Stage 1: Agree scope
- Describe your product and the clients it serves
- Confirm the capabilities you need
- Confirm supported markets and regions
- Agree commercials
- Sign the agreement
Stage 2: Set up access
- Open a business account
- Receive credentials ‹issued by whom, and how›
- Submit server IPs for production and staging
- Confirm whitelisting ‹typical turnaround›
- Confirm test environment access
Stage 3: Build
- Authentication and token refresh
- Onboarding and KYC flow
- Funding and withdrawal
- Trading: place, modify, and close orders
- Error handling and retries
- Credentials stored securely and never client-side
Stage 4: Test
- Run the full client journey end to end in the sandbox
- Test failure cases, such as rejected orders, expired sessions, and failed deposits
- Confirm you respect rate limits
Stage 5: Prepare to launch
- Complete the security review
- Publish client terms and risk disclosures
- Agree the support process
- Complete the go-live checklist
- Confirm production credentials and whitelisted IPs
Stage 6: After launch
- Set up monitoring and alerting
- Agree the incident contact route
- Schedule a review date
