Sandbox
- Use for development: wire up HMAC signing, read the domain feed, and test webhooks against non-production inventory.
- Requests are scoped to sandbox marketplace rows (test data), not production listings.
- Does not require live-enable flags on your partner account.
- Lower default rate limit than live keys.
Live
- Use only after you are ready for real orders against live inventory.
- Live calls require your partner account to have Partner API and live credentials enabled (set by NameAI when your DPA is verified and live keys are issued).
- Your deployment may also enforce an allowlist (see internal rollout notes). If something returns live_credentials_disabled or similar, contact support.
Typical flow
- Build and test with sandbox keys.
- When NameAI enables live access, switch your integration to the live key id and secret (never mix them in the same deployment unless you mean to).
- Rotate keys if a secret is exposed; treat live secrets like production passwords.
Endpoint paths and signing rules are identical—see Authentication and API surface.