# Production checklist

Ready to take real payments? Work through this checklist before you flip to production.

- Make sure you have a **live PayLater Merchant Dashboard account**, then get your production credentials (Client ID, Client Secret, Outlet ID) from **Settings → Integration** — see the [Quickstart](https://docs.paylaterapp.com/quickstart.html) for the exact steps.
- Swap sandbox credentials for production values in your config / secret store.
- Switch all base URLs from `connect.uat.paylaterapp.com` to `connect.paylaterapp.com`.
- Point [webhooks](https://docs.paylaterapp.com/webhooks.html) at your production endpoint and load the production webhook secret.
- Re-verify token refresh, link generation, status checks, and refunds end to end.
- Confirm your success / failure redirect URLs are production URLs.

> **Note: Can’t see the Integration section?**
>
> If **Settings → Integration** doesn’t appear in your Merchant Dashboard, your user role is missing the API-credentials permission. An admin can enable it:
>
> 1. Go to **User Management → Roles**.
> 2. On your role, click **Edit** and open the **Admin** section.
> 3. Toggle **API Credentials** on and save.
> 4. Log out and log back in — **Settings → Integration** is now visible.

## Production endpoints

**Production endpoints**

```bash
Token:    https://connect.paylaterapp.com/auth/realms/api/protocol/openid-connect/token
Checkout: https://connect.paylaterapp.com/api/paylater/merchant-portal/v2/...
```

> **Info: Going live**
>
> Production credentials live in your **PayLater Merchant Dashboard** (Settings → Integration) and require a live merchant account. Until you're set up, keep building against the [Test environment](https://docs.paylaterapp.com/test-environment.html). Need a hand? [merchants@paylaterapp.com](mailto:merchants@paylaterapp.com).