Certification
Go-Live Process
What happens after certification approval and how to go live.
Once Cresora approves your certification, you'll receive your csk_live_ key and can begin accepting real payments.
Receiving your live key
After certification approval:
- Cresora emails your primary contact with approval confirmation
- The live key appears in Partner Portal → API Settings → Keys
- The live key is displayed once — copy it immediately to your secrets manager
Deploying to production
- Add the live key to your production secrets manager (never to source code or
.envfiles in the repo) - Update your webhook endpoint — register your production endpoint URL in the Partner Portal under API Settings → Webhooks → Add Endpoint (Production)
- Test with a small real transaction — process a $1.00 transaction and verify the webhook fires and your fulfillment logic runs correctly
- Monitor closely for the first 24 hours — watch for unexpected error rates or decline rates
⚠Warning
Your production merchant ID (mrch_ prefix) is different from your sandbox merchant ID. Update all references in your production configuration.
Live key security
- Store in a secrets manager (AWS Secrets Manager, Azure Key Vault, Vercel, etc.)
- Rotate on a schedule (Cresora recommends every 90 days)
- Never log the key — audit logs on your side should redact it
- If the key is ever compromised, rotate immediately in the Partner Portal
After go-live
- Set up monitoring on
payment.failedwebhook events — a spike in failures may indicate a configuration issue - Subscribe to the Changelog RSS feed for API updates
- Join the Cresora partner communication list for breaking-change notices