Production checklist

Environment

• Tested end to end on testnet (https://testnet.zklighter.elliot.ai, chain ID 300). See Environments & endpoints.
• Mainnet config uses chain ID 304 and the mainnet base URL
• Market IDs and decimals are loaded from orderBookDetails, not hard-coded
• wasm_exec.js and lighter-signer.wasm come from the same Go build

Keys & security

• Your app uses a dedicated API key index (4–254) that won't clash with others
• API private keys are encrypted at rest (keychain / KMS); never logged
• Your own keys never ship to a browser or mobile bundle
• The bridge.lighter.xyz builder key is used server-side only
• Read-only tokens are used wherever trading isn't needed (analytics, AI agents)
• Auth tokens are refreshed before their expiry (max 8 hours)

Orders

• Prices and sizes converted with the market's decimals, and checked against minimums
• Market orders use a sensible worst price (slippage limit)
• clientOrderIndex values are unique across all markets
• orderExpiry is between 5 minutes and 30 days (or 0 for IOC)
• Execution is confirmed via WebSocket or tx lookup, not assumed from code: 200

Nonces

• Sends per API key are serialized (or you use skipNonce deliberately)
• Retries follow Retrying safely: check the tx status before re-signing
• Separate API keys for independent workloads

Reliability

• WebSocket keepalive (a frame at least every 2 minutes) and automatic reconnect + resubscribe
• Order book continuity check (begin_nonce = previous nonce)
• Exponential backoff on HTTP 429/405
• Requests authenticated to use L1-based rate limits
• Tier chosen deliberately (Standard's 60 req/min is easy to hit). See Account Types.

Money movement

• Deposit minimums shown to users (with slippage buffer)
• UDA blocked flag respected
• Transfer fees fetched from transferFeeInfo right before signing

Partner fees

• Clients are on Plus or Premium before non-zero integrator fees are attached
• Fees ≤ approved maximums ≤ systemConfig caps
• Re-approval flow before approvalExpiry

Ops

• Subscribed to the API Telegram channel / #api-updates on Discord
• Contact channel with Lighter set up (Discord #support)