Gateway keys
A new secret is shown once. Keys can be revoked or rotated.
Security
Scoped API keys and merchant-specific records keep sandbox workspace access limited to authorized people.
Payment confirmation
The server verifies provider events and matches the payment amount and currency.
Card collection
Card details are entered on the authorized hosted page.