Testing & Credentials

Sample API keys, customer IDs, and testing setup for the Quint platform

Testing & Credentials

Production Test Environment

The Railway production deployment includes seeded test customers ready for API testing.

Base URL: https://api-production-56df.up.railway.app

Seeded Customers

These are test credentials for the shared staging/demo environment. Do not use for production workloads.

Customer	Tier	Customer ID	API Key
Acme Corp	starter	eec10443-1791-4584-86d6-478af5babebd	sk-acme-b96cb84498324444
TechStart Inc	pro	3a05d5f4-c498-4825-a707-77da4b8fbc04	sk-tech-d9acb4d86bb04979
Enterprise Global	enterprise	561af9f1-8b87-40d1-9762-cf25d0f3fe3f	sk-ent-20b322cc26bd4d0e
Acme Corp (Postman)	starter	a1b2c3d4-e5f6-7890-abcd-ef1234567890	sk-acme-postman-test-key

Rate Limits by Tier

Tier	Events/Day	Use For
starter	10,000	Basic testing, single-agent scenarios
pro	100,000	Multi-agent testing, batch ingestion
enterprise	1,000,000	Load testing, full pipeline validation

Postman Collection

Import the Postman collection for pre-built requests across all endpoints:

1. Import the collection

   File: infra/postman/quint-infra.postman_collection.json

   The collection includes 10 folders with pre-configured requests for all API endpoints.

2. Import the environment

   File: infra/postman/railway-production.postman_environment.json

   Sets base_url, api_key, and customer_id variables.

3. Send your first request

   Open Health > Simple Health Check and send. You should get {"status": "ok"}.

Collection Structure

Folder	Requests	Description
Health	2	Simple and detailed health checks
Events — MCP	3+	GitHub PR, Slack message, unverified server scenarios
Events — Tool	2+	Database queries, file reads
Events — Data	2+	PII access, bulk export scenarios
Events — Auth	2+	Failed login, privilege escalation
Events — Network	2+	External API calls, DNS lookups
Batch Events	1	Bulk ingestion (up to 1000 events)
Scores	3	List, summary, and detail retrieval
Policies	3	Create, read, update policy configuration
Justification	1	RAG-grounded compliance justification

Local Development Setup

1. Start backing services

   cd infra
   docker compose up -d postgres redis
   
2. Run migrations and seed data

   .venv/bin/python3 scripts/migrate.py
   .venv/bin/python3 scripts/seed.py
   

   The seed script prints API keys for local test customers.

3. Start the API server

   .venv/bin/python3 -m uvicorn src.api.main:create_app --factory --reload --port 8000
   

   Local base URL: http://localhost:8000

4. Run tests

   # Graph tests (194 tests)
   .venv/bin/python3 -m pytest graph/tests/ -q --no-cov
   
   # Infra tests (381 tests)
   .venv/bin/python3 -m pytest infra/tests/unit/ -q --no-cov
   

Test Scenarios

Low-Risk Event (Expected Score: 1-10)

curl -X POST http://localhost:8000/events \
  -H "Content-Type: application/json" \
  -H "X-API-Key: YOUR_LOCAL_KEY" \
  -d '{
    "event_id": "test-low-001",
    "action": "mcp:notion:page.read",
    "timestamp": "2026-02-26T10:00:00Z",
    "agent": {"agent_id": "bot", "agent_type": "support"},
    "target": {"resource_type": "page", "sensitivity_level": 1},
    "mcp_context": {"server_name": "notion", "is_verified": true}
  }'

Medium-Risk Event (Expected Score: 31-55)

curl -X POST http://localhost:8000/events \
  -H "Content-Type: application/json" \
  -H "X-API-Key: YOUR_LOCAL_KEY" \
  -d '{
    "event_id": "test-med-001",
    "action": "tool:database:query.execute",
    "timestamp": "2026-02-26T10:00:00Z",
    "agent": {"agent_id": "bot", "agent_type": "analytics"},
    "target": {"resource_type": "database", "sensitivity_level": 3},
    "data_fields_accessed": [
      {"field": "email", "classification": "pii"},
      {"field": "revenue", "classification": "internal"}
    ]
  }'

Critical-Risk Event (Expected Score: 81-100)

curl -X POST http://localhost:8000/events \
  -H "Content-Type: application/json" \
  -H "X-API-Key: YOUR_LOCAL_KEY" \
  -d '{
    "event_id": "test-crit-001",
    "action": "mcp:postgres:query.execute",
    "timestamp": "2026-02-26T03:00:00Z",
    "agent": {"agent_id": "bot", "agent_type": "sales"},
    "target": {"resource_type": "database", "sensitivity_level": 4},
    "data_fields_accessed": [
      {"field": "ssn", "classification": "pii_sensitive"},
      {"field": "credit_card", "classification": "financial"}
    ],
    "parameters": {"query": "SELECT * FROM customers", "row_limit": 5000},
    "mcp_context": {"server_name": "postgres-mcp", "is_verified": false}
  }'

Test Suite Summary

Suite	Tests	Skipped	Command
Graph (quint-graph)	194	6 (GNN/Memgraph deps)	pytest graph/tests/ -q --no-cov
Infra (API + DB)	381	2	pytest infra/tests/unit/ -q --no-cov
Total	575	8