SANDBOX

Developer Sandbox

A fully isolated test environment with pre-loaded mock data, webhook simulation, and test API keys.

Try the API

Select an endpoint, edit the request, and hit send. Responses come from pre-loaded sandbox data — no API key required.

Retrieve a paginated list of patients in the sandbox.

RequestGET
URL
https://sandbox.api.rymeda.com/v1/care/clients
Headers
Authorization: Bearer rym_test_your_api_key_here
No request body
Response
No response yet
Click "Send Request" to try the API

Test Environment

The sandbox mirrors production with isolated data and relaxed rate limits.

Sandbox Base URLsandbox.api.rymeda.com/v1
FeatureSandboxProduction
Base URLsandbox.api.rymeda.com/v1api.rymeda.com/v1
AuthenticationTest tokens (sk_test_*)Live tokens (sk_live_*)
DataPre-loaded mock dataReal data
Rate Limits1,000 req/minTier-based
WebhooksSimulated deliveryReal delivery
Data ResetAuto-reset every 24hPersistent

Pre-loaded Mock Data

The sandbox comes pre-loaded with realistic test data across all resource types.

25

Patients

Various demographics and insurance types

10

Providers

Multiple specialties and credentials

50

Sessions

Scheduled, completed, and cancelled

30

Claims

All lifecycle statuses

15

Compliance Artifacts

Policies, certificates, attestations

5

Organizations

Multi-tenant test data

bash
1# List sandbox patients
2curl https://sandbox.api.rymeda.com/v1/care/clients \
3  -H "Authorization: Bearer rym_test_your_api_key_here"
4
5# Response includes pre-loaded test data
6# {
7#   "data": [
8#     {
9#       "id": "client_test_001",
10#       "firstName": "Test",
11#       "lastName": "Patient",
12#       "status": "active"
13#     },
14#     ...
15#   ],
16#   "pagination": { "hasMore": true, "limit": 25 }
17# }

Webhook Simulator

Test your webhook handlers without waiting for real events. Trigger any event type on demand.

Configure a test webhook endpoint

Register your webhook URL in the sandbox to start receiving simulated events. You can subscribe to specific event types and trigger them on demand to validate your integration logic.

bash
1# Register a test webhook endpoint
2curl -X POST https://sandbox.api.rymeda.com/v1/platform/webhooks \
3  -H "Authorization: Bearer rym_test_your_api_key_here" \
4  -H "Content-Type: application/json" \
5  -d '{
6    "url": "https://your-app.com/webhooks/test",
7    "events": ["session.completed", "claim.submitted"]
8  }'
9
10# Trigger a test event
11curl -X POST https://sandbox.api.rymeda.com/v1/platform/webhooks/test \
12  -H "Authorization: Bearer rym_test_your_api_key_here" \
13  -H "Content-Type: application/json" \
14  -d '{
15    "event": "claim.submitted",
16    "data": {
17      "claimId": "claim_test_001",
18      "amount": 245.00
19    }
20  }'

Signature verification

Every webhook delivery includes an HMAC-SHA256 signature. Verify the signature to ensure the payload originated from Rymeda and has not been tampered with.

javascript
1import crypto from 'crypto'
2
3// Verify the webhook signature
4const signature = req.headers['x-rymeda-signature']
5const timestamp = req.headers['x-rymeda-timestamp']
6
7const payload = timestamp + '.' + JSON.stringify(req.body)
8const expected = crypto
9  .createHmac('sha256', process.env.RYMEDA_WEBHOOK_SECRET)
10  .update(payload)
11  .digest('hex')
12
13const isValid = crypto.timingSafeEqual(
14  Buffer.from(signature),
15  Buffer.from(expected),
16)

API Keys

Manage test and production API keys with granular scoping.

Test Keys sk_test_*

  • •Used for sandbox only
  • •No real data access
  • •Auto-provisioned
  • •Never expire by default

Live Keys sk_live_*

  • •Production access
  • •Requires admin approval
  • •Supports expiration dates
  • •Must be scoped
ScopeDescriptionAvailable in
care:readRead care sessions, clients, notesTest, Live
care:writeCreate/update sessions, notesTest, Live
revenue:readRead claims, ERA/EOBsTest, Live
revenue:writeSubmit claims, manage billingTest, Live
compliance:readRead audit trails, artifactsTest, Live
compliance:writeUpload artifacts, configure rulesTest, Live
intelligence:readQuery ORIS, view predictionsTest, Live
intelligence:writeTrigger workflows, run analysisTest, Live
platform:adminManage webhooks, API keys, org settingsLive only
bash
1# Create a scoped test API key
2curl -X POST https://sandbox.api.rymeda.com/v1/platform/api-keys \
3  -H "Authorization: Bearer rym_test_your_api_key_here" \
4  -H "Content-Type: application/json" \
5  -d '{
6    "name": "Development Integration",
7    "scopes": ["care:read", "care:write", "revenue:read"],
8    "expiresAt": "2026-01-15T00:00:00Z"
9  }'
10
11# Response:
12# {
13#   "id": "key_test_100",
14#   "key": "rym_test_abc123...",
15#   "scopes": ["care:read", "care:write", "revenue:read"],
16#   "expiresAt": "2026-01-15T00:00:00Z"
17# }

Ready to build?

Start with the sandbox, then go live when you're ready.

API ReferenceTalk to Engineering