Testing & Security
Validate your integration with the built-in tools and follow the security notes that keep routes safe.
How to Test
- API Tester. Use the dashboard's tester to experience the buyer flow end-to-end with your embedded Privy wallet.
- Manual curl. Call the proxy URL to see the 402 payload, then resend with a valid
X-PAYMENTheader. - Firestore. Inspect
routes/<routeId>andtransactionsto confirm settlements and metrics.
Security & Roadmap Notes
- Firestore rules let everyone discover routes while only owners can modify them—tweak as needed.
- Store wallets, Privy secrets, and facilitator URLs in environment variables or Firebase config.
- USDC on Base is supported today; multi-chain support is on the roadmap.