> ## Documentation Index
> Fetch the complete documentation index at: https://www.zinc.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# Get Sandbox Status
> Check whether the sandbox this key belongs to has been claimed into a real Zinc account yet.
Reports whether the sandbox behind the calling key has been [claimed](/docs/v2/api-reference/sandbox/claim-sandbox) yet.
An agent that hands its `claim_url` to a human has no other way to learn what happened. This endpoint closes that loop: poll it with your own key.
```bash theme={null}
curl https://api.zinc.com/sandbox/status \
-H "Authorization: Bearer $ZINC_KEY"
```
## Responses
| `claimed` | Case | `hint` tells you |
| --------- | ----------------- | ------------------------------------------------------------------------------- |
| `false` | Still provisional | Nobody has claimed it. Re-send the `claim_url`, or keep waiting. |
| `false` | Ordinary account | This key belongs to a regular account, not a claimed sandbox. Nothing to claim. |
| `true` | Claimed | The sandbox now belongs to a real account; `claimed_by_email` names it. |
Every response carries a `hint` in plain language, so an agent can act on the answer without special-casing each shape.
`claimed: true` is derived from the claim record on the account, not from the account merely being real — otherwise every ordinary account would report as claimed.
The response never includes `claim_url`. Only the token's hash is stored, so the URL can't be reproduced — keep the one from the [mint response](/docs/v2/api-reference/sandbox/mint-sandbox-key).
## OpenAPI
````yaml versions/latest.json GET /sandbox/status
openapi: 3.1.0
info:
title: Zinc
summary: >-
Zinc lets you search, buy, and return items from top online retailers with a
single API.
description: >-
Search, buy, and return items from top online retailers with a single API.
Supports AI agent ordering via MPP (HTTP 402) — no account required.
Supported retailers include 1-800-Flowers, Ace Hardware, Amazon, Amazon DE,
Barnes & Noble, Best Buy, Chewy, Gap, IBS, Lowe's, Macys, Partstown, and 11
more. Ships to the US and 2 other countries (DE, IT).
version: '2026-08-21'
x-logo:
url: https://mintlify.s3.us-west-1.amazonaws.com/zinc/logo/light.png
contact:
name: Zinc API Support
email: support@zinc.com
url: https://zinc.com/docs
x-guidance: >-
Zinc lets AI agents buy products from online retailers via a single API. Use
POST /agent/orders to place an order — no Zinc account needed, payment is
handled via MPP (HTTP 402 flow). Provide a product URL from a supported
retailer, a shipping address, and max_price in cents. The API charges
max_price + $1 API fee upfront and refunds the difference on completion. To
find products first, the /agent/* data endpoints (search, products/search,
products/offers, products/details) are MPP-paid at $0.01 per call;
/agent/search returns orderable URLs to feed straight into /agent/orders.
GET /retailers lists supported retailers for free (no payment or account).
Authenticated equivalents (orders, products, managed-accounts) require a
Bearer token (API key prefixed zn_). Docs: https://zinc.com/docs Supported
retailers include 1-800-Flowers, Ace Hardware, Amazon, Amazon DE, Barnes &
Noble, Best Buy, Chewy, Gap, IBS, Lowe's, Macys, Partstown, and 11 more,
shipping to the US and 2 other countries (DE, IT).
x-supported-retailers:
- 1-800-Flowers
- Ace Hardware
- Amazon
- Amazon DE
- Barnes & Noble
- Best Buy
- Chewy
- Gap
- IBS
- Lowe's
- Macys
- Partstown
- Pokémon Center
- Sephora
- Target
- The Home Depot
- TikTok
- Walmart
- Wayfair
- Zinc
- eBay
- libraccio
- zazzle
x-supported-countries:
- US
- DE
- IT
servers:
- url: https://api.zinc.com
description: Production
security:
- BearerAuth: []
paths:
/sandbox/status:
get:
tags:
- sandbox
summary: Has this sandbox been claimed?
description: >-
Whether the sandbox this key belongs to has been claimed yet.
An agent hands its claim URL to a human and then has no way to learn
what
happened — a device-code grant would tell it for free (issue #825).
Until
we have one, polling this closes the loop.
Still provisional means nobody has claimed it. Past that, "not
provisional"
alone would be a lie — every ordinary account would read as claimed — so
the answer comes from the claim event written on the account, which is
also the only durable evidence a claim happened once the provisional row
is deleted.
operationId: get_sandbox_status_sandbox_status_get
parameters:
- name: authorization
in: header
required: false
schema:
anyOf:
- type: string
- type: 'null'
title: Authorization
responses:
'200':
description: Successful Response
content:
application/json:
schema:
$ref: '#/components/schemas/SandboxStatusResponse'
'422':
description: Validation Error
content:
application/json:
schema:
$ref: '#/components/schemas/HTTPValidationError'
components:
schemas:
SandboxStatusResponse:
properties:
claimed:
type: boolean
title: Claimed
description: >-
True once a human has folded this sandbox into an account — at which
point this key is a real account's key and keeps working.
claimed_by_email:
anyOf:
- type: string
- type: 'null'
title: Claimed By Email
description: The claiming account's email, once claimed.
hint:
type: string
title: Hint
description: What to do next given this status.
type: object
required:
- claimed
- hint
title: SandboxStatusResponse
description: |-
Whether this sandbox has been claimed yet.
Lets an agent learn the outcome of a claim it can't see — the thing a
device-code grant would give it for free (see issue #825).
HTTPValidationError:
properties:
detail:
items:
$ref: '#/components/schemas/ValidationError'
type: array
title: Detail
type: object
title: HTTPValidationError
ValidationError:
properties:
loc:
items:
anyOf:
- type: string
- type: integer
type: array
title: Location
msg:
type: string
title: Message
type:
type: string
title: Error Type
type: object
required:
- loc
- msg
- type
title: ValidationError
securitySchemes:
BearerAuth:
type: apiKey
in: header
name: Authorization
description: Zinc API key (Bearer zn_...)
````