Skip to main content
POST
Preview a registered scenario without side effects

Authorizations

X-API-KEY
string
header
required

Server-to-Server API Key for internal/lambda/cron calls

X-QA-Lab-Signature
string
header
required

HMAC-SHA256 signature for a one-use, short-lived Back Office administrator envelope. Used together with the dedicated X-API-KEY credential and the signed administrator, timestamp, nonce, and permission headers.

Headers

X-API-KEY
string
required

Dedicated QA Scenario Lab service credential.

X-QA-Lab-Admin-Id
integer
required

Positive initiating Back Office administrator ID included in the signature.

Required range: x >= 1
Example:

42

X-QA-Lab-Timestamp
integer<int64>
required

Ten-digit Unix timestamp. Default maximum age is 300 seconds.

Example:

1791194024

X-QA-Lab-Nonce
string<uuid>
required

One-use UUID included in the signature.

X-QA-Lab-Permission
enum<string>
required

Signed permission claim.

Available options:
qa_scenario_lab
X-QA-Lab-Signature
string
required

Lowercase hexadecimal HMAC-SHA256 of the canonical request envelope.

Required string length: 64
Pattern: ^[a-f0-9]{64}$

Body

application/json
scenario_key
string
required
Maximum string length: 100
Example:

"application.applied"

scenario_version
integer
required
Required range: x >= 1
Example:

1

brand_id
integer
required
Required range: x >= 1
Example:

1001

athlete_ids
integer[]
required
Required array length: 1 - 50 elements
Required range: x >= 1
Example:
options
object

Response

Authoritative no-write review.

data
object
required
meta
object
required