API Keys
Each partner has two key environments:
| Env | Prefix | Use |
|---|---|---|
| Sandbox | ak_test_… | Local dev & QA; no real points moved |
| Production | ak_live_… | Real users, real settlement |
Security:
- Rotate keys via Partner Dashboard at any time (no downtime — old key valid 24h).
- Never commit keys to git. Use env vars or your secret manager.
- IP allowlist available for production keys.