Build and test everything with a sandbox key first. It behaves like a live key without moving real money. See Sandbox and live API keys.
Before you go live
- Your verification is approved. Live keys are only for verified accounts, and money-moving endpoints need it.
- Each key has only the scopes it needs, and live keys are kept on your server, never in a browser or a mobile app.
- Writes send an Idempotency-Key, so a retry after a timeout returns the original result and does not pay twice.
- Your webhook endpoint verifies the signature on the raw body and answers quickly. See Receive and verify webhooks.
- You handle every payment, refund and payout status, including failed and cancelled. See the status guide.
- You back off and retry when a request is rate limited.
Stuck? Write to dev@olympuspay.co or use the developer contact form. The API reference lists every endpoint.