Environment & Keys

Environments

Environment	Base URL	Usage
Test	https://test-api.yourdomain.com	Development & Testing
Production	https://api.yourdomain.com	Live Traffic

Key Management

1. Client Credentials
   • client_id
   • client_secret
2. Signing Keys
   • Used for:
     • Request signing
     • Receipt verification
3. Webhook Secret
   • Used to verify webhook authenticity.

Key Rotation

We recommend:

• Rotating keys every 90 days
• Immediately rotating in case of suspected compromise