Sandbox

There is no self-service signup. Sandbox and production access are provisioned by IDCanopy.

Requesting a sandbox tenant

Contact your IDCanopy onboarding contact with:

• the tenant/organisation name you want provisioned,
• your integration contact(s),
• whether you need staging only, or staging and production,
• for the inbound webhook: the document-host domain(s) to add to your fetch allowlist, and your outbound callback URL.

IDCanopy provisions and returns, out of band:

• your tenant API key,
• for production: the mTLS CA chain and a signed client certificate, see mTLS,
• the inbound and outbound webhook HMAC secrets, see Webhooks,
• the document-URL allowlist registration.

Credentials are never sent through git or any shared channel; rotation is handled by IDCanopy on request.

Base URLs

See Environments.