Skip to content

Going live

Work through this list before you take real payments.

  • Base URL changed to https://prod.api.nerasika.com.
  • Production merchant ID and secret in place, stored as server-side secrets.
  • Your account has the transaction types, networks and limits you need. Confirm with Nerasol.
  • Tokens are cached and reused for up to 24 hours.
  • A 401 triggers one token refresh and retry.
  • Callback URLs use HTTPS and are reachable from the internet.
  • Your handler replies 2xx quickly.
  • Your handler ignores duplicates for transactions already final.
  • You store transactionId and merchantRef for every request.
  • A job checks the status of transactions still pending after a while.
  • Timeouts and 500s don’t resend payments blindly. See Retrying safely.
  • You log transactionIds, merchantRefs and error messages.
  • You alert on a rise in failed transactions or missed callbacks.