Start with Sandbox. Sandbox makes test payments only. After it works, return here and configure Production separately.
Credential safety: never email or post an access token. This page writes it only to store/square_config.php on your server.
store/square_config.php