SANDBOX_VALUE_NOT_ALLOWED
The sandbox key does not answer for that value
The endpoint is one the sandbox answers, but only for the sample values the documentation prints, and the request asked about something else.
- http status
- 403
- credits
- Nothing is billed for a failed request.
What it means
A sandbox that answered for any input would be a free lookup API. Each operation accepts exactly the values its documentation publishes: the six test addresses on spaw.test, the seven test numbers in the 555-01XX fiction block, and the sample IP and postal address the API reference prints.
The request body has to carry those fields and nothing else. An extra field is refused rather than ignored, which is what keeps the options that would cost something — a callback URL, a forced refresh, the live carrier check, the deliverability check, the reverse-DNS and abuse-contact lookups — out of the sandbox.
The message names the values the endpoint would have answered for.
What to do
Send one of the documented sample values, or use your own sk_live_ key to ask about a real address, number or IP. Check the request is JSON: curl -d without Content-Type: application/json sends a form field, which is not one of the accepted bodies.
Example response
{
"success": false,
"error": {
"code": "SANDBOX_VALUE_NOT_ALLOWED",
"message": "The sandbox key answers this endpoint only for the documented test addresses ([email protected], [email protected], [email protected], [email protected], [email protected], [email protected]). Send them as JSON with Content-Type: application/json, or use a key of your own for anything else.",
"request_id": "req_01m1kgdm4xngzmbmff68g94w0c"
}
}Every error carries the request_id also sent in the X-Request-Id header; quote it when writing to support.
Related
- ORIGIN_NOT_ALLOWED · the page's origin is not on the key's allowed list
- KEY_IP_NOT_ALLOWED · the key is used from an address outside its allowlist
- KEY_ACCOUNT_MISMATCH · the key belongs to an account its holder has left
- KEY_SCOPE_DENIED · the key lacks the scope this endpoint needs
- SANDBOX_ENDPOINT_NOT_ALLOWED · the sandbox key does not answer this endpoint
- TURNSTILE_FAILED · the publishable key requires a Cloudflare Turnstile token
- EMAIL_NOT_VERIFIED · the account behind the key has not confirmed its email address
- All error codes
- Verdicts and the risk score
- API reference
markdown version: /docs/errors/SANDBOX_VALUE_NOT_ALLOWED.md