# Preparation and tools
# Authentication data
To start working with Mandarin, you need to register, get your account activated by your account manager and go to personal account (opens new window).
In order to receive MID и Secret you should follow to this instruction (opens new window)
IMPORTANT!
Please note that the secret key must not leave your server in any form. If it is passed as part of HTML or otherwise used in JavaScript, this is a security problem and gives an attacker the opportunity to make calls to the payment system on your behalf.
For additional security for each MID, you can enable the option to accept requests only from white list IP addresses (opens new window) (white list). The feature is enabled by request to Helpdesk (opens new window).
# Monitoring requests and notifications (HeartBeat)
HeartBeat (opens new window) is a tool for monitoring payment transactions and asynchronous notifications (callbacks). Standard authorization is used to log in.
Features:
Monitoring payment transaction requests: link to HeartBeat - Transactions (opens new window).
Bank card tokenization monitoring: link to go to HeartBeat - Card tokens (opens new window).
Monitor callback notifications that Mandarin has not received a response from you with a status of
200 OK: link to go to HeartBeat - Notifications (opens new window).Service payments by registry: link to go to HeartBeat - Bulk payouts (opens new window).