Sandbox

Sandbox is the environment in which you integrate the API before Production. It serves the same API surface as Production, on the same URL: the key decides the environment. Sandbox calls go through the same resolution engine; what changes is billing, the allowance and the rate limits.

What is identical to Production

• The three routes, the same fields, the same headers and the same error codes.
• The same engine and the same resolution policy: a descriptor resolved in Sandbox is resolved by the same computation as in Production.
• The same idempotency, deduplication, validation and retention rules.

What differs

The 2,000-unit allowance

Sandbox carries a lifetime allowance of 2,000 units per organisation, not per month and not per key: every Sandbox key of every workspace in one organisation draws from the same allowance. It is set when the organisation is created.

A call consumes the units its result carries, the ones the response announces in usage.units:

Once the allowance is exhausted, a call that would have consumed a unit is refused:

{
  "type": "https://developer.noryo.app/errors/sandbox_quota_exhausted",
  "title": "Sandbox quota exhausted",
  "status": 402,
  "code": "sandbox_quota_exhausted",
  "detail": "The organization has used its Sandbox allowance. Move to Production to continue.",
  "request_id": "req_…"
}

Retrying the same request does not help: the allowance does not refill. See sandbox_quota_exhausted.

Two separate worlds

Sandbox and Production share nothing: separate keys, separate rate-limit buckets, separate counters. An enrichment_id created in Sandbox cannot be read with a Production key (and the other way round): the read returns 404. Idempotency keys and external_transaction_id values are also scoped to each environment. A Sandbox call can never bill a Production account. See Environments.

Getting a Sandbox key

Sandbox keys are created on the API keys page of Platform. Until Noryo has opened Sandbox key issuance, creation is refused with the message Sandbox access is not enabled yet.. See API keys.