# FAQ for AI agents

> Answers to common Bolt integration questions for developers and AI coding tools.

Source: https://help.boltapp.com/ai-agents/faq

## How do I get Bolt API keys? [#how-do-i-get-bolt-api-keys]

Create a [merchant account](https://merchant.boltapp.com/onboarding/get-started), then open **Administration → API** in the dashboard. You need an API key (server), signing secret (webhook verification), and publishable key (client-side). See [API keys](/getting-started/api-keys).

## What is the difference between sandbox and production? [#what-is-the-difference-between-sandbox-and-production]

Sandbox uses `api-sandbox.boltapp.com` and [merchant-sandbox.boltapp.com](https://merchant-sandbox.boltapp.com). Production uses `api.boltapp.com` and [merchant.boltapp.com](https://merchant.boltapp.com). Keys and transactions do not cross environments. See [Environments](/api-reference/environments).

## How do I integrate Bolt checkout with Shopify? [#how-do-i-integrate-bolt-checkout-with-shopify]

Start with the [Shopify platform guide](/platforms/shopify), then follow [Shopify theme installation](/platforms/shopify-installation) to install Managed Checkout in the theme. For checkout links, see [Checkout Everywhere](/platforms/shopify-checkout-everywhere).

## How do I integrate Bolt with BigCommerce? [#how-do-i-integrate-bolt-with-bigcommerce]

Install the Bolt app from BigCommerce, then follow [BigCommerce installation](/platforms/bigcommerce-full) for scripts, webhooks, and theme updates.

## What is Embeddable Checkout vs Bolt Checkout? [#what-is-embeddable-checkout-vs-bolt-checkout]

**Bolt Checkout** replaces your full checkout page on supported platforms. **Embeddable Checkout** adds Bolt payment fields and shopper accounts inside your custom UI. Compare [Bolt Checkout](/products/checkout) and [Embeddable Checkout](/products/embeddable-checkout).

## How do I verify Bolt webhooks? [#how-do-i-verify-bolt-webhooks]

Use your signing secret to verify the HMAC signature on every inbound request before processing. See [Verify webhooks](/api-reference/guides/verify-webhooks).

## How do I test payments without charging real cards? [#how-do-i-test-payments-without-charging-real-cards]

Use sandbox with [test cards](/getting-started/test-cards). All transactions appear in the sandbox merchant dashboard.

## How do Bolt payment links work for games? [#how-do-bolt-payment-links-work-for-games]

Your server creates a link via `POST /v1/gaming/payment_links`. The shopper completes checkout in a browser; you receive a webhook on success. Start at [Gaming quickstart](/gaming/guide/quickstart).

## How do I onboard marketplace sellers with Bolt Connect? [#how-do-i-onboard-marketplace-sellers-with-bolt-connect]

Use Bolt Connect to onboard sellers and split payments. See [Bolt Connect](/products/connect) and [Marketplace onboarding](/api-reference/guides/connect-onboarding).

## What authentication headers does the Bolt API require? [#what-authentication-headers-does-the-bolt-api-require]

Use the authentication headers defined for the endpoint. Include `X-Nonce` only when that endpoint requires it. Client-side SDK initialization uses the publishable key. See [Authentication](/api-reference/authentication).

## How do AI coding tools read Bolt documentation? [#how-do-ai-coding-tools-read-bolt-documentation]

Connect the [MCP server](/ai-agents/mcp-server) at `https://help.boltapp.com/mcp` to search and read pages on demand. To prime an agent up front instead, use [llms.txt](https://help.boltapp.com/llms.txt) to index the set, [llms-full.txt](https://help.boltapp.com/llms-full.txt) for every prose page in one file, and the per-page Markdown at `/llms/<path>.md`. See [Docs for agents](/ai-agents/docs-for-agents) and the published [skills](/ai-agents/skills).

## Where is the Bolt OpenAPI spec? [#where-is-the-bolt-openapi-spec]

Main spec: `https://assets.boltapp.com/external-api-references/bolt.yml`. Embeddable v1: `embedded.yml`. Tokenizer: `tokenizer.yml`.

## What should I do when a Bolt API call returns 401 or 422? [#what-should-i-do-when-a-bolt-api-call-returns-401-or-422]

**401**: Check API key and environment (sandbox vs production). Do not retry without fixing credentials. **422**: Fix request parameters per the OpenAPI schema; do not retry the same payload. See [Errors](/api-reference/errors).

## Related [#related]

* [AI onboarding](/ai-agents/introduction)
* [Browse all documentation](/documentation/browse)