Get started

Go-live checklist

Production credentials are issued by Spendstream after a review of your staging integration. Use this checklist to confirm that you are ready before you ask for them.

How going live works

You choose your integration path and products.
You complete your integration against staging.
You confirm that every endpoint you use works correctly.
Spendstream reviews your integration and issues production credentials.
You swap the staging URL and credentials for the production equivalents.

Checklist

Authentication and users

[ ] Staging credentials received and stored securely on your server.
[ ] getToken tested, with the bearer token cached and refreshed before its 10-hour expiry.
[ ] An explicit User-Agent is set on every request.
[ ] Users created or synchronised, using a stable, permanent UID for each customer.
[ ] Duplicate addNewUser handled by checking the response field in the body, not the HTTP status.

Catalogue and journeys

[ ] Brand catalogue tested, without hard-coded brand availability.
[ ] Cashback catalogue tested where you offer affiliates.
[ ] Gift card flow tested where you offer gift cards, using the promotion-id as promo_id.
[ ] Hosted payment flow tested, including a declined payment (the amount 700.00 always declines on staging).
[ ] Balance checks tested if you fund purchases from a prepaid balance.
[ ] Your own duplicate protection is in place. Gift card API requests have no server-side idempotency, so never re-submit an order on retry without checking, and avoid refreshing the payment success page.

Webhooks

[ ] Webhook URL given to Spendstream for registration.
[ ] Signature header verified before processing.
[ ] Events deduplicated on the transaction or user identifier plus status.
[ ] A quick 2xx response returned, with processing done afterwards.
[ ] Periodic reconciliation through getTransactionsList, because failed deliveries are not retried today.

Production switch

[ ] Production API key and secret received from Spendstream.
[ ] Base URL changed to https://api.spendstream.io/v2.
[ ] Payment URLs no longer carry the test_ site reference.
[ ] Test card handling removed from your checkout code.
[ ] Webhook endpoint reachable from production.

💡 Tip: Production payments and vouchers are real, and customers will meet real declines. Test your decline path before you go live.

Environments
Authentication
API quickstart
Testing payments on staging
white-label single sign-on guide

Sections