# Apier.no Sandbox API

**Canonical:** https://apis.io/apis/apier-no/apier-no-sandbox-api/  
**Provider:** Apier.no — https://apis.io/providers/apier-no/  
**Base URL:** https://www.apier.no  
**Documentation:** https://www.apier.no/docs/api

Apier.no Sandbox API is one of 16 APIs that [Apier.no](https://apis.io/providers/apier-no/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Sandbox. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

Zero-auth, deterministic, CORS-open mirrors of every Category B company endpoint. Returns synthetic Norwegian company fixtures so agents can test failure-flows without provisioning an Apier API key, without hitting Altinn test infra, and without polluting production audit / provenance chains. `security: []` on every operation overrides any global Bearer requirement. Reserved test orgs (999000001-005), reserved error orgs (999000901-904), and `?simulate_error=<code>` are documented on `/api/v1/capabilities`. Determinism contract: same input → byte-equivalent response, EXCLUDING `_meta.response_timestamp`.

## Operations (60 of 62)

| Method | Path | Summary |
|---|---|---|
| GET | `/api/v1/sandbox/company/{org}/verify` | Sandbox mirror of /api/v1/company/{org}/verify (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/verify` | CORS preflight for the sandbox verify endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/verify` | Public sandbox mirror of /api/v1/company/{org}/verify (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/verify` | CORS preflight for the public-sandbox verify endpoint |
| GET | `/api/v1/sandbox/company/{org}/authority` | Sandbox mirror of /api/v1/company/{org}/authority (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/authority` | CORS preflight for the sandbox authority endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/authority` | Public sandbox mirror of /api/v1/company/{org}/authority (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/authority` | CORS preflight for the public-sandbox authority endpoint |
| GET | `/api/v1/sandbox/company/{org}/accounts` | Sandbox mirror of /api/v1/company/{org}/accounts (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/accounts` | CORS preflight for the sandbox accounts endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/accounts` | Public sandbox mirror of /api/v1/company/{org}/accounts (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/accounts` | CORS preflight for the public-sandbox accounts endpoint |
| GET | `/api/v1/sandbox/sessions/{suffix}/log` | Per-suffix live request log — read back your own last 50 sandbox… |
| POST | `/api/v1/sandbox/subscriptions/test` | Webhook simulator — deliver one signed mock event to your registered webhook_url |
| POST | `/api/v1/sandbox/rehearsal/execute` | Withdrawn (2026-10-21): guided MVA write-loop rehearsal (mock-gated, real HITL… |
| GET | `/api/v1/sandbox/company/{org}/context` | Sandbox mirror of /api/v1/company/{org}/context (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/context` | CORS preflight for the sandbox context endpoint |
| GET | `/api/v1/sandbox/company/{org}/obligations` | Sandbox mirror of /api/v1/company/{org}/obligations (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/obligations` | CORS preflight for the sandbox obligations endpoint |
| GET | `/api/v1/sandbox/company/{org}/deadlines` | Sandbox mirror of /api/v1/company/{org}/deadlines (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/deadlines` | CORS preflight for the sandbox deadlines endpoint |
| GET | `/api/v1/sandbox/company/{org}/summary` | Sandbox mirror of /api/v1/company/{org}/summary (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/summary` | CORS preflight for the sandbox summary endpoint |
| GET | `/api/v1/sandbox/company/{org}/audit` | Sandbox mirror of /api/v1/company/{org}/audit (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/company/{org}/audit` | CORS preflight for the sandbox audit endpoint |
| GET | `/api/v1/sandbox/company/{org}/filing-history` | Withdrawn (2026-10-21): sandbox mirror of /api/v1/company/{org}/filing-history… |
| OPTIONS | `/api/v1/sandbox/company/{org}/filing-history` | CORS preflight for the sandbox filing-history endpoint |
| POST | `/api/v1/sandbox/auth/approval-token` | Sandbox mirror of /api/v1/auth/approval-token (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/auth/approval-token` | CORS preflight for the sandbox approval-token endpoint |
| POST | `/api/v1/sandbox/actions/plan` | Sandbox plan describing the prerequisite chain (API key or sandbox bearer) |
| OPTIONS | `/api/v1/sandbox/actions/plan` | CORS preflight for the sandbox plan endpoint |
| GET | `/api/v1/sandbox/fixtures` | Canonical sandbox test-data table (zero-auth) |
| POST | `/api/v1/sandbox/actions/execute` | Sandbox execute, fixture-only simulation (API key or sandbox bearer, dry-run +… |
| OPTIONS | `/api/v1/sandbox/actions/execute` | CORS preflight for the sandbox execute endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/context` | Public sandbox mirror of /api/v1/company/{org}/context (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/context` | CORS preflight for the public-sandbox context endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/obligations` | Public sandbox mirror of /api/v1/company/{org}/obligations (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/obligations` | CORS preflight for the public-sandbox obligations endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/deadlines` | Public sandbox mirror of /api/v1/company/{org}/deadlines (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/deadlines` | CORS preflight for the public-sandbox deadlines endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/summary` | Public sandbox mirror of /api/v1/company/{org}/summary (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/summary` | CORS preflight for the public-sandbox summary endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/audit` | Public sandbox mirror of /api/v1/company/{org}/audit (zero-auth, IP… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/audit` | CORS preflight for the public-sandbox audit endpoint |
| GET | `/api/v1/sandbox/public/company/{org}/filing-history` | Withdrawn (2026-10-21): public sandbox mirror of… |
| OPTIONS | `/api/v1/sandbox/public/company/{org}/filing-history` | CORS preflight for the public-sandbox filing-history endpoint |
| POST | `/api/v1/sandbox/public/auth/approval-token` | Public sandbox approval-token mint (zero-auth, IP rate-limited) |
| OPTIONS | `/api/v1/sandbox/public/auth/approval-token` | CORS preflight for the public-sandbox approval-token endpoint |
| POST | `/api/v1/sandbox/public/actions/plan` | Public sandbox plan (zero-auth, IP rate-limited) |
| OPTIONS | `/api/v1/sandbox/public/actions/plan` | CORS preflight for the public-sandbox plan endpoint |
| POST | `/api/v1/sandbox/public/actions/execute` | Public sandbox execute, fixture-only simulation (zero-auth, IP rate-limited… |
| OPTIONS | `/api/v1/sandbox/public/actions/execute` | CORS preflight for the public-sandbox execute endpoint |
| POST | `/api/v1/sandbox/public/explain` | Public sandbox explainer (zero-auth, IP rate-limited) |
| OPTIONS | `/api/v1/sandbox/public/explain` | CORS preflight for the public-sandbox explain endpoint |
| POST | `/api/v1/sandbox/explain` | Sandbox explainer with error simulation (zero-auth) |
| OPTIONS | `/api/v1/sandbox/explain` | CORS preflight for the sandbox explain endpoint |
| POST | `/api/v1/sandbox/altinn/list-acting-capacity` | Withdrawn (2026-10-21): sandbox mirror: acting capacity for a person on behalf… |
| OPTIONS | `/api/v1/sandbox/altinn/list-acting-capacity` | CORS preflight for the sandbox acting-capacity mirror |
| POST | `/api/v1/sandbox/notary/records` | Sandbox: record an action hash (fixtures, never debited) |
| GET | `/api/v1/sandbox/watchlist/events` | Sandbox: synthetic change-alert events, by polling |

…and 2 more operations. They are listed in full on the page.

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/apier-no/openapi/apier-no-sandbox-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/apier-no/json-schema/apier-no-company-context-schema.json
- **JSONSchema** — https://artifacts.apis.io/apier-no/json-schema/apier-no-trust-metadata-schema.json
- **JSONSchema** — https://artifacts.apis.io/apier-no/json-schema/apier-no-company-verification-schema.json
- **JSONSchema** — https://artifacts.apis.io/apier-no/json-schema/apier-no-sandbox-meta-schema.json
- **JSONSchema** — https://artifacts.apis.io/apier-no/json-schema/apier-no-error-code-schema.json
- **JSONSchema** — https://artifacts.apis.io/apier-no/json-schema/apier-no-signed-receipt-schema.json

## Other Apier.no APIs (12)

- [Apier.no Account API](https://apis.io/apis/apier-no/apier-no-account-api/)
- [Apier.no Actions API](https://apis.io/apis/apier-no/apier-no-actions-api/)
- [Apier.no Admin API](https://apis.io/apis/apier-no/apier-no-admin-api/)
- [Apier.no Altinn API](https://apis.io/apis/apier-no/apier-no-altinn-api/)
- [Apier.no Auth Gateway API](https://apis.io/apis/apier-no/apier-no-auth-gateway-api/)
- [Apier.no Brreg API](https://apis.io/apis/apier-no/apier-no-brreg-api/)
- [Apier.no Changes API](https://apis.io/apis/apier-no/apier-no-changes-api/)
- [Apier.no Company API](https://apis.io/apis/apier-no/apier-no-company-api/)
- [Apier.no Discovery API](https://apis.io/apis/apier-no/apier-no-discovery-api/)
- [Apier.no Fullmakt API](https://apis.io/apis/apier-no/apier-no-fullmakt-api/)
- [Apier.no Infrastructure API](https://apis.io/apis/apier-no/apier-no-infrastructure-api/)
- [Apier.no Knowledge API](https://apis.io/apis/apier-no/apier-no-knowledge-api/)

## Tags

Sandbox

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/apier-no/apier-no-sandbox-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/apier-no/.