Sandbox

Build the whole integration before spending anything.

A pmt_test_ credential runs against the same endpoints, the same scopes, the same rate limits and the same error shapes as production. Nothing it does is charged, and no provider is ever contacted.

What you can exercise

• Authentication, and every failure mode of it.
• Scopes, including the 403 a missing one produces.
• Rate limiting, including 429 and Retry-After.
• Work flow discovery and the collected-field schema.
• The case feed and the case reads.
• Direct service calls, answered with stand-in values of the right shape.

What you cannot

A sandbox credential keeps working when production stops

If the institution's account is unfunded or restricted, production calls are refused and sandbox calls are not. That is deliberate: you have to be able to finish integrating in order to start paying.