Connect and test your integration

Your integration has two jobs: record referred visits and report the customer payments that can earn commissions. Install the Anderro snippet on your site for visits. Then connect the tool that charges your customers, or send payment events from your backend.

Choose your payment connection

The product setup supports Stripe, Paddle, SamCart, WooCommerce, and a custom API flow. Follow the instructions for the provider you actually use. Keep the tracking snippet in place even when a provider reports payments, because the referral still needs to be tied to the customer.

For a custom integration, send server events to https://track.anderro.com/events with your product's secret key in x-api-key. A signup should include the customer's email and the visitor ID from the snippet. A payment includes the customer, amount in cents, and preferably your transaction's external ID. This ID helps match a later refund to the original sale.

The events API accepts USD amounts. A payment sent by the browser snippet is analytics only and never creates a commission. Use trusted server events or the provider integration for commissionable payments.

Secret

Your public key belongs in the snippet. Your secret API key belongs on your server. A provider's webhook signing secret is another credential: it lets Anderro verify that an incoming payment notification came from that provider.

Copy the correct secret from the provider's setup into the corresponding integration field. Keep live and test credentials separate. In particular, Paddle payments need a saved signing secret and a verified signature to create commissions. A recorded payment alone does not prove that a commission was earned.

Do not put secret keys in browser code, marketing assets, or messages to affiliates. If a credential is exposed, replace it and update the integration that uses it. Read keys and webhooks for the distinction between API keys and outgoing webhook secrets.

Test

Start in test mode with test keys and the provider's matching environment. Work through three checks in order: a click through a valid referral link, a signup from that visit, and a test payment. Check each result before moving to the next step.

If the click is missing, check the snippet, consent, and your site's Content Security Policy. If the signup is missing, check the customer email and visitor ID. If payment attribution is missing, confirm you sent a trusted server-side signup when the payment carries only an email.

Test data is separate from live earnings. Once the full journey works, configure the live credentials and confirm your live setup. Review your first real commission before inviting a larger group of partners.