Skip to content

Go live

You can build and test in sandbox right away. You go live as soon as each rail activates your account. That step is up to the rail.

Checklist

  • Submit your KYC once. Upload your business documents in the dashboard. With your consent, Oura shares one verified pack with each rail you turn on. See One KYC.
  • Turn on the rails you want. Each rail opens an account in your business's name. Payments land in that account, never with Oura.
  • Add your rail API keys. They go into a write-only vault. Nobody can read them back, not even Oura admins.
  • Swap in your live secret key. Replace sk_test_… with sk_live_… in your server's environment. Your code doesn't change.
  • Set your live webhook endpoint in the dashboard and use the matching webhook secret.
  • Verify webhooks and fulfil idempotently. Webhooks can arrive more than once. Marking an order paid twice must do nothing.
  • Don't trust the return URL. A customer landing on return_url is a hint, not proof. Wait for payment.succeeded.

Which rails are live

See Payment methods for the current status of each rail.