Videpay runs separate sandbox and live backends. Use https://sandbox.videpay.io for testing and https://videpay.io for production: sign in to the matching dashboard, create environment-specific API keys, and point your integration at the corresponding API base URL. Mixing them up returns 401. The API is very firm about boundaries.
Need machine-readable request/response bodies for your AI or codebase? Download this page as plain Markdown.
You build and test entirely against sandbox.api.videpay.io with a sandbox API key. After QA passes, you create a live API key, change one environment variable for the base URL, register live webhooks, and switch to api.videpay.io. One env var swap, it's giving clean deploy pipeline.
When creating a key, sign in to the dashboard for the environment you need: sandbox keys on the sandbox dashboard, live keys on the live dashboard. Each key only works against its matching API host. Using a sandbox key against the live API returns 401 Unauthorized.
When the dashboard asks you to verify an emailed OTP on sandbox, the code is always `000000` (six zeroes). You still need to request and verify the challenge normally, sandbox only fixes the code for easier testing. It's giving development-mode energy. Live sends a random six-digit code because production deserves plot twists.