Skip to main content
The public contract documents one production base URL:
Internal development or stage hosts are not part of the customer-facing contract and must not be embedded in public client configuration.

Dry run versus separate environment

dryRun=true is a request mode on supported write operations. It is not a sandbox and does not use a separate database.

Safe test strategy

1

Use a dedicated key

Create a key with the minimum company and division scope required for development or acceptance testing.
2

Use agreed test records

Coordinate test employees, orders, incidents, divisions, and payroll periods with the responsible customer administrators.
3

Validate writes first

Use dryRun=true on supported operations and inspect the projected resource and error behavior.
4

Apply a controlled write

Perform one real request in the agreed scope and verify all persistence and side effects.
5

Test recovery

Exercise timeouts, 409, 422, 429, and credential deactivation before enabling automation.

What health does and does not prove

GET /health proves that the public API is reachable and can return its health response. It does not prove:
  • API-key validity
  • tenant or division scope
  • access to a specific resource
  • availability of a downstream document file
  • correctness of a write payload
Use at least one protected read and one supported dry run for an end-to-end integration check.
Do not use an undocumented internal host as a fallback. A client should fail safely if the production base URL is unavailable.
Last modified on August 27, 2026