# Technical Aspects

### <mark style="color:blue;">Security Considerations</mark>

* All API requests must be made over HTTPS. Calls made over plain HTTP will fail.&#x20;
* API requests without Payload-signature will also fail.
* You will be able to hit our APIs only from the IPs you have previously whitelisted on the Merchant Panel.

### <mark style="color:blue;">Endpoint domains</mark>

Each environment has its own domain. The path of the endpoints do not change.

<table data-header-hidden><thead><tr><th width="163">Environment</th><th>Domain</th></tr></thead><tbody><tr><td>Environment</td><td>Domain</td></tr><tr><td>Staging</td><td><code>https://api-stg.tupayonline.com/</code></td></tr><tr><td>Production</td><td>Provided once you complete the testing</td></tr></tbody></table>

{% hint style="info" %}
Notes:

* You will use the STG endpoints to integrate.
* The STG and PROD environments are not communicated in any way.&#x20;
* No transaction created on the STG environment will be reflected on the PROD environment or vice versa.&#x20;
* The API Keys and configurations between environments are also different.
* In case of seeing the error "Insufficient Funds" on STG, you can create and approve a deposit or reach out to <integration@tupaypagos.com> to add funds to your account.
  {% endhint %}

## IP Whitelisting

For security purposes, you need to whitelist the IPs from where you will call our API.

In order to whitelist your IPs and make the process as smoother as possible, you should go to **Settings -> API Access** and add the list of IPs you will possibly use under the **Cashouts IP Address** section.

<figure><img src="/files/AfxHpNrUpYWwkll4XLsd" alt="" width="309"><figcaption></figcaption></figure>

{% hint style="info" %}
We convert all the data we receive to UTF-8. Make sure you are also converting it into UTF-8 to make sure both parties have the same details.&#x20;
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tupayonline.com/english/api-documentation/cashout/technical-aspects.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.