Go live
A short checklist to work through before you switch from a test key to a live one.
Get your business approved
Complete the activation steps in your dashboard: your business profile, its owners, the documents we ask for, and the agreement. Our team reviews the application, and live keys are switched on once it is approved.
Create a live key
In Settings → API Keys, create your live key. The dashboard asks for your password. Store the key as a secret on your server, separate from your test key.
Allow only your servers
Add your servers' IP addresses to the live key's allowlist, so the key is useless from anywhere else. See Authentication.
Set up webhooks
Add your https webhook address in the dashboard, store its signing secret, and verify every signature. Respond with a 2xx quickly, and handle the same event arriving twice.
Fulfil only on confirmation
Deliver goods or services only when a payment is succeeded, learned from a webhook or by fetching the checkout by reference. Never rely on the customer's redirect alone.
Plan for retries and limits
Use a reference or an idempotency key so a retried request does not do the work twice, and back off when you receive 429. See Rate limits.