Generate an idempotent registered scenario
curl --request POST \
--url http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs \
--header 'Content-Type: application/json' \
--header 'X-API-KEY: <api-key>' \
--header 'X-QA-Lab-Admin-Id: <x-qa-lab-admin-id>' \
--header 'X-QA-Lab-Nonce: <x-qa-lab-nonce>' \
--header 'X-QA-Lab-Permission: <x-qa-lab-permission>' \
--header 'X-QA-Lab-Signature: <api-key>' \
--header 'X-QA-Lab-Timestamp: <x-qa-lab-timestamp>' \
--data '
{
"scenario_key": "application.applied",
"scenario_version": 1,
"idempotency_key": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"brand_id": 1001,
"athlete_ids": [
2001,
2002
],
"options": {},
"initiator_ip": "<string>",
"reference_time": "2026-11-01T12:00:00Z"
}
'import requests
url = "http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs"
payload = {
"scenario_key": "application.applied",
"scenario_version": 1,
"idempotency_key": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"brand_id": 1001,
"athlete_ids": [2001, 2002],
"options": {},
"initiator_ip": "<string>",
"reference_time": "2026-11-01T12:00:00Z"
}
headers = {
"X-API-KEY": "<api-key>",
"X-QA-Lab-Admin-Id": "<x-qa-lab-admin-id>",
"X-QA-Lab-Timestamp": "<x-qa-lab-timestamp>",
"X-QA-Lab-Nonce": "<x-qa-lab-nonce>",
"X-QA-Lab-Permission": "<x-qa-lab-permission>",
"X-QA-Lab-Signature": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {
'X-API-KEY': '<api-key>',
'X-QA-Lab-Admin-Id': '<x-qa-lab-admin-id>',
'X-QA-Lab-Timestamp': '<x-qa-lab-timestamp>',
'X-QA-Lab-Nonce': '<x-qa-lab-nonce>',
'X-QA-Lab-Permission': '<x-qa-lab-permission>',
'X-QA-Lab-Signature': '<api-key>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
scenario_key: 'application.applied',
scenario_version: 1,
idempotency_key: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
brand_id: 1001,
athlete_ids: [2001, 2002],
options: {},
initiator_ip: '<string>',
reference_time: '2026-11-01T12:00:00Z'
})
};
fetch('http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'scenario_key' => 'application.applied',
'scenario_version' => 1,
'idempotency_key' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'brand_id' => 1001,
'athlete_ids' => [
2001,
2002
],
'options' => [
],
'initiator_ip' => '<string>',
'reference_time' => '2026-11-01T12:00:00Z'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-API-KEY: <api-key>",
"X-QA-Lab-Admin-Id: <x-qa-lab-admin-id>",
"X-QA-Lab-Nonce: <x-qa-lab-nonce>",
"X-QA-Lab-Permission: <x-qa-lab-permission>",
"X-QA-Lab-Signature: <api-key>",
"X-QA-Lab-Timestamp: <x-qa-lab-timestamp>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs"
payload := strings.NewReader("{\n \"scenario_key\": \"application.applied\",\n \"scenario_version\": 1,\n \"idempotency_key\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"brand_id\": 1001,\n \"athlete_ids\": [\n 2001,\n 2002\n ],\n \"options\": {},\n \"initiator_ip\": \"<string>\",\n \"reference_time\": \"2026-11-01T12:00:00Z\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-API-KEY", "<api-key>")
req.Header.Add("X-QA-Lab-Admin-Id", "<x-qa-lab-admin-id>")
req.Header.Add("X-QA-Lab-Timestamp", "<x-qa-lab-timestamp>")
req.Header.Add("X-QA-Lab-Nonce", "<x-qa-lab-nonce>")
req.Header.Add("X-QA-Lab-Permission", "<x-qa-lab-permission>")
req.Header.Add("X-QA-Lab-Signature", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs")
.header("X-API-KEY", "<api-key>")
.header("X-QA-Lab-Admin-Id", "<x-qa-lab-admin-id>")
.header("X-QA-Lab-Timestamp", "<x-qa-lab-timestamp>")
.header("X-QA-Lab-Nonce", "<x-qa-lab-nonce>")
.header("X-QA-Lab-Permission", "<x-qa-lab-permission>")
.header("X-QA-Lab-Signature", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"scenario_key\": \"application.applied\",\n \"scenario_version\": 1,\n \"idempotency_key\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"brand_id\": 1001,\n \"athlete_ids\": [\n 2001,\n 2002\n ],\n \"options\": {},\n \"initiator_ip\": \"<string>\",\n \"reference_time\": \"2026-11-01T12:00:00Z\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Post.new(url)
request["X-API-KEY"] = '<api-key>'
request["X-QA-Lab-Admin-Id"] = '<x-qa-lab-admin-id>'
request["X-QA-Lab-Timestamp"] = '<x-qa-lab-timestamp>'
request["X-QA-Lab-Nonce"] = '<x-qa-lab-nonce>'
request["X-QA-Lab-Permission"] = '<x-qa-lab-permission>'
request["X-QA-Lab-Signature"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"scenario_key\": \"application.applied\",\n \"scenario_version\": 1,\n \"idempotency_key\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"brand_id\": 1001,\n \"athlete_ids\": [\n 2001,\n 2002\n ],\n \"options\": {},\n \"initiator_ip\": \"<string>\",\n \"reference_time\": \"2026-11-01T12:00:00Z\"\n}"
response = http.request(request)
puts response.read_body{
"data": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scenario_key": "application.applied",
"scenario_version": 1,
"status": "pending",
"brand_id": 2,
"athlete_ids": [
2
],
"athlete_results": {},
"symbolic_references": {},
"available_triggers": [
{
"key": "availability.confirm",
"version": 1,
"display_name": "Confirm availability",
"one_shot": true
}
],
"cleanup_available": true,
"entities": [
{
"entity_type": "<string>",
"entity_id": "<string>",
"ownership": "created",
"athlete_id": 123
}
],
"pre_execution_capture": {
"snapshot_ref": "<string>",
"sha256": "<string>",
"state": {}
},
"reference_time": "2023-11-07T05:31:56Z",
"expected_state": {},
"result": {},
"error_code": "<string>"
}
}{
"message": "Unauthenticated."
}{
"message": "The given data was invalid.",
"errors": {}
}Generate an idempotent registered scenario
Creates the bounded scenario state after revalidating actors and options. application.applied creates one active standard-visibility QA job, three shared future deliverables, and one independent applied mapping per selected athlete. It does not require the brand’s private-job feature, hire athletes, sign athlete agreements, assign hired-only deliverables, or create Deal Folders. Retrying the same administrator-owned idempotency key and request returns the existing run.
POST
/
internal
/
qa-scenario-lab
/
runs
Generate an idempotent registered scenario
curl --request POST \
--url http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs \
--header 'Content-Type: application/json' \
--header 'X-API-KEY: <api-key>' \
--header 'X-QA-Lab-Admin-Id: <x-qa-lab-admin-id>' \
--header 'X-QA-Lab-Nonce: <x-qa-lab-nonce>' \
--header 'X-QA-Lab-Permission: <x-qa-lab-permission>' \
--header 'X-QA-Lab-Signature: <api-key>' \
--header 'X-QA-Lab-Timestamp: <x-qa-lab-timestamp>' \
--data '
{
"scenario_key": "application.applied",
"scenario_version": 1,
"idempotency_key": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"brand_id": 1001,
"athlete_ids": [
2001,
2002
],
"options": {},
"initiator_ip": "<string>",
"reference_time": "2026-11-01T12:00:00Z"
}
'import requests
url = "http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs"
payload = {
"scenario_key": "application.applied",
"scenario_version": 1,
"idempotency_key": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"brand_id": 1001,
"athlete_ids": [2001, 2002],
"options": {},
"initiator_ip": "<string>",
"reference_time": "2026-11-01T12:00:00Z"
}
headers = {
"X-API-KEY": "<api-key>",
"X-QA-Lab-Admin-Id": "<x-qa-lab-admin-id>",
"X-QA-Lab-Timestamp": "<x-qa-lab-timestamp>",
"X-QA-Lab-Nonce": "<x-qa-lab-nonce>",
"X-QA-Lab-Permission": "<x-qa-lab-permission>",
"X-QA-Lab-Signature": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {
'X-API-KEY': '<api-key>',
'X-QA-Lab-Admin-Id': '<x-qa-lab-admin-id>',
'X-QA-Lab-Timestamp': '<x-qa-lab-timestamp>',
'X-QA-Lab-Nonce': '<x-qa-lab-nonce>',
'X-QA-Lab-Permission': '<x-qa-lab-permission>',
'X-QA-Lab-Signature': '<api-key>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
scenario_key: 'application.applied',
scenario_version: 1,
idempotency_key: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
brand_id: 1001,
athlete_ids: [2001, 2002],
options: {},
initiator_ip: '<string>',
reference_time: '2026-11-01T12:00:00Z'
})
};
fetch('http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'scenario_key' => 'application.applied',
'scenario_version' => 1,
'idempotency_key' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
'brand_id' => 1001,
'athlete_ids' => [
2001,
2002
],
'options' => [
],
'initiator_ip' => '<string>',
'reference_time' => '2026-11-01T12:00:00Z'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-API-KEY: <api-key>",
"X-QA-Lab-Admin-Id: <x-qa-lab-admin-id>",
"X-QA-Lab-Nonce: <x-qa-lab-nonce>",
"X-QA-Lab-Permission: <x-qa-lab-permission>",
"X-QA-Lab-Signature: <api-key>",
"X-QA-Lab-Timestamp: <x-qa-lab-timestamp>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs"
payload := strings.NewReader("{\n \"scenario_key\": \"application.applied\",\n \"scenario_version\": 1,\n \"idempotency_key\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"brand_id\": 1001,\n \"athlete_ids\": [\n 2001,\n 2002\n ],\n \"options\": {},\n \"initiator_ip\": \"<string>\",\n \"reference_time\": \"2026-11-01T12:00:00Z\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-API-KEY", "<api-key>")
req.Header.Add("X-QA-Lab-Admin-Id", "<x-qa-lab-admin-id>")
req.Header.Add("X-QA-Lab-Timestamp", "<x-qa-lab-timestamp>")
req.Header.Add("X-QA-Lab-Nonce", "<x-qa-lab-nonce>")
req.Header.Add("X-QA-Lab-Permission", "<x-qa-lab-permission>")
req.Header.Add("X-QA-Lab-Signature", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs")
.header("X-API-KEY", "<api-key>")
.header("X-QA-Lab-Admin-Id", "<x-qa-lab-admin-id>")
.header("X-QA-Lab-Timestamp", "<x-qa-lab-timestamp>")
.header("X-QA-Lab-Nonce", "<x-qa-lab-nonce>")
.header("X-QA-Lab-Permission", "<x-qa-lab-permission>")
.header("X-QA-Lab-Signature", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"scenario_key\": \"application.applied\",\n \"scenario_version\": 1,\n \"idempotency_key\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"brand_id\": 1001,\n \"athlete_ids\": [\n 2001,\n 2002\n ],\n \"options\": {},\n \"initiator_ip\": \"<string>\",\n \"reference_time\": \"2026-11-01T12:00:00Z\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("http://localhost/mogl/mogl-backend/api/internal/qa-scenario-lab/runs")
http = Net::HTTP.new(url.host, url.port)
request = Net::HTTP::Post.new(url)
request["X-API-KEY"] = '<api-key>'
request["X-QA-Lab-Admin-Id"] = '<x-qa-lab-admin-id>'
request["X-QA-Lab-Timestamp"] = '<x-qa-lab-timestamp>'
request["X-QA-Lab-Nonce"] = '<x-qa-lab-nonce>'
request["X-QA-Lab-Permission"] = '<x-qa-lab-permission>'
request["X-QA-Lab-Signature"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"scenario_key\": \"application.applied\",\n \"scenario_version\": 1,\n \"idempotency_key\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n \"brand_id\": 1001,\n \"athlete_ids\": [\n 2001,\n 2002\n ],\n \"options\": {},\n \"initiator_ip\": \"<string>\",\n \"reference_time\": \"2026-11-01T12:00:00Z\"\n}"
response = http.request(request)
puts response.read_body{
"data": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"scenario_key": "application.applied",
"scenario_version": 1,
"status": "pending",
"brand_id": 2,
"athlete_ids": [
2
],
"athlete_results": {},
"symbolic_references": {},
"available_triggers": [
{
"key": "availability.confirm",
"version": 1,
"display_name": "Confirm availability",
"one_shot": true
}
],
"cleanup_available": true,
"entities": [
{
"entity_type": "<string>",
"entity_id": "<string>",
"ownership": "created",
"athlete_id": 123
}
],
"pre_execution_capture": {
"snapshot_ref": "<string>",
"sha256": "<string>",
"state": {}
},
"reference_time": "2023-11-07T05:31:56Z",
"expected_state": {},
"result": {},
"error_code": "<string>"
}
}{
"message": "Unauthenticated."
}{
"message": "The given data was invalid.",
"errors": {}
}Authorizations
Server-to-Server API Key for internal/lambda/cron calls
HMAC-SHA256 signature for a one-use, short-lived Back Office administrator envelope. Used together with the dedicated X-API-KEY credential and the signed administrator, timestamp, nonce, and permission headers.
Headers
Dedicated QA Scenario Lab service credential.
Positive initiating Back Office administrator ID included in the signature.
Required range:
x >= 1Example:
42
Ten-digit Unix timestamp. Default maximum age is 300 seconds.
Example:
1791194024
One-use UUID included in the signature.
Signed permission claim.
Available options:
qa_scenario_lab Lowercase hexadecimal HMAC-SHA256 of the canonical request envelope.
Required string length:
64Pattern:
^[a-f0-9]{64}$Body
application/json
Example:
"application.applied"
Required range:
x >= 1Example:
1
Required range:
x >= 1Example:
1001
Required array length:
1 - 50 elementsRequired range:
x >= 1Example:
[2001, 2002]
Original Back Office administrator IP, supplied by the signed dashboard proxy for agreement audit fields.
Optional stable UTC-Z clock included in the idempotency fingerprint. Accepted only through this non-production endpoint.
Pattern:
Z$Example:
"2026-11-01T12:00:00Z"
Response
The created run, or the existing run for an idempotent retry.
Show child attributes
Show child attributes