Alchemy Production Checklist

Pre-Launch Checklist

API & Infrastructure

• API key restricted to production domains in Alchemy Dashboard
• Separate Alchemy apps for dev/staging/prod environments
• Rate limit headroom verified (< 70% of CU/sec budget)
• Retry logic with exponential backoff implemented
• Error monitoring configured (Sentry, Datadog, etc.)
• Webhook endpoints HTTPS-only with signature verification

Security

• API key NOT in frontend code — proxied through backend
• Private keys in secret manager (not env files)
• All user-supplied addresses validated and checksummed
• No console.log of sensitive data in production builds
• npm audit clean — no critical vulnerabilities