Environments and security

Yaspa has a dedicated Sandbox environment for integration and testing. It uses simulators only, and doesn't need real bank accounts or trigger real funds movement. Production is a standard production environment for live transaction processing.

Yaspa provides a dedicated API key for each merchant in each environment. You can retrieve these keys securely from the Admin Dashboard, and you must send them in the AuthorizationCitizen header of every API call. See API Keys and Security for key generation and management. Feature-specific security requirements, such as the payout signature, are described where they apply.

To protect your keys, and as general good security practice, make API requests and handle webhooks only on a secure backend server.