Checklists

Go-live API Checklists

If you are a developer, or had a developer perform an integration for you, you should also consider the following items before going live.

• Run test scenarios in Test Mode
• Run test scenarios in Live Mode. Data in Test Mode are not usable in Live Mode
• Setup Webhook/Callback URL
• Validate x-callbck-token header for webhook events
• Register your server IPs to be whitelisted
• Handle edge cases such as idempotent requests, incomplete or invalid data, etc
• Review Error Handling
• Review Your Logging
• Rotate API keys after concluded your testing
• Store API keys in safe vault such as chamber or other secret management system
• Set reminder to rotate your API keys periodically ie every 3 months