Checklist
Follow this sequence after your sandbox testing is complete so your move to production is controlled and reversible.
Live access depends on KYC
- 1
Finalize KYC Details
Before requesting or using production credentials, complete all KYC requirements in the Account setup guide.
Wait for approval before expecting live API access or live transaction processing.
- 2
Create Production API Keys
After approval, switch to live mode in the dashboard and create your production API key.
Keep sandbox and production credentials separate so test traffic never touches live systems.
- 3
Replace Sandbox Configuration
Update your system to use the live base URLs and replace every sandbox API key with the live key.
Confirm that deployment settings, background jobs, and webhook consumers no longer reference sandbox values.
- 4
Validate Your Live Webhook Setup
Point your webhook endpoint to the production environment and confirm it is reachable from AfroPays infrastructure.
Verify signatures, keep processing idempotent, and confirm retries are handled safely before taking real payments.
- 5
Run a Controlled Live Check
Process an initial low-risk live transaction and confirm payment status, webhook delivery, and internal reconciliation are all correct.
Once that passes, you can switch normal traffic to live and continue monitoring closely.
Best Practices
- • Whitelist AfroPays production IP addresses on the system that receives webhooks so production callbacks are accepted reliably.
- • Verify webhook signatures and process webhook events idempotently to prevent duplicate updates.
- • Do not update transaction records that are already in a final state such as SUCCESS or CANCELED.
- • Review logs and alerts during the first live transactions so you can catch configuration mistakes early.
Launch Readiness
You are ready for production once KYC is approved, live API keys are active, sandbox configuration has been removed, and your webhook handling is verified against production conditions.