Environments

How test mode differs from live, and what you can safely exercise.

Flick has no separate sandbox host. https://flickopenapi.co serves both, and the key you present decides the mode.

	Live key (sk- live)	Test key (sk- test)
Base URL	https://flickopenapi.co	https://flickopenapi.co
Moves real money	Yes	No
Hits real identity bureaus	Yes	No
Webhooks delivered	Yes	Yes

Because the host is shared, a live key used by accident in a staging deployment will move real money. Keep the two keys in separate secret stores and never fall back from one to the other.

​

Before going live

1. Register a webhook URL

   Set it in the dashboard and confirm you receive a delivery. See Testing webhooks.

2. Verify the signature header

   Reject anything that fails. See Verifying webhooks.

3. Make every write idempotent

   See Idempotency.

4. Handle the pending state

   A 200 on a collection or payout means accepted, not settled. Wait for the webhook.