Sandbox keys are prefixed cai_test_ and are bound to a demo clinic. The API behaves identically to production, with one deliberate difference. Your sandbox base URL is handed over with the credentials.
Patient messaging is hard-blocked on sandbox keys. In production, an appointment you send us confirms and reminds the patient exactly like any other booking — so test with a sandbox key, or you will message real people with test data.
Getting access
Sandbox credentials are issued by request rather than self-served, so we know who is integrating and can help when something looks wrong. Ask your ConnectAI contact.
What to test before going live
- A signed request that succeeds, and one with a deliberately wrong signature that fails.
- The same
X-ConnectAI-Event-Idsent twice — you should get one record and the same response both times. - Your webhook endpoint returning 200 quickly, and your handling of a redelivered event.
- A clock deliberately skewed past five minutes, so you recognise that failure when you see it.