Testing

Simulating errors

Test auth, origin, rate-limit, validation, and unknown project failures.

Auth failures

Call a secret-key endpoint without auth and with a publishable key. Expect actionable 401 or 403 errors.

Origin mismatch

Use a publishable key from an unlisted origin and confirm the runtime `forbidden` error is visible to the developer.

Rate limits

Generate repeated calls against a test key and confirm 429 includes Retry-After.

Need rollout review?

Start with the Server API. Use contact only when you need rollout review, enterprise coordination, or non-standard integration help.