Go-live checklist

Work through this list before you send real buyers to live checkout.

1. Verify your business

   Live keys need a verified business. Start verification in SaphraONE Settings.

2. Create a live key

   In the live console, create a sk_live_ key per site or service, and store it in your production secrets.

3. Switch the base URL

   Set SAPHRA_API_BASE=https://api.saphra.one/v1 in production.

4. https redirects

   Your success_url and cancel_url must be https in live mode.

5. Confirm server-side

   Fulfilment reads the session with your key and checks status === "complete".

6. Idempotency

   Every create sends an Idempotency-Key tied to the order.

7. Reconcile job

   A scheduled job picks up sessions completed by buyers who never returned.

8. Handle every state

   Partial, expired, overpaid and late-completed sessions are handled (see Fulfil orders).

9. Errors and retries

   You retry 429 and 5xx with backoff, and log the error code.

10. Smoke test

    Make one small real payment (for example 0.50 USDC) end to end, then refund it.