Merchant API requests can run against sandbox or production.
Sandbox
Use sandbox while building and testing. Add this header:
Sandbox collections and transfers settle immediately. Sarafa does not contact payment providers, dispatch transaction workers, or create SSP agent requests in sandbox. The transaction response is completed and Sarafa queues one terminal callback.
Production
Production is used when the environment header is omitted or set to production. Other values return 400.
API keys are environment-specific. A sandbox key only accepts environment: sandbox. A production key requires environment: production or an omitted environment header. A mismatch returns 403.
Use production only after you have tested:
- Authentication.
- Collections.
- Transfers.
- Swaps.
- Callback handling.
- Transaction reconciliation.
Recommended rollout
- Build with sandbox keys.
- Send test requests with unique references.
- Confirm your system receives callbacks.
- Confirm transactions appear in the dashboard.
- Switch to production keys and remove the sandbox header.
Last modified on July 22, 2026