| Environment | URL |
|---|---|
| Sandbox | https://sandbox.api.visa.com/src/v1 |
| Certification | https://cert.api.visa.com/src/v1 |
| Production | https://api.visa.com/src/v1 |
The Click to Pay API requires two authentication mechanisms only:
| Protocols | Details |
|---|---|
| Token Authentication (x-pay-token) | Session-based authentication using JSON Web Tokens that identify specific transactions and their contents. See API Key – Shared Secret (X-Pay Token) in the Visa Developer Center for authentication setup instructions. |
| API Key Authentication (apikey) | Client-specific authentication using persistent API keys issued during onboarding. Keys identify the connecting client system and remain valid throughout the integration lifecycle. |