What developer credentials exist in sandbox versus live?

Short answer

Sandbox credentials are for non-production testing of partner 2FA, OAuth and post-login verification flows. Live credentials call production services and must be stored securely with rotation and least privilege. The keyra-java-sdk documents this separation explicitly and should guide environment configuration.