​

Test credentials

• Test API integrations
• Validate signature generation
• Simulate payment flows
• Test payout processing
• Verify webhook handling
• Build and debug applications safely

​

Sandbox Base URL

https://sandbox.Elite Neo Bank.com

​

Test Credentials

X-API-KEY: pk_test_xxxxxxxxxSECRET_KEY: sk_test_xxxxxxxxx

​

Required Headers

Content-Type: application/json
Accept: application/json
X-API-KEY: pk_test_xxxxxxxxx
X-SIGNATURE: GENERATED_SIGNATURE
X-TIMESTAMP: GENERATED_TIMESTAMP

​

Sandbox Features

• Payment Gateway APIs
• Hosted Checkout Testing
• Payout API Testing
• Webhook Testing
• Signature Validation
• Transaction Status Verification
• Error Response Testing

​

Supported Testing Areas

​

Payment Testing

• Order creation
• Hosted checkout flow
• Payment status verification
• Failed payment handling
• Expired transactions

​

Payout Testing

• Wallet balance inquiry
• Payout initiation
• Payout status verification
• Failed payouts
• Retry handling

​

Webhook Testing

• Payment webhooks
• Payout webhooks
• Signature verification
• Duplicate event handling
• Retry workflows

​

Example Sandbox API Request

curl --request POST \
--url https://sandbox.Elite Neo Bank.com/api/v3/pg/order/create \
--header "Content-Type: application/json" \
--header "Accept: application/json" \
--header "X-API-KEY: pk_test_xxxxxxxxx" \
--header "X-SIGNATURE: GENERATED_SIGNATURE" \
--header "X-TIMESTAMP: GENERATED_TIMESTAMP" \
--data '{
  "order_id": "TEST_ORDER_1001",
  "order_amount": "10.00",
  "order_currency": "INR"
}'

​

Sandbox Testing Recommendations

• Signature generation
• Timestamp validation
• Payment success flow
• Payment failure flow
• Payout success flow
• Payout failure flow
• Webhook verification
• Retry handling
• Duplicate request protection

​

Important Notes

• Sandbox transactions are simulated only
• No real settlements occur
• Sandbox UTR numbers are test references
• Test credentials work only in Sandbox
• Production credentials will not work in Sandbox

​

Environment Separation

​

Common Sandbox Errors

​

401 Unauthorized

• Invalid test API key
• Incorrect signature
• Expired timestamp

​

403 Invalid Wallet ID

• Using production wallet in Sandbox
• Invalid test wallet ID

​

Invalid Signature

• Incorrect secret key
• Modified payload
• Wrong signature logic

​

Security Recommendations

• Never use production credentials in development environments
• Store test credentials securely
• Regenerate signatures for every request
• Validate webhook signatures even in Sandbox

​

Best Practices

• Complete full end-to-end testing
• Test both success and failure flows
• Verify retry handling
• Validate API responses carefully
• Test webhook security thoroughly

​

Moving to Production

• Replace Sandbox credentials
• Update API base URLs
• Configure production webhooks
• Enable production IP whitelisting
• Verify live payout configurations
• Complete security validation