← All frames · Frame 07 · flow playground · route /playground

Playground — request builder, response, quota

The "Try it" panel. Three things are always visible and never dismissible: the target this request will actually hit, the statement that it is not production, and the remaining quota. A developer must never have to guess which system they are about to touch.

🛡

This never touches production.

Requests are brokered by devportal-service to a mock generated from this spec (Prism), or to a sandbox URL the owning repo explicitly opted in. A production servers: entry is never called. Your Fuze session token is not forwarded — the proxy mints a synthetic sandbox identity scoped to that target only, so a bug in a mock can't be tricked into treating you as a real principal.

POST /api/v1/apps registerApp

Sandbox target

Resolved base: mock://app-registry-service@v1.4.0 · reachable

Path parameters

None for this operation.

Query parameters

Name	Value	Type
`dryRun`		boolean

Headers

Name	Value
`content-type`	application/json
`authorization`	injected by the sandbox proxy
`x-fuzefront-sandbox`	true

The authorization header is not editable — a developer cannot paste a real production token into a sandbox call.

Request body · AppRegistration

{
  "slug": "fuzepicker",
  "name": "Picker",
  "routing": { "path": "/app/fuzepicker" }
}

Prefilled from the spec's example. Validated against the operation's schema before the request leaves the browser.

201 Created 84 ms 312 B from mock

Body Headers Trace

response body · application/json

{
  "id": "app_01j9k2xq7ne3ta6yb1m4v0dzcw",
  "slug": "fuzepicker",
  "name": "Picker",
  "routing": { "path": "/app/fuzepicker" },
  "createdAt": "2026-09-08T10:42:11Z"
}

Values are generated from the schema, not from a real database. Nothing was created anywhere.

Sandbox requests today 138 / 500

Resets in 6h 12m · counted against DevPortalPlayground:use · see your quota

Your recent calls

POST /api/v1/apps 201

GET /api/v1/apps 200

DELETE /api/v1/apps/{slug} 403

Only your own calls (DevPortalPlayground:view_history).

Test hooks: [data-frame='07-playground'] · [data-safety-notice='sandbox-only'] · [data-panel='request-builder'] · [data-select='sandbox-target'] · [data-sandbox-mode='mock'] · [data-input='request-body'] · [data-security-note='synthetic-identity'] · [data-action='send-request'] · [data-panel='response'] · [data-response-status='201'] · [data-panel='quota'] · [data-quota-used='138'].
Contract: POST /api/v1/devportal/sandbox/requests, GET /api/v1/devportal/sandbox/quota, GET /api/v1/devportal/sandbox/history.