Documentation ·Docs
Consumer guides

Sandbox and Production

The two environments, which key and which gateway address belong to each, and when KYC or KYB is needed.

Read this page in العربية

On this page

What you will do#

Learn which environment a call goes to, which key belongs to it, and what differs between the two.

Before you start#

You have an account. Registration created two apps for you: one for Sandbox and one for Production, each with its own key (apps and keys).

The two environments#

Each environment has its own gateway address, shown on the product's page. A key belongs to the environment of the app that owns it: use the key of the environment you are calling. A key only grants access to the products its app is subscribed to.

SandboxProduction
Gateway addressgate-stg.api360.sagate.api360.sa
Keythe key of your Sandbox appthe key of your Production app
Datadepends on the product: the provider's test service or mock responseslive, from the provider's system
Billingno charge is stated here; see the product's listingthe product's listing and your contract
Provider approvalnot required for eligible Sandbox accessrequired for some products
Tip

Because keys belong to one environment, name your variables after the environment: SANDBOX_KEY for the Sandbox app and API360_KEY for Production. A key in the wrong variable then shows up at once.

Planned

A Sandbox key that needs no KYB and no payment, with fixed limits and published test data. Today, testing uses the Sandbox environment of the products whose provider has enabled it.

Questions from the old help pages#

These questions come from the former help site (docs.api360.sa). The answers below are what the platform does today.

What is Production?#

The live environment, where real data and real payments are processed. Calls go to gate.api360.sa with the key of your Production app. Some products need the provider's approval before your subscription becomes active.

What is Sandbox?#

The test environment. Calls go to gate-stg.api360.sa with the key of your Sandbox app, and reach the provider's test service or mock responses that the provider configured. What the data looks like depends on the product.

When is KYC or KYB required?#

When the product asks for it. A provider can mark a product as requiring KYC or KYB; subscribing to that product, or renewing the subscription, is refused until your profile's KYC or KYB is complete. A member of an organisation whose account is active is not asked again. Products that do not ask for it need neither.

Check that it worked#

  • A call with the Sandbox key to gate-stg.api360.sa reaches the product's test service.
  • 403 with No active subscription for this product usually means a key from the other environment, or a product your app is not subscribed to.

Next steps#

Was this page helpful?
Updated 2026-10-17