Every server call sends the secret key. Sandbox and live are different keys, and a key only sees payments created in that mode.

Base URL

Sandbox and production use the same base URL, https://api.parupay.com/v1. The key decides the mode: sk_test_ works in sandbox and sk_live_ in production.