code data flow into Level II/III enrichment fields automatically — qualifying for the lowest interchange tiers.
Who runs it
Where X-Cart merchants get the most lift.
Three merchant profiles where this integration consistently pays back in the first quarter.
B2B distributors on X-Cart
Multi-user company accounts with stored cards-on-file. Level II/III data on every B2B transaction qualifies corporate cards for the lowest interchange — meaningful savings on $5K+ tickets.
X-Cart 4 long-term merchants
Established merchants on the X-Cart 4 LTS branch don't want to migrate to 5. The Superior module supports both, so you can modernize payments without re-platforming the storefront.
Subscription / recurring goods
Recurring Orders module with tokenized renewals. Account Updater handles reissued cards before the customer notices, dropping churn from declined renewals.
Better with Superior
Why X-Cart merchants choose the full stack.
X-Cart merchants are typically B2B distributors or established e-commerce operators with custom installations — both groups benefit heavily from Level II/III enrichment and ACH for high-ticket invoices. AI fraud detection and automated chargeback rebuttal are especially valuable for X-Cart 4 LTS merchants whose storefronts lack modern fraud tooling.
Superior AI fraud detection
Proprietary LLM scores every authorization in real time — catches CNP fraud and friendly-fraud patterns before they hit the chargeback line. Included on every Superior account.
How Superior AI worksAutomated chargeback rebuttal
Auto-builds evidence packages with shipping records, AVS, CVV, 3DS data, and submits them on your behalf. No per-win fee, no separate chargeback vendor.
See AI capabilitiesGateway-as-a-Service
Running an ISV or building a customer portal on top of this integration? Our gateway lives behind the scenes — PCI Level 1, Stripe/Square API translation, multi-acquirer routing — at 0.5% + $0.10 per transaction.
See pricingSwitch processors without a rewrite
Already integrated against another gateway? Our API translation layer means you keep your existing code and we translate the calls. Most migrations cut over in 10–14 days.
Plan a migrationWant pricing for X-Cart + the full Superior stack?
One quote covers the integration, AI fraud, chargeback automation, and gateway access.
Frequently asked
Common questions from merchants evaluating this integration.
X-Cart 4 vs 5 — does the module support both?
Yes, both. X-Cart 5.4+ is the primary target; X-Cart 4 LTS is supported on the legacy branch with feature parity on the core payment flows.
PCI scope on a self-hosted X-Cart?
SAQ A. The hosted iframe keeps your X-Cart application and server out of the cardholder-data environment entirely. Even if your X-Cart is on shared hosting, the PCI scope doesn't grow.
What about custom-modified X-Cart installations?
The Superior module is a standard X-Cart payment module — it doesn't require core changes. Custom themes and other modules continue to work unchanged.
Does the module work with the X-Cart B2B Customer Code feature?
Yes. The customer code field maps directly into Level II Customer Code on the payment authorization, which is one of the qualifying conditions for the lowest commercial-card interchange tier.
Other integrations to consider
Merchants often run more than one. Same Superior account, same vault, same merchant portal.
Related reading
Background on the topics most relevant to merchants on this integration.
Compliance · 5 min read
Level 2 and Level 3 Data: How B2B Merchants Are Leaving Basis Points on the Table in 2026
Strong Level 2 and Level 3 data unlocks lower B2B interchange. Weak submissions now also trigger new penalty fees in 2026. The data is on your invoices already — the question is whether it's reaching your processor in the format that earns the lower rate.
Technology · 6 min read
Why Authorization Rates Vary by Gateway — and How to Lift Yours
Two gateways routing the same card can produce different approve/decline outcomes. The gap is routinely 4–8 percentage points of auth rate — which is revenue. Here's what actually moves the number, and what merchants can do.
Industry News · 6 min read
ACH, RTP, and FedNow in 2026: The Real-Time-Rails Reckoning Merchants Have Been Waiting For
NACHA rule updates, RTP volume passing a meaningful threshold, and FedNow's expansion put real-time bank rails on credible footing. The operational tradeoffs versus card processing are finally clear enough to model — and the answer is portfolio-specific.
Connect Superior Payments to X-Cart.
Tell us about your environment — current processor, monthly volume, multi-entity structure — and we'll quote the integration and the full Superior stack in one number.