Testing and sandbox
Build against test-mode keys before you touch real money. Test data and live data never mix. Includes the test values that drive each outcome.
Go live
The order that takes an account live: sign in through your invitation, build on test keys, pass KYB, have your methods enabled and priced, then create live keys, swap them in on the same base URL and re-point your webhooks.
API key management
List the rail_* API keys on your account through /v1/api-keys on the Reporting API; create, rotate and revoke them in the dashboard.
Emergency key revoke
Immediately invalidate a leaked or compromised API key, and what to do in the minutes after.
Dashboard and account
Operate your account without writing code: API keys, team and roles, webhook configuration and delivery inspection, and reconciliation exports.
Account security
Two-factor enrolment, active sessions, recent logins, password changes and security email preferences, all in the dashboard.
Team and roles
The six roles, what each one may actually do, and how to invite, re-role and remove people from the dashboard.
IP allowlist
Restrict the API calls your servers make with a secret key, and dashboard sessions, to known IP ranges: what is enforced and against which address, how the first entry can lock out your production servers and your team, and how to get back in.
Security and data
How TensorRail protects payment data and merchant accounts, at a capability level, for evaluators making a diligence pass.