Credentials are environment-specific, and API keys carry their environment in the key itself: production keys contain
live (way_sk_live_...), staging keys contain test (way_sk_test_...). A staging key does not work in production and vice versa. Ask your Way representative for a staging brand and staging API keys when you start building - you can create and cancel bookings there freely.
The same goes for the Stripe publishable key used in card checkouts: it comes from your Way representative (it’s Way’s key - payments run on Way’s Stripe platform, so a key from your own Stripe account won’t work), and staging and production have different ones per paymentPlatform.
API access
API access is a feature that must be enabled for your brand or organization. If your credentials are correct but requests return403 Forbidden, ask your Way representative to enable API access.
Rate limits
Rate-limited endpoints allow 400 requests per 60 seconds per brand/organization, client IP, and user agent. When you exceed the limit the API returns429 Too Many Requests - back off and retry after a delay. If you expect sustained higher throughput, talk to your Way representative.