Recommended path
Run Mobile POS as a supervised device client that authenticates the signed-in operator through your backend. The backend holds the credential and creates each payment with the store context store_01900000000000000000000000.
Developer preview API v1
Sandbox only. No real funds moved. No production access is granted here. Access requirements
Point of sale
Authorize the operator, not the device
Mobile POS authenticates a signed-in operator and lets the backend create each payment with server-derived store authority.
Device credentials stay out of the binary
The device receives a short-lived operator session, never a live API credential. Server-side authority selects the store, merchant, aggregator programme, and execution mode for each sale.
Prohibited
Do not embed a live credential in the Mobile POS binary, mirror the credential to offline queues, or let a compromised device authorise a payment outside its assigned store and merchant.