Mint a Sandbox Key
Mint a sandbox API key with no account and no authentication, and get a complete example order back with it.
zn_test_ API key. No authentication required — this is the entry point for an agent that has nothing but the hostname.
The response is written to be self-guiding: send api_key as a Bearer token, POST the example_order body to /orders as-is, and work through next in order.
namebecomes the key’s label in the dashboard.emailis the address of whoever will claim this sandbox later. It is never required and is not used for anything else.
What you get back
Rate limits
This endpoint is capped per IP per day, plus a global daily ceiling.429— daily cap reached. Reuse a key you already minted, or wait outRetry-After(the window resets at UTC midnight;X-RateLimit-Resetgives the exact timestamp).503— the sandbox or its limiter is temporarily unavailable. The limiter fails closed rather than leaving an unauthenticated write path uncapped. Retry afterRetry-After.
Body
Optional context for a sandbox key mint.
An empty body (or none at all) is valid — nothing here gates the mint.
(optional) Your operator's email address — we'll send them a link to claim this sandbox and its order history when they want a live account. Never used for anything else, and never required.
254(optional) What this key is for, e.g. 'acme-shopping-agent dev testing'. Becomes the key's label.
100Response
Sandbox key minted. The body is self-guiding: send api_key as a Bearer token, POST example_order to /orders as-is, and follow next.
A freshly minted sandbox key, with the next steps inline.
The response doubles as documentation: agents read the bytes they get back, not a docs site, so every field they need to proceed is here.
Sandbox API key (zn_test_...). Send as Authorization: Bearer <api_key> — test keys route to the sandbox automatically, no extra headers needed.
A complete valid body for POST /orders — try it as-is.
Give this to the human you work for. Signing in there folds this sandbox — its order history and this key, which keeps working — into their Zinc account. Poll GET /sandbox/status to find out when they have.
What to do now, in order.

