Environments

INFI runs in a single production environment:

https://api.internationalfinance.com.br/v1

Every call moves real money. There is no public sandbox — validate your integration with small amounts (close to the R$ 1.00 minimum) and revoke or rotate keys after testing.

Recommendations

  • Use separate API keys per application or microservice (dev, staging, prod). All keys share the same balance and rate limit, but isolating them gives you independent revocation and audit trails.
  • Configure distinct webhook URLs across your internal environments to avoid events hitting the wrong server.
  • Keep the key out of source code. Use environment variables or a secrets vault.
HTTPS required

All API calls use HTTPS. Webhooks are only delivered to https:// URLs — plain http:// is silently dropped.