Sandbox
Use a sandbox API key with the same Authorization: Bearer <api_key> header and the same endpoint paths as live.
Cardzone automatically chooses live or sandbox behavior from the bearer key. Live keys use real catalog, wallet, orders, fulfillment jobs, and webhooks. Sandbox keys return static responses only.
Sandbox is stateless: it does not create orders, debit wallets, enqueue fulfillment jobs, or send webhooks.
Hosted checkout session creation is live-only; sandbox keys receive a forbidden response for checkout session creation.
Order cancellation is live-only; sandbox keys receive a forbidden response because sandbox orders are stateless.
To trigger hardcoded order responses, call GET /api/b2b/v1/products with a sandbox key and send one of these product IDs as product_id to POST /api/b2b/v1/orders:
018f0000-0000-7000-8000-000000000001(sandbox-success-voucher): Static sandbox product that returns a fulfilled voucher order. Poll it with order_id1CAYVN8V9qVvrLwnnSZsPE.018f0000-0000-7000-8000-000000000002(sandbox-wallet-topup-required): Static sandbox product that returns an action-required wallet order. Poll it with order_id1CAYVN8V9qVvrLwnnSZsPF.018f0000-0000-7000-8000-000000000003(sandbox-merchant-attention-required): Static sandbox product that returns a fulfillment action-required order. Poll it with order_id1CAYVN8V9qVvrLwnnSZsPG.018f0000-0000-7000-8000-000000000004(sandbox-manual-review-required): Static sandbox product that returns a manual-review action-required order. Poll it with order_id1CAYVN8V9qVvrLwnnSZsPH.018f0000-0000-7000-8000-000000000005(sandbox-failed-order): Static sandbox product that returns a failed fulfillment response. Poll it with order_id1CAYVN8V9qVvrLwnnSZsPJ.