Base URLs
| Environment | Base URL | Use it for |
|---|---|---|
| Sandbox | https://api-sandbox.pagou.ai | local development, automated tests, staging verification |
| Production | https://api.pagou.ai | live traffic, production reconciliation, operator workflows |
Rules
- Keep sandbox and production tokens separate.
- Use different webhook endpoints for sandbox and production.
- Never expose production credentials in browser code.
- Roll out by switching config only: token, base URL, webhook target, and monitoring.
Why this matters
Environment drift is a common source of launch bugs. If your request shapes are identical in both environments, production cutover becomes an operational change instead of a code deploy risk.Release checklist
- Validate auth against sandbox.
- Run a full happy path with Pix or card.
- Confirm webhook delivery, deduplication, and reconciliation.
- Verify logs capture
requestId, resource IDs, and yourexternal_ref. - Switch only credentials and base URL at go-live.

