Go Live Checklist

Complete every section before switching to live payments.

---

Account

• KYC/KYB verification approved
• Business profile completed

---

Sandbox Testing

• Invoice payment tested (both ERC20 and TRC20)
• Wallet deposit tested
• Withdrawal tested (auto-approve + manual approve/reject)
• Balance updates verified after deposits and withdrawals

---

Webhooks

• Webhook URL configured
• Receiving deposit and withdrawal webhooks
• HMAC signature verification implemented (code examples)
• Endpoint returns 200 OK immediately (process async)
• Idempotency implemented (handle duplicate deliveries)

---

Authentication

• API key stored server-side only
• x-api-secret sent for approve/reject endpoints
• Error handling for 401 responses

---

Rate Limits

• Exponential backoff for 429 responses
• Aware of tier limits (full table)

---

Error Handling

• 400, 401, 404, 429, 500 responses handled
• Wrong-network payment scenario handled
• Delayed confirmation handled gracefully

---

Security

• 2FA enabled on dashboard
• IP whitelisting enabled
• Webhook URL uses HTTPS
• Webhook secret rotated from sandbox value

---

Production Setup

• Live dashboard: https://dashboard.3pa-y.com
• New API keys generated (never reuse sandbox keys)
• Live webhook endpoint configured
• autoWithdraw / maxAutoWithdrawAmount configured
• Fee structure reviewed (details)

---

Go Live

1. Switch to live dashboard
2. Verify all settings
3. Begin accepting real transactions

Transactions are real and irreversible once live. Sandbox balances do not migrate.