---
title: Environments & sandbox
description: Production and sandbox use separate hosts and fully partitioned data.
sidebar:
  order: 3
---

Production and sandbox use separate hosts and fully partitioned data.

| Environment | Host                                  | Keys        |
| ----------- | ------------------------------------- | ----------- |
| Production  | `https://api.vault.stashtab.gg/v1`         | `sk_live_*` |
| Sandbox     | `https://sandbox.api.vault.stashtab.gg/v1` | `sk_test_*` |

`sk_live_*` keys work only on production and `sk_test_*` keys work only on
sandbox. Using a key on the wrong host returns `401 environment_mismatch`.
A QID from the other environment returns a plain `404` so existence is not
disclosed.

## Sandbox

The sandbox serves deterministic fixture data with no physical product
required, so an integration can be exercised end to end — including signed
webhooks — before anything real is in custody. The sandbox-only `/advance`
operation moves fixture fulfillments and transfers through their lifecycles on
demand instead of waiting for real-world events.

Sandbox API keys are issued during partner onboarding. Sandbox access is not
self-service, but the full contract is public so an integration can be planned
before keys are issued.