Skip to main content
Use the same integration code in both environments. Change configuration, not behavior.

​
Base URLs

​
Rules

  • Keep sandbox and production tokens separate.
  • Use different webhook endpoints for sandbox and production.
  • Never expose production credentials in browser code.
  • Roll out by switching config only: token, base URL, webhook target, and monitoring.

​
Why this matters

Environment drift is a common source of launch bugs. If your request shapes are identical in both environments, production cutover becomes an operational change instead of a code deploy risk.

​
Release checklist

  1. Validate auth against sandbox.
  2. Run a full happy path with Pix, voucher, or card.
  3. Confirm webhook delivery, deduplication, and reconciliation.
  4. Verify logs capture requestId, resource IDs, and your external_ref.
  5. Switch only credentials and base URL at go-live.

​
Next steps