Environments
INFI runs in a single production environment:
https://api.internationalfinance.com.br/v1Every call moves real money. There is no public sandbox — validate your integration with small amounts (close to the R$ 1.00 minimum) and revoke or rotate keys after testing.
Recommendations
- Use separate API keys per application or microservice (dev, staging, prod). All keys share the same balance and rate limit, but isolating them gives you independent revocation and audit trails.
- Configure distinct webhook URLs across your internal environments to avoid events hitting the wrong server.
- Keep the key out of source code. Use environment variables or a secrets vault.
HTTPS required
All API calls use HTTPS. Webhooks are only delivered to https:// URLs — plain http:// is silently dropped.