BRICK General FAQ

This FAQ covers common questions about Brick integration, including account setup, authentication, environments, callbacks, and troubleshooting steps applicable across all Brick products.

1. Account & Access

Q: What must be completed before integration?

You must:
• Pass KYB verification
• Have an active Brick dashboard account
• Obtain API Key & Secret
• Decide environment: Sandbox or Production

References:
• Verify Your Account (KYB)
https://docs.onebrick.io/docs/verify-your-account
• Brick Dashboard Overview
https://docs.onebrick.io/docs/dashboard-overview
• Getting Started With Your API
https://docs.onebrick.io/reference/getting-started-with-your-api-6

Q: Can I use production API before KYB is approved?

No.
Production access is only enabled after KYB approval.

Reference:
• Verify Your Account (KYB)
https://docs.onebrick.io/docs/verify-your-account


2. Environment & Credentials

Q: What is the difference between Sandbox and Production?
• Sandbox: testing only, simulated transactions
• Production: real funds and real bank processing

Sandbox credentials cannot be used in production and vice versa.

References:
• Try Brick API with Postman
https://docs.onebrick.io/docs/postman-collection
• Production Checklist
https://docs.onebrick.io/docs/production-checklist


Q: Why am I getting 401 Unauthorized?

Common causes:
• Wrong API key or secret
• Wrong environment base URL
• Expired JWT token

References:
• API Introduction
https://docs.onebrick.io/reference/api-introduction
• Generate Public Access Token (JWT)
https://docs.onebrick.io/reference/generate-public-access-token-jwt-token


3. Authentication & Security

Q: How does Brick authentication work?

Brick uses:
• API Key and Secret
• Short-lived JWT Public Access Token (5 minutes)
• Signature verification for callbacks

References:
• APIs Security
https://docs.onebrick.io/docs/api-security
• API Response Structure
https://docs.onebrick.io/reference/api-response-structure


Q: Why does my JWT token keep failing?

JWT tokens:
• Expire after 5 minutes
• Are single-use

Always regenerate before retrying a request.

Reference:
• Generate Public Access Token (JWT)
https://docs.onebrick.io/reference/generate-public-access-token-jwt-token


4. Callbacks & Webhooks

Q: Why am I not receiving callbacks?

Check:
• Callback URL is public and HTTPS
• SSL certificate is valid
• No firewall blocking inbound traffic
• Signature verification logic is correct

References:
• API Security
https://docs.onebrick.io/docs/api-security
• Error Handling
https://docs.onebrick.io/docs/error-handling


Q: Should I rely on API response or callback?

Always rely on callback.
API response only confirms the request was accepted, not completed.

References:
• Disbursement Callback
https://docs.onebrick.io/reference/disbursement-async
• Payment Callback
https://docs.onebrick.io/reference/callback-payment-ewallet


5. Reference ID Rules

Q: Can I reuse the same reference ID?

No.
Each transaction must use a unique reference ID.

Reference:
• API Response Structure
https://docs.onebrick.io/reference/api-response-structure


6. Debugging & Support

Q: What should I provide when reporting an issue?

Always include:
• Reference ID
• Timestamp
• API endpoint
• Environment (Sandbox or Production)
• Error response

Reference:
• Error Handling
https://docs.onebrick.io/docs/error-handling