Production credentials and base URL
- Production merchant-token, merchant_id and merchant_site_id loaded from secrets.
- Base URL switched by configuration, with no sandbox host left in code.
- A smoke transaction agreed with your account manager before opening traffic.
Webhook reachability
- Production notification_link resolves publicly over HTTPS.
- Handler responds 2xx within a second under load.
- Alerts fire when notification processing falls behind.
Retries and reconciliation
- Duplicate notifications are no-ops.
- A daily reconciliation job compares your records against get-status.
- Idempotency keys are persisted with each order for safe retries.
Monitoring
- Approval rate, decline reasons and pending age tracked per method.
- Errors on create calls alerted separately from declines.
Support
- Escalation contact agreed and shared with your on-call team.
- Reach out through the contact form for production access questions.