---
title: Integration Checklist
slug: devdocs/integration-checklist
docTags: 
createdAt: 2026-10-16T12:03:52.233Z
---

Check each item before you go live.

## Access

- [ ] You received sandbox credentials from Expressoft.
- [ ] You generate a token and send it as `Authorization: Bearer <token>`.
- [ ] You renew the token when a request returns 401 (or before `tokenExpireOn`).

## Requests

- [ ] You send every request as `POST` to the GraphQL endpoint.
- [ ] You page through the lists with `endCursor` until `hasNextPage` is `false`.
- [ ] You send order keys or a period of at most 1 year to `orders`.

## Customers and loyalty

- [ ] You search for the customer before you create one.
- [ ] You keep the `publicKey` of the customer.
- [ ] You read the points balance from `loyalty.points.balance` and don't calculate it yourself.
- [ ] You handle decimal values for points and amounts.
- [ ] You handle empty lists and `null` values (segmentation, phone numbers, email).
- [ ] You compare `usedCount` with `maximumUsageCount` for vouchers.
- [ ] You create gift cards with an organization, a currency and a VAT category.

## Errors

- [ ] You check `errorCode` in the result of every mutation.
- [ ] You handle the error codes of the customer and gift card mutations.

## Before production

- [ ] You tested the full flow in sandbox.
- [ ] You asked Expressoft for the production URL and credentials.
- [ ] You keep credentials and tokens private.