Testing

Simulating errors

Test auth, origin, rate-limit, validation, and unknown project failures.

Auth failures

Call a secret-key endpoint without auth and with a publishable key. Expect actionable 401 or 403 errors.

Origin mismatch

Use a publishable key from an unlisted origin and confirm the runtime `forbidden` error is visible to the developer.

Rate limits

Generate repeated calls against a test key and confirm 429 includes Retry-After.

Need rollout review?

Contact the team

Start in the dashboard, choose Script Tag or Server API, and use contact only when you need rollout review, enterprise coordination, or non-standard integration help. Billing beacon rules live in the API concepts guide.