Going to Production

Pre-launch checklist for moving your API4Business integration from sandbox to production.

Pre-launch checklist

Authentication

[ ] Production OAuth2 credentials obtained from developers.api4business.com
[ ] Token refresh logic implemented (tokens expire)
[ ] Credentials stored securely (environment variables, secrets manager)
[ ] Never hardcode credentials in source code

Error handling

[ ] All error codes handled (400, 401, 429, 500, 503)
[ ] Exponential backoff implemented for 429 and 5xx responses
[ ] HTTP 200 error responses handled (Bank Verification APIs)
[ ] x-request-id logged for every API call

Rate limits

[ ] Rate limit handling implemented
[ ] Token caching in place (avoid unnecessary token requests)
[ ] Batch operations optimized to stay within limits

Data validation

[ ] Input validation before API calls (PAN format, GSTIN format, etc.)
[ ] Response schema validation in place
[ ] Edge cases handled (null fields, empty arrays)

Security

[ ] HTTPS enforced for all API calls
[ ] Access tokens not logged or exposed in URLs
[ ] PII data (PAN, Aadhaar, account numbers) handled per compliance requirements
[ ] API credentials rotated periodically

Monitoring

[ ] API response times monitored
[ ] Error rates tracked
[ ] Alerting configured for elevated error rates

Switch to production

Update your base URL from sandbox to production:

diff

- https://sandbox.api.api4business.com
+ https://api.api4business.com

Use your production OAuth2 credentials.