Guides
Testing
Build and check your integration with test keys before you take real payments. No money moves in test mode.
Test and live keys
| Key starts with | What it does | Money moves |
|---|---|---|
| bst_test_… | Payments go to our banking partner’s test system | Never |
| bst_live_… | Real payments from real customers (after activation) | Yes |
The same code works in both modes. Switch by changing the key in your server’s environment variables, never in your code.
What to check before going live
- Create a checkout session from your server and open the checkout_url.
- Confirm your webhook endpoint receives payment.success and payment.failed, and that you check the BST-Signature header.
- Only deliver an order after a signed payment.success webhook or a server-side check of the payment.
- Match requested_amount_minor and merchant_reference against your order before fulfilling it.
- Keep your secret key on your server only.
If a test payment is refused
| Error | Meaning | What to do |
|---|---|---|
| acquirer_not_configured | The bank’s test system is not connected for test keys yet | Try again later |
| 401 | The key is wrong or was revoked | Check the key |
| 403 | Live access is off or the business is suspended | Contact support |
Questions? Email support@brightsecuretech.com. See the error codes for the full list.