Sandbox Overview Waffo Pancake provides a complete sandbox environment for development and testing. No real money moves. Everything works identically to production.
Full Features Everything works like production.
Test vs Production Sandbox (Test) Production (Live) Transactions Simulated Real charges Money Fake Real funds Data Isolated Production Webhooks Fully functional Fully functional API Behavior Identical Identical
Switching Environments In the Dashboard Toggle Test/Live mode in the Dashboard header.
In API Calls Use the X-Environment header:
Header Value Mode X-Environment: testSandbox X-Environment: prodProduction
Always verify you’re in the correct environment before sharing payment links or deploying.
API Keys API Keys are created for a specific environment. When using API Key authentication, the environment is determined by the key — no X-Environment header needed.
Test Cards Successful Payments Card Brand 4242 4242 4242 4242Visa 5555 5555 5555 4444Mastercard 3782 822463 10005Amex
Declined Payments Card Error 4000 0000 0000 0002Declined 4000 0000 0000 9995Insufficient funds 4000 0000 0000 0069Expired card
3D Secure Card Behavior 4000 0027 6000 3184Requires authentication 4000 0000 0000 3220Authentication fails
Any future expiry date and any 3-digit CVC will work with test cards.
Test Webhooks Webhooks fire normally in the sandbox. To test:
Register your webhook endpoint in Dashboard > Developers
Switch to Test Mode
Perform actions that trigger events (create orders, complete payments)
Your endpoint receives webhook events just like in production
Test Subscriptions Test the full subscription lifecycle:
Create — Subscribe via test checkoutBill — Billing occurs on scheduleUpdate — Change plans via Customer Portal or APICancel — Test cancellation flow (takes effect at period end)
Data Isolation Test data is completely separate:
Test products don’t appear in Live Mode
Test customers are separate
Test transactions don’t affect live reports
Going Live When ready to go live, sync your products from test to production:
curl -X POST https://waffo-pancake-auth-service.vercel.app/v1/actions/onetime-product/publish-product \ -H "Content-Type: application/json" \ -H "Authorization: Bearer YOUR_API_KEY_TOKEN" \ -d '{ "id": "product-uuid" }'
The publish-product endpoint is a one-way operation from test to production. It does not require an X-Environment header.
Go-Live Checklist 
