Sandbox

Canonical sandbox test-data table (zero-auth)

Machine-readable directory of every sandbox test fixture: the single source docs and agents link to instead of a hand-kept appendix. Enumerates the reserved write-side test orgs (999000001-005, the only orgs /api/v1/sandbox/actions/execute accepts as a successful filing), the Altinn acting-capacity scenario orgs, the MOD-11-valid realistic graph, the difficult-company personas (999770-series: realistic, internally-consistent companies for pre-production agent testing: bankruptcy in progress, voluntary liquidation, VAT deregistered, disputed signatur, degraded data, merger pair, NUF branch, dormant, and more, each with a difficulty descriptor and an expected verdict block), the single public-sandbox org, the four reserved error orgs (org → forced error code), all eight ?simulate_error= tokens, the ?simulate_latency= / ?mock_date= query knobs, and the magic VAT values that force MVA-melding filing outcomes. The execute block also carries the write-loop contract agents otherwise discover by 400 round-trip: execute.request_body (the JSON field is action, not action_type; approval_token rides in the body), execute.required_headers (Idempotency-Key is mandatory; Authorization recommends the synthetic apier_sandbox_test_<suffix> bearer, noting that a real key also authenticates but is unnecessary because the sandbox never reaches a government upstream), and execute.sandbox_clock (pinned_at, local_time, timezone: Europe/Oslo, and a note, all derived from the single pinned sandbox instant that ?mock_date= overrides on the write-side routes). Zero-auth (Category A discovery), per-IP rate-limited, deterministic except _meta.response_timestamp. Every value listed here reproduces its documented behaviour on the sandbox surface.

get/api/v1/sandbox/fixtures

Request

  • Base URL: https://www.apier.no
  • URL: https://www.apier.no/api/v1/sandbox/fixtures
  • Auth: none required

Response

The canonical sandbox fixtures table. data carries the directory; _meta is the standard sandbox metadata block (carries is_sandbox: true and sandbox_notice). Served Cache-Control: no-store like the whole sandbox surface: no ETag / If-None-Match → 304 / max-age cache tier here, because a conditional-GET 304 would replay a stale X-Correlation-ID + _meta.response_timestamp from a cached body and break the per-request trace contract — so 's ETag cache tier deliberately does not apply to the no-store sandbox surface. Retry-After is documented on the 429 below.

successtrue required
dataobject required

Canonical fixtures directory. Top-level keys: schema_version, description, base_url, reserved_test_orgs (each org → entity_type / data_tier / obligation_ids), acting_capacity_scenarios (org → Altinn scenario, plus endpoint_scope: the only endpoints that resolve the org; every company read returns 404 for it), realistic_orgs, magic_scenarios (the 999660-series magic-state orgs — each org → name / state / label / description / entity_type / expected verdict block), personas (the 999770-series difficult-company personas — each org → name / entity_type / label / difficulty / description / expected verdict block), public_sandbox_org, reserved_error_orgs (org → forced error code), simulate_error_tokens (all 8), query_knobs (simulate_latency + mock_date), and execute (action_types, dry_run note, magic_vat_values).

Changes

No recorded changes to this operation across all 1 revision of this API.