Get started

Production readiness

Production credentials are not issued automatically. Spendstream issues them after reviewing your staging integration.

The go-live path

Mermaid

 sequenceDiagram
    participant P as Publisher
    participant S as Spendstream
    P->>P: Choose integration path
    P->>P: Build and test on staging
    P->>S: Request go-live review
    S->>S: Review staging integration
    S-->>P: Issue production credentials
    P->>P: Swap URLs and keys
    P->>P: Run smoke tests
    P->>P: Go live

Before you request a review

[ ] The staging testing checklist is complete.
[ ] The gift card, affiliate and webhook checklists are complete for your chosen products.
[ ] Your integration path is agreed: gift cards, affiliates, or one of the hosted options.
[ ] You have named a technical contact at your company.

Configuration changes

Item	Staging	Production
Base URL	`https://staging-api.spendstream.io/v2`	`https://api.spendstream.io/v2`
API key and secret	Staging pair	New production pair issued by Spendstream
Payment site reference	Contains `test_`	No `test_` prefix
Webhook URL	Staging URL	Production URL, registered separately with Spendstream

⚠️ Warning: In production, payments and vouchers are real, and the voucher cost is deducted from your float. Test cards no longer work, and declines are real.

Production checklist

Security

[ ] Keys and secrets are held server side in a secrets manager or environment variables.
[ ] Nothing secret is present in browser code, mobile apps, repositories or logs.
[ ] Webhook signature and timestamp checks are active in production.
[ ] All webhook traffic uses HTTPS.

Reliability

[ ] The bearer token is cached and refreshed before it expires, respecting the limit of 5 getToken requests per minute.
[ ] An explicit User-Agent header is set on requests.
[ ] Your code checks the response field in every body.
[ ] Duplicate purchase submissions are prevented in your code.
[ ] Webhook processing is idempotent, and a reconciliation job using getTransactionsList runs on a schedule.
[ ] Failed webhook processing is recorded and can be replayed.

Money and rewards

[ ] Float model only: your float balance is funded, and low balance alerts are in place.
[ ] Pending affiliate transactions are never paid out as final.
[ ] Your reward calculations match the agreed commission split.
[ ] You store Spendstream transaction identifiers for reconciliation.

After go-live

[ ] Complete one small live purchase and confirm the card is delivered and the webhook arrives.
[ ] Watch signature failures and error rates during the first days.
[ ] Keep a support process for missing cashback and failed orders.

Getting help

Contact your Spendstream account manager with the technical contact named above, and include the transaction identifier or order identifier for any issue you report.

Sections