Exchange the sandbox master API key for a login session

POST

/sandbox-sessions

Creates a normal identity login session from the sandbox master API key, letting integrators simulate a logged-in user without going through the full authentication flow. This endpoint only works on a server running in sandbox mode, and only when the request is authenticated with the sandbox's designated master secret API key — any other secret key is rejected. The request takes no body; the caller's identity, IP address, and user agent are all derived server-side from the authenticated request context. The returned session behaves exactly like a session created via the normal login endpoint and can be used to sign subsequent JWT-authenticated requests.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Responses

🟢201

application/json

A new identity session was created from the master API key.

Bodyapplication/json

🟠401

🟠403

🔴500

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/sandbox-sessions' \
--header 'Authorization: Bearer <token>'

Response Example

201 - Success

{
    "message": "Sandbox session created successfully",
    "status": "success",
    "data": {
        "id": "01JABC1234567890ABCDEFGHIJ",
        "raw_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uX2lkIjoiMDFKQUJDMTIzNDU2Nzg5MEFCQ0RFRkdISUoifQ.4pQxG2wq3z5v6yqYV0nD1eR8sT1xU2wA3bC4dE5fG6h",
        "identity_id": "01J9XYZ9876543210ZYXWVUTSR",
        "expires_at": 1780000000000
    }
}

Modified at 2026-09-30 00:29:30

Provision a sandbox identity and master API key

Fund an entity's test wallet with sandbox test money