List registered QA Scenario Lab scenarios
DEV/STAGING-only Back Office endpoint. The backend feature flag must be enabled. Requests require the dedicated service key and a one-use, short-lived signed administrator envelope carrying the qa_scenario_lab permission claim. Card metadata and preview metadata come from the same registered versioned scenario definition.
Authorizations
Server-to-Server API Key for internal/lambda/cron calls
HMAC-SHA256 signature for a one-use, short-lived Back Office administrator envelope. Used together with the dedicated X-API-KEY credential and the signed administrator, timestamp, nonce, and permission headers.
Headers
Dedicated QA Scenario Lab service credential.
Positive Back Office administrator ID included in the signature.
x >= 142
Ten-digit Unix timestamp. The default maximum age is 300 seconds, with at most 30 seconds of future clock skew.
1791194024
One-use UUID. Reuse during the signature lifetime returns HTTP 409.
"b758348d-ea14-424f-82eb-9ba1d834fd7f"
Signed permission claim. The only accepted value is qa_scenario_lab.
qa_scenario_lab "qa_scenario_lab"
Lowercase hexadecimal HMAC-SHA256 of the canonical request envelope.
64^[a-f0-9]{64}$