Sandbox

Sandbox mirror: acting capacity for a person on behalf of an organisation

Fixture-backed mirror of POST /api/v1/altinn/list-acting-capacity: the same request body and the same flat response data under the sandbox envelope (_meta.is_sandbox: true). Answers from the four Altinn sandbox scenario organisations: 999111114 (an active daglig leder role), 999222226 (no roles), 999333338 (an accountant role that has expired) and 999444008 (an unrecognised organisation, answered with no roles). Any 11-digit fnr is accepted; only its HMAC (actor.fnr_hmac, under the sandbox key) is returned, and the raw value is never stored or echoed. Role validity is judged at the fixed sandbox clock, so every call returns the same roles and derived actions; only correlation_id varies. No call to Altinn or Maskinporten is made and nothing is written. on_behalf_of.name is always null (the scenario set carries no names). Any other organisation returns 400 SANDBOX_ORG_NOT_IN_FIXTURE_SET listing the scenario organisations, without echoing the input. Accepts a real key or the synthetic apier_sandbox_test_<suffix> bearer; the MCP tool list_acting_capacity is routed here under the sandbox bearer.

post/api/v1/sandbox/altinn/list-acting-capacity

Request

  • Base URL: https://www.apier.no
  • URL: https://www.apier.no/api/v1/sandbox/altinn/list-acting-capacity
  • Auth: one of:
    • HTTP bearer
    • HTTP bearer

Request body

fnrstring required

11-digit Norwegian fødselsnummer or D-nummer. HMAC-SHA-256 hashed at the boundary; never persisted in plaintext.

org_numberstring required

9-digit Norwegian organisasjonsnummer the actor wishes to represent.

Response

Acting capacity resolved from the sandbox scenario set.

successtrue required

Changes

No recorded changes to this operation across all 1 revision of this API.