Skip to main content
Move to production after you have completed at least one end-to-end transaction per order type you support.
For onramp and offramp, you must complete KYC on your end users — preferably through a KYC provider — before creating live orders. Liquidramp requires this for regulatory compliance because those flows involve fiat. Swap does not require end-user KYC.

​
Production checklist

​
Credentials and access

  • Production pk_live_*, sk_live_*, enc_live_* issued in the portal
  • liquidramp-client-id stored in a secrets manager
  • IP whitelist configured if required
  • Partner KYB approved
  • End-user KYC in place for onramp and offramp (not required for swap)

​
Security

  • HMAC signing uses enc_*, not sk_*
  • Webhook endpoint verifies HMAC and timestamp
  • Keys never logged, committed, or exposed client-side (sk_* and enc_* stay on your backend)
  • HTTPS on your webhook endpoint

​
Integration robustness

  • Error handling for all HTTP status classes
  • Retry with backoff for 5xx and 429
  • Client-side idempotency via merchant_reference
  • Webhook deduplication by event + data.reference

​
Operational

  • Webhook URL registered in the portal
  • Alerting on webhook delivery failures and sustained API 5xx
  • Runbook for stuck orders (GET /v1/orders/:reference?include=timeline)