Get Started
Environments
Sandbox and production base URLs, and what changes between the two environments.
Tonder provides two environments for your integration:
- Sandbox — for development and testing.
- Production — for processing live transactions.
Each environment has its own set of base URLs and API credentials.
Use the correct base URL and keys for each environment. Using production keys in sandbox (or vice-versa) results in authentication errors.
Overview
| Environment | Purpose | Dashboard |
|---|---|---|
| Sandbox | Development, testing, and integration validation | dashboard-stage.tonder.io |
| Production | Live transactions with real funds | dashboard.tonder.io |
Base URLs
| Service | Sandbox | Production |
|---|---|---|
| API Direct (S2S) | https://stage.tonder.io/api/v1/ | https://app.tonder.io/api/v1/ |
| Hosted Checkout | https://api-stage.tonder.io/checkout/v1/ | https://api.tonder.io/checkout/v1/ |
| Card tokenization | https://token-sandbox.tonder.io/ | https://token.tonder.io/ |
| Raw card data (PCI L1) | https://process-sandbox.tonder.io/ | https://process.tonder.io/ |
| Dashboard | https://dashboard-stage.tonder.io/ | https://dashboard.tonder.io/ |
Base domains
| Domain | Environment | Usage |
|---|---|---|
stage.tonder.io | Sandbox | Standard API, auth |
app.tonder.io | Production | Standard API, auth |
api-stage.tonder.io | Sandbox | Hosted Checkout (checkout sessions) — see Hosted Checkout |
api.tonder.io | Production | Hosted Checkout (checkout sessions) |
token-sandbox.tonder.io | Sandbox | Card tokenization service |
token.tonder.io | Production | Card tokenization service |
process-sandbox.tonder.io | Sandbox | Raw card data processing (PCI L1) |
process.tonder.io | Production | Raw card data processing (PCI L1) |
API credentials
Each environment uses a separate set of credentials (API key and secret key), available in the corresponding dashboard under Developers.
- Never use production keys in your testing environment.
- Never expose your keys in client-side code.
- Store credentials securely on your server.
- Rotate keys immediately if compromised.
Next steps
Was this page helpful?