Sandbox
The sandbox is a full marketplace with one seller, Acme Broadcasting, that mirrors production behavior: versioned catalogs, tri-state avails, price locks, the seller-review gate, replay, and every error you can trigger in production, triggerable on purpose.
Base URLs
- REST:
https://api.sandbox.vamos.simulmedia.com/v1 - MCP, over Streamable HTTP:
https://mcp.sandbox.vamos.simulmedia.com/mcp
Credentials
Two bearer secrets, one per side, because neither side can act for the other. Each secret is the whole credential: there is no client id to pair it with and no token endpoint to exchange it at, because the sandbox stands in for the production OAuth flow rather than running it. What does not change is how the credential travels, which is the same Authorization: Bearer header production uses. Ask us for both when you request access; the buyer secret drives catalog and order calls, and the seller secret makes the approval decision.
Send an X-Sandbox-Session value with every call, the same one on both sides and on both surfaces. It keeps your run in its own namespace, so nobody else's traffic moves your orders. Generate it once (a UUID) and reuse it; omit it and the sandbox mints a fresh one per call, and your next request lands somewhere else.
Triggering outcomes
The interesting paths are reachable from the seed rather than from a debug flag, which is the point: you trigger them the way production would. 2026-W43 is dark, so ordering into it returns INVENTORY_UNAVAILABLE. A rate_version behind the current one returns STALE_RATE_CARD with per-unit rate_drift. Partials, rejections, and counters are all the seller's decision, made with the seller secret against POST /v1/me/orders/{id}/decide. One runnable request per outcome is in the buyer quickstart, with the reasoning in the sandbox tutorial.
seller_review until a seller decides it. Nothing advances it on a timer, and no amount of buyer-side polling moves it: that gate is the part of linear the platform models rather than smooths over. The sandbox stops at placed, because nothing there runs a flight to close out.Nothing in the sandbox touches real inventory, money, or traffic systems.