# Production access

What is checked before an application can transact for real customers.

Sandbox is automatic. Production is reviewed, because these APIs move real vehicles, real food and real people's money. The review is about whether the integration behaves correctly when things go wrong, not about how impressive it is.

- Developer Agreement accepted by the organization.
- Application details complete and honest: name, logo, website, privacy policy, support contact.
- Redirect URIs are exact, https, and belong to you.
- Each requested scope is justified. Unused scopes are removed rather than explained.
- The 403 RYDE_ONE_REQUIRED path is handled as a product moment, not an error message.
- Membership expiring mid-transaction still lets the customer track and cancel.
- Idempotency keys are generated per intended action and reused across retries.
- The customer is shown the quote before anything is confirmed.
- Failures are handled: no driver, merchant rejection, cancellation, rate limiting.
- Secrets are stored server-side and rotatable.