availableAPIs, SDKs and webhooks
Is there a sandbox and how is it separated from production?
Last reviewed 5 Sept 2026 · Review due 5 Mar 2027
Short answer
Yes. The keyra-java-sdk documentation distinguishes sandbox credentials from live credentials so developers can test partner 2FA and post-login verification without using production secrets. Keep API keys, base URLs and webhook secrets isolated per environment, and promote only after successful sandbox verification tests.
Practical steps
- Use only sandbox credentials in non-production.
- Rotate any credential accidentally committed to source control.
- Promote after successful sandbox tests.
Evidence
Ciright-Inc/keyra-java-sdk
technical record · effective 2026-09-05 · retrieved 2026-09-05
Public reference