Checklist
- Your integration is approved for Rivo Business API access.
- Production API keys and signing credentials have been issued.
- API keys are stored only on your backend.
- Your team has a key rotation process: create a new key, deploy it, then revoke the old key.
- API credential authentication and request signing flows have been tested.
- Supported IP allowlists are configured if your production traffic comes from fixed server IPs.
- Webhook URLs are configured on your backend and webhook secrets are stored securely.
- Wallet and payout flows have been tested in staging.
- Error handling and retries are implemented.
- Internal support can trace requests using returned IDs.