Documentation
Keys and environments
How API keys work today — what's implemented in the business portal vs. what's aspirational.
Environment pairs
A business’s /keys page mints two kinds of keys, both from the same endpoint:
sk_test_…— for integration testing. Sandbox seals chain to Seal Club’s private test root (“Seal Club Sandbox, Not Legally Valid”) and are visually watermarked — they are deliberately untrusted outside the sandbox.sk_live_…— requires the business to hold at least one active certificate.
Both key kinds talk to the same host, https://api.seal.club — the key prefix picks the mode (Stripe-style). There is no separate sandbox hostname.
Environment variables inside your apps
SEAL_API_BASE=https://api.seal.club
# live
SEAL_API_KEY=sk_live_****
# sandbox / integration tests
SEAL_API_KEY=sk_test_****Rotation
There is no in-place rotation yet. To rotate: create a new key at /keys, roll it out, then revoke the old one from the same page. Revoked keys stop working immediately — there is no grace-period TTL.