Go live

​

The checklist

1. Subscribe. In the dashboard or with agent-cards companies subscribe. The subscription is what unlocks production.
2. Create production credentials. A production client_id and client_secret from Settings → Developers → Credentials. Nothing else in your code changes; the base URL stays api.agentcard.sh.
3. Point webhooks at production. Create a production webhook endpoint and verify signatures against its own secret. Sandbox and production endpoints are separate.
4. Run the loop once with real money. Connect a real user, add a real card, make a small real purchase. Watch the same webhooks you saw in sandbox arrive with livemode: true.

​

The gate fires at use time

​

Rules for your agent

- Subscribe before you switch credentials. Production credentials authenticate without a subscription, but anything that acts returns subscription_required (402) until it's active.
- Change only the credentials. The base URL stays api.agentcard.sh, and nothing else in your code moves.
- Create a separate production webhook endpoint and verify against its own secret. Sandbox and production endpoints are separate, and so are their secrets.
- Run the whole loop once with a small real purchase and watch the same webhooks arrive with livemode: true before you open it to users.

​

What changes with real money

• Identity verification is real: documents and a face check, no simulate endpoint.
• Card eligibility is enforced for real. Almost any credit or debit card works; the known exception today is Chase.
• Balance funding uses real payment providers, including ones sandbox can’t simulate.
• The one-time code is never 111111 again.