---
title: "No-auth sandbox test surface for /api/ask"
method: POST
path: "/api/ask/sandbox"
---

# No-auth sandbox test surface for /api/ask

`POST /api/ask/sandbox`

## Request

- Base URL: `https://rrmacademy.org`
- URL: `https://rrmacademy.org/api/ask/sandbox`
- Auth: none required

The public, no-auth, no-key test surface for the /api/ask contract. Live at POST https://rrmacademy.org/api/ask/sandbox. Returns a canned, deterministic response with no LLM invocation, no authentication, no rate limit, and no data mutation (safe to call from any client, any number of times). Accepts the same JSON shape as /api/ask but ignores the body. Use it to validate that your client correctly parses the AskResponse-shaped reply before integrating with the authenticated /api/ask endpoint. Set Accept: text/event-stream for the SSE variant. Every response carries the `X-Sandbox: true` header. Also described under `info.x-sandbox`.

## Request body

- object
  - `message` string: Ignored. Included for structural compatibility with /api/ask.

## Response `200`

Canned sandbox response. Shape matches SandboxAskResponse.

- SandboxAskResponse: Returned by /api/ask when ?mode=sandbox is set. Canned response, does not consume rate-limit budget or invoke the upstream LLM.
  - `sandbox` true, required
  - `answer` string, required
  - `citations` Citation[], required
    - `url` string, uri, required
    - `title` string

---

[API](https://skmtc.dev/rrmacademy/apis/rrm-academy-agent-api.md) · [All operations](https://skmtc.dev/rrmacademy/apis/rrm-academy-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rrmacademy/apis/rrm-academy-agent-api/revisions/0e3589a38b0c?raw)