cURL
curl --request GET --fail-with-body --max-time 30 \
"${AMLOK_API_BASE_URL}/v1/sandbox/scenarios" \
--header "Authorization: Bearer ${AMLOK_API_KEY}" \
--header "Accept: application/json"import os
import requests
base_url = os.environ["AMLOK_API_BASE_URL"].rstrip("/")
headers = {'Accept': 'application/json'}
headers["Authorization"] = "Bearer " + os.environ["AMLOK_API_KEY"]
response = requests.request(
"GET", base_url + "/v1/sandbox/scenarios",
headers=headers, timeout=30, allow_redirects=False,
)
response.raise_for_status()
print(response.json())
const baseUrl = process.env.AMLOK_API_BASE_URL;
const apiKey = process.env.AMLOK_API_KEY;
if (!baseUrl || !apiKey) throw new Error("Configure AMLOK_API_BASE_URL and AMLOK_API_KEY");
const headers = {
"Accept": "application/json"
};
headers.Authorization = `Bearer ${apiKey}`;
const response = await fetch(baseUrl.replace(/\/$/, "") + "/v1/sandbox/scenarios", {
method: "GET", headers,
redirect: "error", signal: AbortSignal.timeout(30000),
});
if (!response.ok) throw new Error(`AMLOK returned HTTP ${response.status}`);
console.log(await response.json());{
"data": [
{
"id": "insights_success",
"object": "sandbox_scenario",
"name": "Completed full underwriting",
"subject_id": "biz_sandbox_insights_success",
"application_id": "app_sandbox_insights_success",
"input_manifest_id": "manifest_sandbox_insights_success",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_insights_success",
"person_id": "per_sandbox_insights_success",
"association_id": "assoc_sandbox_insights_success",
"document_id": "doc_sandbox_insights_success",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 202,
"expected_state": "completed",
"instructions": "Run the Insights journey. Includes two bank accounts, five business systems and at least twelve months of synthetic banking history. Expect one Standard Insights charge."
},
{
"id": "signal_success",
"object": "sandbox_scenario",
"name": "Monitoring and reassessment",
"subject_id": "biz_sandbox_signal_success",
"application_id": "app_sandbox_signal_success",
"input_manifest_id": "manifest_sandbox_signal_success",
"baseline_snapshot_id": "rsk_sandbox_signal_success",
"connection_id": "cnn_sandbox_signal_success",
"person_id": "per_sandbox_signal_success",
"association_id": "assoc_sandbox_signal_success",
"document_id": "doc_sandbox_signal_success",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "active",
"instructions": "Run the Signal journey. A pre-approved existing-portfolio baseline and scheduled synthetic source update produce reassessment and an alert. Expect one Standard Signal charge and no Insights charge."
},
{
"id": "insufficient_credits",
"object": "sandbox_scenario",
"name": "Insufficient available credits",
"subject_id": "biz_sandbox_insufficient_credits",
"application_id": "app_sandbox_insufficient_credits",
"input_manifest_id": "manifest_sandbox_insufficient_credits",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_insufficient_credits",
"person_id": "per_sandbox_insufficient_credits",
"association_id": "assoc_sandbox_insufficient_credits",
"document_id": "doc_sandbox_insufficient_credits",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 402,
"expected_state": "insufficient_credits",
"instructions": "Submit the Insights request; expect no accepted run or debit. Use portal sandbox funding to restore test credits, then retry the identical key."
},
{
"id": "authorization_expired",
"object": "sandbox_scenario",
"name": "Expired connection authorization",
"subject_id": "biz_sandbox_authorization_expired",
"application_id": "app_sandbox_authorization_expired",
"input_manifest_id": "manifest_sandbox_authorization_expired",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_authorization_expired",
"person_id": "per_sandbox_authorization_expired",
"association_id": "assoc_sandbox_authorization_expired",
"document_id": "doc_sandbox_authorization_expired",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "reauth_required",
"instructions": "Renew the supplied connection authorization; complete the sandbox hosted flow. Retrieve the same connection ID as active and then sync."
},
{
"id": "rejected_evidence",
"object": "sandbox_scenario",
"name": "Rejected evidence",
"subject_id": "biz_sandbox_rejected_evidence",
"application_id": "app_sandbox_rejected_evidence",
"input_manifest_id": "manifest_sandbox_rejected_evidence",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_rejected_evidence",
"person_id": "per_sandbox_rejected_evidence",
"association_id": "assoc_sandbox_rejected_evidence",
"document_id": "doc_sandbox_rejected_evidence",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 202,
"expected_state": "waiting_for_data",
"instructions": "Start underwriting; the sandbox evidence validator rejects the seeded document and returns a rejected requirement with a reason. Upload its replacement from the portal-provided fixture pack using requirement_id; the same run resumes."
},
{
"id": "workload_limit",
"object": "sandbox_scenario",
"name": "Known workload limit exceeded",
"subject_id": "biz_sandbox_workload_limit",
"application_id": "app_sandbox_workload_limit",
"input_manifest_id": "manifest_sandbox_workload_limit",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_workload_limit",
"person_id": "per_sandbox_workload_limit",
"association_id": "assoc_sandbox_workload_limit",
"document_id": "doc_sandbox_workload_limit",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 422,
"expected_state": "workload_limit_exceeded",
"instructions": "Submit the Insights request with over-limit evidence; expect no debit and no automatic tier change."
},
{
"id": "retryable_failure",
"object": "sandbox_scenario",
"name": "Retryable processing failure",
"subject_id": "biz_sandbox_retryable_failure",
"application_id": "app_sandbox_retryable_failure",
"input_manifest_id": "manifest_sandbox_retryable_failure",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_retryable_failure",
"person_id": "per_sandbox_retryable_failure",
"association_id": "assoc_sandbox_retryable_failure",
"document_id": "doc_sandbox_retryable_failure",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 202,
"expected_state": "failed",
"instructions": "Start the run and poll until failure.retryable is true. Retry that same run; its second attempt completes with one total Insights charge."
},
{
"id": "owner_kyc",
"object": "sandbox_scenario",
"name": "Related owner verification",
"subject_id": "biz_sandbox_owner_kyc",
"application_id": "app_sandbox_owner_kyc",
"input_manifest_id": "manifest_sandbox_owner_kyc",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_owner_kyc",
"person_id": "per_sandbox_owner_kyc",
"association_id": "assoc_sandbox_owner_kyc",
"document_id": "doc_sandbox_owner_kyc",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "approved",
"instructions": "Use an unfinished waiting-for-data business run from the fixture pack and its active association to request person KYC. The included check has no separate charge."
},
{
"id": "duplicate_delivery",
"object": "sandbox_scenario",
"name": "Duplicate webhook delivery",
"subject_id": "biz_sandbox_duplicate_delivery",
"application_id": "app_sandbox_duplicate_delivery",
"input_manifest_id": "manifest_sandbox_duplicate_delivery",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_duplicate_delivery",
"person_id": "per_sandbox_duplicate_delivery",
"association_id": "assoc_sandbox_duplicate_delivery",
"document_id": "doc_sandbox_duplicate_delivery",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "delivered",
"instructions": "Register a sandbox receiver; its seeded event is delivered twice with one event ID and fresh signatures. Reconcile attempts and replay using that ID; your consumer must apply the event once."
}
],
"page": {
"has_more": false,
"next_cursor": null,
"limit": 100
},
"meta": {
"request_id": "req_example",
"schema_version": "1.4.2",
"generated_at": "2026-10-23T14:00:00Z",
"data_status": "complete"
}
}
Platform
List sandbox scenarios
Return only synthetic fixtures provisioned in this sandbox workspace. Production returns 404; there are no production fault-injection or time-control commands. The account manager provides sandbox access and the fixture pack through the client portal. A portal administrator selects/reset scenarios before a test run; resetting discards only sandbox fixtures and test credits. GET never resets or mutates a scenario. Returned IDs and approved configuration are authoritative; do not use saved example IDs. Sandbox funding and simulated time controls stay in the portal, cannot move money, and cannot change production. Billing assertions use the real product rules with test credits.
GET
/
v1
/
sandbox
/
scenarios
cURL
curl --request GET --fail-with-body --max-time 30 \
"${AMLOK_API_BASE_URL}/v1/sandbox/scenarios" \
--header "Authorization: Bearer ${AMLOK_API_KEY}" \
--header "Accept: application/json"import os
import requests
base_url = os.environ["AMLOK_API_BASE_URL"].rstrip("/")
headers = {'Accept': 'application/json'}
headers["Authorization"] = "Bearer " + os.environ["AMLOK_API_KEY"]
response = requests.request(
"GET", base_url + "/v1/sandbox/scenarios",
headers=headers, timeout=30, allow_redirects=False,
)
response.raise_for_status()
print(response.json())
const baseUrl = process.env.AMLOK_API_BASE_URL;
const apiKey = process.env.AMLOK_API_KEY;
if (!baseUrl || !apiKey) throw new Error("Configure AMLOK_API_BASE_URL and AMLOK_API_KEY");
const headers = {
"Accept": "application/json"
};
headers.Authorization = `Bearer ${apiKey}`;
const response = await fetch(baseUrl.replace(/\/$/, "") + "/v1/sandbox/scenarios", {
method: "GET", headers,
redirect: "error", signal: AbortSignal.timeout(30000),
});
if (!response.ok) throw new Error(`AMLOK returned HTTP ${response.status}`);
console.log(await response.json());{
"data": [
{
"id": "insights_success",
"object": "sandbox_scenario",
"name": "Completed full underwriting",
"subject_id": "biz_sandbox_insights_success",
"application_id": "app_sandbox_insights_success",
"input_manifest_id": "manifest_sandbox_insights_success",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_insights_success",
"person_id": "per_sandbox_insights_success",
"association_id": "assoc_sandbox_insights_success",
"document_id": "doc_sandbox_insights_success",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 202,
"expected_state": "completed",
"instructions": "Run the Insights journey. Includes two bank accounts, five business systems and at least twelve months of synthetic banking history. Expect one Standard Insights charge."
},
{
"id": "signal_success",
"object": "sandbox_scenario",
"name": "Monitoring and reassessment",
"subject_id": "biz_sandbox_signal_success",
"application_id": "app_sandbox_signal_success",
"input_manifest_id": "manifest_sandbox_signal_success",
"baseline_snapshot_id": "rsk_sandbox_signal_success",
"connection_id": "cnn_sandbox_signal_success",
"person_id": "per_sandbox_signal_success",
"association_id": "assoc_sandbox_signal_success",
"document_id": "doc_sandbox_signal_success",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "active",
"instructions": "Run the Signal journey. A pre-approved existing-portfolio baseline and scheduled synthetic source update produce reassessment and an alert. Expect one Standard Signal charge and no Insights charge."
},
{
"id": "insufficient_credits",
"object": "sandbox_scenario",
"name": "Insufficient available credits",
"subject_id": "biz_sandbox_insufficient_credits",
"application_id": "app_sandbox_insufficient_credits",
"input_manifest_id": "manifest_sandbox_insufficient_credits",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_insufficient_credits",
"person_id": "per_sandbox_insufficient_credits",
"association_id": "assoc_sandbox_insufficient_credits",
"document_id": "doc_sandbox_insufficient_credits",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 402,
"expected_state": "insufficient_credits",
"instructions": "Submit the Insights request; expect no accepted run or debit. Use portal sandbox funding to restore test credits, then retry the identical key."
},
{
"id": "authorization_expired",
"object": "sandbox_scenario",
"name": "Expired connection authorization",
"subject_id": "biz_sandbox_authorization_expired",
"application_id": "app_sandbox_authorization_expired",
"input_manifest_id": "manifest_sandbox_authorization_expired",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_authorization_expired",
"person_id": "per_sandbox_authorization_expired",
"association_id": "assoc_sandbox_authorization_expired",
"document_id": "doc_sandbox_authorization_expired",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "reauth_required",
"instructions": "Renew the supplied connection authorization; complete the sandbox hosted flow. Retrieve the same connection ID as active and then sync."
},
{
"id": "rejected_evidence",
"object": "sandbox_scenario",
"name": "Rejected evidence",
"subject_id": "biz_sandbox_rejected_evidence",
"application_id": "app_sandbox_rejected_evidence",
"input_manifest_id": "manifest_sandbox_rejected_evidence",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_rejected_evidence",
"person_id": "per_sandbox_rejected_evidence",
"association_id": "assoc_sandbox_rejected_evidence",
"document_id": "doc_sandbox_rejected_evidence",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 202,
"expected_state": "waiting_for_data",
"instructions": "Start underwriting; the sandbox evidence validator rejects the seeded document and returns a rejected requirement with a reason. Upload its replacement from the portal-provided fixture pack using requirement_id; the same run resumes."
},
{
"id": "workload_limit",
"object": "sandbox_scenario",
"name": "Known workload limit exceeded",
"subject_id": "biz_sandbox_workload_limit",
"application_id": "app_sandbox_workload_limit",
"input_manifest_id": "manifest_sandbox_workload_limit",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_workload_limit",
"person_id": "per_sandbox_workload_limit",
"association_id": "assoc_sandbox_workload_limit",
"document_id": "doc_sandbox_workload_limit",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 422,
"expected_state": "workload_limit_exceeded",
"instructions": "Submit the Insights request with over-limit evidence; expect no debit and no automatic tier change."
},
{
"id": "retryable_failure",
"object": "sandbox_scenario",
"name": "Retryable processing failure",
"subject_id": "biz_sandbox_retryable_failure",
"application_id": "app_sandbox_retryable_failure",
"input_manifest_id": "manifest_sandbox_retryable_failure",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_retryable_failure",
"person_id": "per_sandbox_retryable_failure",
"association_id": "assoc_sandbox_retryable_failure",
"document_id": "doc_sandbox_retryable_failure",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 202,
"expected_state": "failed",
"instructions": "Start the run and poll until failure.retryable is true. Retry that same run; its second attempt completes with one total Insights charge."
},
{
"id": "owner_kyc",
"object": "sandbox_scenario",
"name": "Related owner verification",
"subject_id": "biz_sandbox_owner_kyc",
"application_id": "app_sandbox_owner_kyc",
"input_manifest_id": "manifest_sandbox_owner_kyc",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_owner_kyc",
"person_id": "per_sandbox_owner_kyc",
"association_id": "assoc_sandbox_owner_kyc",
"document_id": "doc_sandbox_owner_kyc",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "approved",
"instructions": "Use an unfinished waiting-for-data business run from the fixture pack and its active association to request person KYC. The included check has no separate charge."
},
{
"id": "duplicate_delivery",
"object": "sandbox_scenario",
"name": "Duplicate webhook delivery",
"subject_id": "biz_sandbox_duplicate_delivery",
"application_id": "app_sandbox_duplicate_delivery",
"input_manifest_id": "manifest_sandbox_duplicate_delivery",
"baseline_snapshot_id": null,
"connection_id": "cnn_sandbox_duplicate_delivery",
"person_id": "per_sandbox_duplicate_delivery",
"association_id": "assoc_sandbox_duplicate_delivery",
"document_id": "doc_sandbox_duplicate_delivery",
"workflow_version": "underwrite-v1",
"ruleset_version": "monitoring-v1",
"cadence": "daily",
"expected_http_status": 201,
"expected_state": "delivered",
"instructions": "Register a sandbox receiver; its seeded event is delivered twice with one event ID and fresh signatures. Reconcile attempts and replay using that ID; your consumer must apply the event once."
}
],
"page": {
"has_more": false,
"next_cursor": null,
"limit": 100
},
"meta": {
"request_id": "req_example",
"schema_version": "1.4.2",
"generated_at": "2026-10-23T14:00:00Z",
"data_status": "complete"
}
}
Required scope:
platform:read
Return only synthetic fixtures provisioned in this sandbox workspace. Production returns 404; there are no production fault-injection or time-control commands. The account manager provides sandbox access and the fixture pack through the client portal. A portal administrator selects/reset scenarios before a test run; resetting discards only sandbox fixtures and test credits. GET never resets or mutates a scenario. Returned IDs and approved configuration are authoritative; do not use saved example IDs. Sandbox funding and simulated time controls stay in the portal, cannot move money, and cannot change production. Billing assertions use the real product rules with test credits.
Product scope · Processing lifecycle · ErrorsAuthorizations
Server-to-server API key bound to exactly one workspace, institution tenant and environment. No caller-supplied workspace override is accepted. Do not use in public browser code.
Query Parameters
Default 100; maximum 200.
Required range:
1 <= x <= 200Opaque cursor bound to filters and the first page snapshot. Do not change filters during pagination.
Minimum string length:
1