cXML PunchOut Tester

Send a PunchOutSetupRequest to a supplier, open the returned StartPage, and capture the PunchOutOrderMessage posted back to this tool.

Saved Presets

Save Current Form As

Supplier URL

URL to Send PunchOutSetupRequest To *

Operation

Deployment Mode

Credentials

From Domain

From Identity

To Domain

To Identity

Sender Domain

Sender Identity

Shared Secret

Session

Buyer Cookie

Identifier for this PunchOut session; echoed back by the supplier in the PunchOutOrderMessage.

User Details

User Name

User Email

Custom cXML Request

Note: In Advanced mode the Basic fields are ignored and the XML below is sent as written — except the BrowserFormPost/URL, which is replaced with this session's callback URL (and any SESSION_ID placeholder is filled in).

Supplier URL *

Operation (for History)

cXML Request Body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.041/cXML.dtd">
<cXML payloadID="1794610937243.d1741291@punchout-tool-suite.vercel.app" timestamp="2026-11-13T23:02:17+00:00" xml:lang="en-US">
  <Header>
    <From>
      <Credential domain="NetworkId">
        <Identity>BuyerOrg</Identity>
      </Credential>
    </From>
    <To>
      <Credential domain="DUNS">
        <Identity>SupplierOrg</Identity>
      </Credential>
    </To>
    <Sender>
      <Credential domain="NetworkId">
        <Identity>BuyerOrg</Identity>
        <SharedSecret>secret</SharedSecret>
      </Credential>
      <UserAgent>Punchout Headquarters</UserAgent>
    </Sender>
  </Header>
  <Request deploymentMode="production">
    <PunchOutSetupRequest operation="create">
      <BuyerCookie>BC-1794610937</BuyerCookie>
      <Extrinsic name="User">jdoe@example.com</Extrinsic>
      <Extrinsic name="UniqueUsername">jdoe@example.com</Extrinsic>
      <Extrinsic name="UserEmail">jdoe@example.com</Extrinsic>
      <Extrinsic name="UserFullName">John Doe</Extrinsic>
      <Extrinsic name="UserPrintableName">John Doe</Extrinsic>
      <Extrinsic name="FirstName">John</Extrinsic>
      <Extrinsic name="LastName">Doe</Extrinsic>
      <BrowserFormPost>
        <URL>https://punchout-tool-suite.vercel.app/cxml/receive/SESSION_ID</URL>
      </BrowserFormPost>
      <SupplierSetup>
        <URL>https://supplier.example.com/cxml/punchout</URL>
      </SupplierSetup>
      <ShipTo>
        <Address addressID="default">
          <Name xml:lang="en">John Doe</Name>
          <PostalAddress>
            <Street>123 Test Street</Street>
            <City>London</City>
            <State>LND</State>
            <PostalCode>EC1A 1BB</PostalCode>
            <Country isoCountryCode="GB">United Kingdom</Country>
          </PostalAddress>
        </Address>
      </ShipTo>
    </PunchOutSetupRequest>
  </Request>
</cXML>