Go-Live Checklist

---

API & Authentication

• Switch from test keys (sk_test_) to live keys (sk_live_) — see Get API Credentials
• Store live keys securely (environment variables or a secrets manager — never in source code)
• Verify your API base URL points to the production endpoint (https://api.miracle.com)

---

Payments

• Test a successful payment end-to-end in sandbox using a test card
• Test a declined payment and verify your error handling displays a user-friendly message
• Test the 3D Secure flow if your payment methods require it
• Verify you send an Idempotency-Key header on all write operations (POST, PUT, PATCH, DELETE) — see Idempotency
• Verify all amounts use integer minor units (valueMinor) — 5000 means $50.00

---

Webhooks

• Your webhook endpoint is publicly accessible via HTTPS (not localhost)
• Webhook signature verification is implemented — see Handle Webhooks
• Your webhook handler returns 200 OK within 10 seconds
• Order fulfillment is triggered by the webhook, not the customer redirect
• Your webhook handler is idempotent (duplicate events do not create duplicate orders)

---

Hosted Payment Page

• Branding is configured (logo, colors) in the Miracle Portal
• successUrl and cancelUrl are set to valid production URLs
• The customer sees the correct order summary on the checkout page

---

Error Handling

• API errors are caught and handled gracefully in your backend
• Customer-facing error messages are user-friendly (not raw API error codes)
• Failed payments are logged on your side for debugging — see the Merchant API Reference for the error catalog

---

Compliance

• PCI SAQ-A questionnaire completed (required for HPP integration)
• No sensitive card data (PAN, CVV) is logged or stored on your servers

---

Ready to go live

Once every item above is checked:

1. Switch your API keys. Replace sk_test_ with sk_live_ in your production environment.
2. Make a small real payment. Process a low-value transaction to confirm the full flow works end-to-end.
3. Monitor your first transactions. Watch the first few payments in the Miracle Portal to verify statuses and webhook delivery.

---

Need help?

If you run into issues during go-live, reach out to our team at support@miracle.com. We are happy to help you launch.