> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stabyl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Go-Live Checklist

> Production readiness checklist for API automation.

Before moving to production, your organization must complete KYB and receive an
explicit invitation from Stabyl. Staging access and successful staging tests do
not grant production access. Follow the instructions in the invitation to
provision production credentials.

## Checklist

| Area           | Requirement                                                                      |
| -------------- | -------------------------------------------------------------------------------- |
| Onboarding     | KYB is complete and Stabyl has explicitly invited the organization to production |
| Authentication | API keys are stored server-side and rotated through an approved process          |
| Orders         | Create, cancel, and replace calls send `Idempotency-Key`                         |
| Wallets        | Chain availability is read from `GET /partner/wallets/chains`                    |
| Deposits       | Crypto routes and fiat deposit accounts are shown exactly as returned            |
| Withdrawals    | Ed25519 signing, idempotent retries, and partial outcomes are handled            |
| Errors         | `400`, `401`, `402`, `403`, `404`, `409`, `429`, and `503` responses are handled |
| Simulation     | Simulation calls are removed from production workflows                           |

## Required Headers

Use `X-Api-Key` on authenticated endpoints and `Content-Type: application/json` on JSON writes. Use `Idempotency-Key` on order writes and the request-body `idempotency_key` on withdrawals. Withdrawal quote and submit calls also require a timestamp, a new nonce, and an Ed25519 signature.

Common launch blockers include incomplete KYB, unsupported chain assumptions, or retry logic that changes idempotency keys.

## Production Verification

Before enabling automation against production funds:

1. Confirm KYB is complete and retain the explicit production invitation from Stabyl.
2. Provision production credentials by following the invitation instructions.
3. Run a full staging order lifecycle: create, read, cancel, replace, and reconcile.
4. Run a staging deposit test for every chain you plan to display.
5. Confirm your reconciliation job can resume after downtime without duplicating records.
6. Run a signed staging withdrawal through quote, direct submit, and transaction reconciliation.
7. Confirm alerts exist for repeated `401`, `403`, `409`, `429`, and `5xx` responses.
8. Confirm API keys are not present in frontend code, mobile apps, analytics tools, or browser logs.