Post-Production Guide

Congratulations, you now have your production environment access! To ensure the proper functioning of your services and maximum security during real transactions, please carefully follow the three configuration steps below.

1. Creation of Production Operation Accounts

Before you can initiate real payments, you must configure your operation accounts. Each production account must be specifically linked to a group of operators (e.g., AIRTEL, MOOV, ORANGE, MTN, GIMAC, etc.).

2. Securing Your Requests (Inbound IP Filtering)

To add an indispensable layer of protection in production and prevent fraudulent use of your keys, it is strongly recommended to restrict access to our APIs. From your dashboard, go to the IP Addresses menu to declare your servers' public addresses.

Important: Once configured, only authorized and active IP addresses will be able to query our services. If you leave this section empty, the system will assume by default that you authorize requests from any address (which is strongly discouraged in production).

3. Securing Your Webhooks (Outbound IP Filtering)

Parallel to the previous step, you must also protect your own infrastructure. To ensure that the payment notifications (Callbacks) you receive are legitimate and truly come from PVit, you must configure your firewall to accept only our traffic.

Here is the official list of our public IP addresses to add to your system's Whitelist for the domain https://api.mypvit.pro:

176.31.65.18
176.31.65.20
176.31.65.21
13.59.249.167