Sandbox

Sandbox has separate users, API clients, keys, merchants, and orders. A production key will not authenticate against sandbox and a sandbox ID should not be sent to production.

Recommended test path

1. Create a sandbox API client with the minimum scopes.
2. Confirm authentication with a read request.
3. Create an order using synthetic customer data and a unique external ID.
4. Exercise status reads, updates, cancellation, and exports used by your integration.
5. Configure a sandbox webhook receiver and confirm duplicate-safe processing.
6. Rotate the key once before launch.

Sandbox behavior follows production contracts, but external delivery providers and real-world timing may be simulated or unavailable. Do not use sandbox latency as a production service-level benchmark.

Use reserved example phone numbers and addresses supplied for your account. Never copy production personal data into sandbox.