Concepts
| Sandbox | Live | |
|---|---|---|
| API | https://sandbox.api.platform.finbaze.com/graphql | https://api.platform.finbaze.com/graphql |
| Embed | https://sandbox.embed.finbaze.com | https://embed.finbaze.com |
| Keys | fb_sk_test_…, fb_pk_test_… | fb_sk_live_…, fb_pk_live_… |
| Data | fake, may be reset | real |
The SDK picks the right embed host from the publishable key. A test key can never reach live data and the other way round.
Filings, bank connections and email in the sandbox use test endpoints or are captured; nothing reaches a real tax authority, bank or customer.
Allowed origins are kept per environment: add http://localhost:3000 to the sandbox list and your production origin to the live list.
Limits#
The sandbox is for building and testing, not for load.
| Sandbox | |
|---|---|
| Rate limits | the same as live, see rate limits |
| Key revocation | effective within 10 seconds, as in live |
| Test clocks | at most 10 per platform; a clock moves at most 400 days ahead |
| Reset | optional nightly reset at 02:00 Europe/Amsterdam (see sandbox reset) |
| Bulk imports | at most 100 000 lines per job |
| Embed tokens | 1 hour; client secrets 15 minutes; a refresh chain ends after 12 hours |
| Request log | kept 30 days |
| captured, never delivered | |
| Filings | Digipoort conformance (or a simulated delivery for companies on a test clock); HMRC sandbox |
| AI | the smallest model only |
| Billing | none: sandbox companies are not counted or invoiced |
| Availability | one database instance with daily backups and no SLA; expect short outages for maintenance |
Going live#
Promote your platform from the portal. After that, create live keys and add your production origins. The code stays the same; only the keys and hostnames change.