Complete the checklist
- Use a separate live key with minimum scopes
- Store keys and webhook secrets in a secret manager
- Send idempotency for every compatible mutation
- Verify webhooks against the original body
- Deduplicate financial events and commands
- Handle
429, timeouts, and retryable errors - Retain
request_idwithout logging sensitive data - Test every card, SPEI, OXXO, and installment flow you offer
- Reconcile payments, refunds, payouts, and transfers
- Confirm the merchant is ready to accept payments
https://api.simplepay.mx. Reject any configuration that combines this host with sandbox keys or webhooks.
Compare errors, latency, and webhook deliveries before and after rollout. Stop on missing routes, 5xx, or incomplete reconciliation.