Skip to main content
Before moving to production, your organization must complete KYB and receive an explicit invitation from Stabyl. Staging access and successful staging tests do not grant production access. Follow the instructions in the invitation to provision production credentials.

​
Checklist

​
Required Headers

Use X-Api-Key on authenticated endpoints and Content-Type: application/json on JSON writes. Always send a UUID Idempotency-Key on order writes; the server does not reject a request without one, but that request cannot be retried safely. Use the request-body idempotency_key on withdrawals. Withdrawal quote and submit calls also require a timestamp, a new nonce, and an Ed25519 signature. Common launch blockers include incomplete KYB, unsupported chain assumptions, or retry logic that changes idempotency keys.

​
Production Verification

Before enabling automation against production funds:
  1. Confirm KYB is complete and retain the explicit production invitation from Stabyl.
  2. Provision production credentials by following the invitation instructions.
  3. Run a full staging order lifecycle: create, read, cancel, replace, and reconcile.
  4. Run a staging deposit test for every chain you plan to display.
  5. Confirm your reconciliation job can resume after downtime without duplicating records.
  6. Run a signed staging withdrawal through quote, direct submit, and transaction reconciliation.
  7. Confirm alerts exist for repeated 401, 403, 409, 429, and 5xx responses.
  8. Confirm API keys are not present in frontend code, mobile apps, analytics tools, or browser logs.