Integration checks
- Keep API keys and webhook secrets on your backend.
- Verify that test and live keys use separate stored records.
- Persist an idempotency key before sending each money-moving request.
- Complete issuance, top-up, card-control, and reveal scenarios in sandbox.
- Test lost responses, duplicate webhooks, pending operations, and failure handling.
- Verify webhook signatures using raw request bytes and deduplicate event IDs.
- Confirm that logs, analytics, and error reports exclude full card data and secrets.
- Complete individual or corporate verification and the separate cardholder requirements. All API keys, including sandbox keys, require approval.
- Enable an authenticator before using the Live wallet; each Live transfer requires a recent security confirmation.
- Confirm the Live TRON wallet address on Mainnet and keep enough TRX for network fees before sending USDT.
- Check the card-account invoice’s exact USDT amount, recipient, network, and expiry before authorizing a transfer.