Testing & Credentials
Production Test Environment
The Railway production deployment includes seeded test customers ready for API testing.
Base URL: https://api-production-56df.up.railway.app
Seeded Customers
These are test credentials for the shared staging/demo environment. Do not use for production workloads.
| Customer | Tier | Customer ID | API Key |
|---|
| Acme Corp | starter | eec10443-1791-4584-86d6-478af5babebd | sk-acme-b96cb84498324444 |
| TechStart Inc | pro | 3a05d5f4-c498-4825-a707-77da4b8fbc04 | sk-tech-d9acb4d86bb04979 |
| Enterprise Global | enterprise | 561af9f1-8b87-40d1-9762-cf25d0f3fe3f | sk-ent-20b322cc26bd4d0e |
| Acme Corp (Postman) | starter | a1b2c3d4-e5f6-7890-abcd-ef1234567890 | sk-acme-postman-test-key |
Rate Limits by Tier
| Tier | Events/Day | Use For |
|---|
starter | 10,000 | Basic testing, single-agent scenarios |
pro | 100,000 | Multi-agent testing, batch ingestion |
enterprise | 1,000,000 | Load testing, full pipeline validation |
Postman Collection
Import the Postman collection for pre-built requests across all endpoints:
Import the collection
File: infra/postman/quint-infra.postman_collection.jsonThe collection includes 10 folders with pre-configured requests for all API endpoints.
Import the environment
File: infra/postman/railway-production.postman_environment.jsonSets base_url, api_key, and customer_id variables.
Send your first request
Open Health > Simple Health Check and send. You should get {"status": "ok"}.
Collection Structure
| Folder | Requests | Description |
|---|
| Health | 2 | Simple and detailed health checks |
| Events — MCP | 3+ | GitHub PR, Slack message, unverified server scenarios |
| Events — Tool | 2+ | Database queries, file reads |
| Events — Data | 2+ | PII access, bulk export scenarios |
| Events — Auth | 2+ | Failed login, privilege escalation |
| Events — Network | 2+ | External API calls, DNS lookups |
| Batch Events | 1 | Bulk ingestion (up to 1000 events) |
| Scores | 3 | List, summary, and detail retrieval |
| Policies | 3 | Create, read, update policy configuration |
| Justification | 1 | RAG-grounded compliance justification |
Local Development Setup
Start backing services
cd infra
docker compose up -d postgres redis
Run migrations and seed data
.venv/bin/python3 scripts/migrate.py
.venv/bin/python3 scripts/seed.py
Start the API server
.venv/bin/python3 -m uvicorn src.api.main:create_app --factory --reload --port 8000
http://localhost:8000Run tests
# Graph tests (194 tests)
.venv/bin/python3 -m pytest graph/tests/ -q --no-cov
# Infra tests (381 tests)
.venv/bin/python3 -m pytest infra/tests/unit/ -q --no-cov
Test Scenarios
Low-Risk Event (Expected Score: 1-10)
curl -X POST http://localhost:8000/events \
-H "Content-Type: application/json" \
-H "X-API-Key: YOUR_LOCAL_KEY" \
-d '{
"event_id": "test-low-001",
"action": "mcp:notion:page.read",
"timestamp": "2026-02-26T10:00:00Z",
"agent": {"agent_id": "bot", "agent_type": "support"},
"target": {"resource_type": "page", "sensitivity_level": 1},
"mcp_context": {"server_name": "notion", "is_verified": true}
}'
Medium-Risk Event (Expected Score: 31-55)
curl -X POST http://localhost:8000/events \
-H "Content-Type: application/json" \
-H "X-API-Key: YOUR_LOCAL_KEY" \
-d '{
"event_id": "test-med-001",
"action": "tool:database:query.execute",
"timestamp": "2026-02-26T10:00:00Z",
"agent": {"agent_id": "bot", "agent_type": "analytics"},
"target": {"resource_type": "database", "sensitivity_level": 3},
"data_fields_accessed": [
{"field": "email", "classification": "pii"},
{"field": "revenue", "classification": "internal"}
]
}'
Critical-Risk Event (Expected Score: 81-100)
curl -X POST http://localhost:8000/events \
-H "Content-Type: application/json" \
-H "X-API-Key: YOUR_LOCAL_KEY" \
-d '{
"event_id": "test-crit-001",
"action": "mcp:postgres:query.execute",
"timestamp": "2026-02-26T03:00:00Z",
"agent": {"agent_id": "bot", "agent_type": "sales"},
"target": {"resource_type": "database", "sensitivity_level": 4},
"data_fields_accessed": [
{"field": "ssn", "classification": "pii_sensitive"},
{"field": "credit_card", "classification": "financial"}
],
"parameters": {"query": "SELECT * FROM customers", "row_limit": 5000},
"mcp_context": {"server_name": "postgres-mcp", "is_verified": false}
}'
Test Suite Summary
| Suite | Tests | Skipped | Command |
|---|
Graph (quint-graph) | 194 | 6 (GNN/Memgraph deps) | pytest graph/tests/ -q --no-cov |
| Infra (API + DB) | 381 | 2 | pytest infra/tests/unit/ -q --no-cov |
| Total | 575 | 8 | |
