What production M-Pesa actually takes

Plenty of teams list M-Pesa on their capability slide. Far fewer have cleared production provisioning.

The sandbox gives you a working request and a clean response. Production gives you an org portal, operator roles, security credential generation, shortcode configuration, and a review process. None of it is difficult, exactly — it is just real, and it takes patience with a process that assumes you already know the vocabulary.

Then there is the part nobody demos: what your system does when a callback arrives twice, or arrives late, or never arrives at all. Settlement behaviour is where integrations quietly break, and it is the reason we design against the failure path first.