Appearance
Going live
Live keys (xash_live_…) sell for real, from your prepaid USD balance.
Opening soon
Live sales open after the pilot. Everything on this page works the same in sandbox, so build against it now.
Steps
The owner does these in the portal under Go live. No call or paperwork is needed to start on the Starter tier.
- Turn on two-factor sign-in for the owner account.
- Accept the partner terms.
- Request live access.
- Top up by bank transfer with your partner code (
XP-…) as the reference. Xash credits it once the money arrives, and live switches on with your first credited top-up. Mobile money and USDT top-ups are coming. - Create a live key. Only the owner can, and live keys always expire (within a year).
At launch, live sales cover Econet, NetOne and Telecel airtime, Econet and NetOne bundles, and ZESA tokens. GET /products with a live key shows available: false for anything not open yet (bills, NetOne vouchers): build for them in sandbox now.
Tiers and limits
| Tier | How you get it | Per sale | Sales per day | Per collection | Collections per day |
|---|---|---|---|---|---|
| Starter | The steps above | $20 | $100 | $50 | $200 |
| Verified | Business verification approved, IP allowlist set | $500 | $5,000 | $1,000 | $10,000 |
| Enterprise | Agreed with Xash | custom | custom | custom | custom |
Collections count toward the daily limit from the moment they're accepted, pending ones included; a failed collection gives its amount back. A day runs midnight to midnight, Harare time, and a collection belongs to the day it was accepted.
Over a limit, you get 409 LIMIT_EXCEEDED with error.limit naming which one. GET /me shows each limit and how much you've used today.
Business verification
The owner sends the documents in the portal under Verify business. Review usually takes 1–2 working days, and approval moves you to the Verified tier.
- Sole traders: national ID, a selfie holding it, proof of address (under 3 months old).
- Companies: certificate of incorporation, CR14, a director's national ID, proof of business address.
Only the Xash staff who review verification can open your documents, and every opening is logged.
Security
- Keep live keys on your server only.
- Limit each key to the abilities, and if useful the branch, it needs.
- From the Verified tier, live keys only work from the IP addresses you allow.