Sandbox is for integration testing — not a demo of live data.
Sandbox environments hold synthetic, disposable data and may be reset or
redeployed at any time. Never send real personal data or production secrets
to a *.staging.glorylabs.nl host.
Sandbox base URLs
Sandbox hosts follow a single convention:
https://<product>.staging.glorylabs.nl. Point your client's
base URL at the host below and keep the same request paths as the published
API reference.
| Product | Sandbox base URL | Reference | Availability |
|---|---|---|---|
| AuditPic | https://auditpic.staging.glorylabs.nl |
View docs | Reachable |
| InterimPlaza | https://interimplaza.staging.glorylabs.nl |
View docs | Provisioning |
| europeLogin | https://europe-login.staging.glorylabs.nl |
View docs | Provisioning |
| Claimio | https://clamio.staging.glorylabs.nl |
View docs | Provisioning |
| ValideerLeeftijd | https://valideerleeftijd.staging.glorylabs.nl |
View docs | Provisioning |
Reachable — the sandbox host is up and accepts requests
today.
Provisioning — the host name is reserved and follows the
convention above, but its public sandbox endpoint is still being wired up.
Until it flips to Reachable, treat the URL as forward-looking.
Sandbox keys vs. production keys
Sandbox and production are fully separated — credentials are never shared between them.
| Aspect | Sandbox key | Production key |
|---|---|---|
| Works against | *.staging.glorylabs.nl only |
Live *.glorylabs.nl hosts only |
| Data it touches | Synthetic / disposable | Real customer data |
| Issued via | Self-service (key issuance UI — coming soon) | Per-product onboarding |
| Blast radius | None — safe to rotate or leak-test freely | High — guard like any production secret |
A sandbox key never authenticates against production, and vice versa. Self-service issuance of sandbox keys from the portal is tracked separately and not live yet — until then, request a sandbox key through the product's existing onboarding contact.
Sandbox rate limits & quotas
Sandbox enforces a deliberately generous-but-bounded policy so you can run integration suites without exhausting shared capacity. This is a published policy, not a measured number.
| Limit | Sandbox default | Notes |
|---|---|---|
| Requests / minute | 60 sustained | Per sandbox key |
| Burst | 120 requests | Short spikes absorbed, then throttled to the sustained rate |
| Daily cap | 10,000 requests | Resets at 00:00 UTC |
| Payload size | 5 MB / request | Image-heavy products (e.g. AuditPic) may allow more — see their docs |
Over-limit requests receive 429 Too Many Requests with a
Retry-After header. Individual products may tighten these
defaults; any deviation is documented on that product's API reference.
Need a higher sandbox quota for a load test? Ask via the product's
onboarding contact.