Going Live
Complete KYC, get your production keys, validate every part of your integration, and switch to live mode safely.
Before collecting real payments, go through this combined checklist. It covers account verification, integration validation, and the final switch — everything you need to move from sandbox to production with confidence.
1. Complete verification (KYC)
From the Dashboard → Compliance, provide the required information based on your status:
BusinessrequiredoptionalLegal representativerequiredoptionalSettlement accountrequiredoptionalActivityrequiredoptionalVerification timelines
Review usually takes 1 to 3 business days. You can continue developing in sandbox during this time.
2. Get your production keys
Once the account is activated, open Developers → API Keys in the Dashboard: your pk.… and sk.… keys
appear. They move real money — treat sk.… as a critical private key.
Never mix test and production
Sandbox references do not exist in production and vice versa. Store keys in separate environment variables per environment. See Environments & keys.
3. Integration validation checklist
Before opening live traffic, run through every item on this list:
Account & keys
- Business verified (KYC completed in the Dashboard).
- Production keys injected via environment variables, never committed.
- Private key restricted to the server (environments).
- Key rotation tested and documented for your team.
Payments
- Systematic server-side verification before fulfillment (Accept a payment).
- Handling of
failedandcancelledstatuses in the UI. - Idempotency keys on every
POST /paymentsandPOST /transfers. - Currencies and amounts validated (major unit, no subunit).
Webhooks
- Production endpoint configured and signature verified (signature).
- Immediate
200response, asynchronous queue processing. - Idempotent receiver (deduplication on
event.id). - Behavior tested against retries.
Resilience & observability
- Back-off on
429and network errors (rate limits). - Orchestration rules and fallback validated in testing.
- Alerts configured (failure spike, settlements) in the Dashboard.
- Konsole access verified for production debugging.
Compliance
- Team roles with least privilege (Team & roles).
- 2FA enforced for the team.
- Tax configured if applicable (Tax).
4. First live payment
Replace your test keys with production keys, point your webhooks to production URLs, and perform a single real low-amount transaction to confirm everything works end-to-end.
First live payment
Make a real payment of 100 XAF to yourself, verify it reaches succeeded, that it arrives in the
balance held by our licensed payment partner (see Compliance & Licensing),
and that your production webhook receives it. This is the best end-to-end test.
Flip a single switch
In practice, going to production comes down to replacing test keys with live keys and repointing webhooks. If your integration follows this checklist, the switchover is a non-event.
Was this page helpful?