API playground
Try requests safely from the API reference.
The API reference can send real requests from your browser.
How your key is handled
- You paste your key into the page. It is never included in the site or in the OpenAPI file.
- The key stays in that browser tab and isn't saved, so it's gone when you reload.
- Requests go directly from your browser to
api.payinto.co, with no proxy in between.
Sandbox and production modes
The playground opens in Sandbox mode every time. Because both environments share one host, the mode is a safety check on your key.
| Situation | Result |
|---|---|
Sandbox mode with sk_test_ | Sent |
Sandbox mode with sk_live_ | Blocked in your browser |
Production mode with sk_live_, reading data | Sent |
Production mode with sk_live_, changing data | Sent after you confirm |
Production mode with sk_test_ | Blocked in your browser |
Any pk_ public key | Blocked in your browser |
Live requests also need your IP address on the key's allowlist, so most of them will return 403 from a laptop. That protection is intentional, and we recommend testing live traffic from your servers.
If a request fails
| Symptom | Cause |
|---|---|
| A network or CORS error | The API only accepts browser requests from docs.payinto.co, so requests from a local copy of the docs fail. |
Blocked by the docs playground | The playground stopped the request. The message says why. |
403 IP address not allowed | Your IP isn't on the key's allowlist. |
403 ... access is not enabled | The module or environment isn't enabled for your business. |