Get started

Environments

Build and validate integrations safely across Sandbox, Staging and Production environments.

Open API Explorer

Environment overview

Sandbox

Build with synthetic identities, test tenants and non-production data.

Staging

Controlled pre-production validation for approved integrations and release candidates.

Production

Live healthcare and commercial workloads after onboarding and enablement.

Sandbox

Safe integration workspace

Use test identities and synthetic data only. Sandbox behavior should mirror production contracts where practical, but no real clinical, payment or regulated operational event should be assumed to occur.

Staging

Staging is intended for controlled end-to-end validation, release qualification and integration tests that need a production-like configuration. Access may be limited to approved partners and specific test tenants.

Production

Approved access

Production credentials are enabled only after the relevant onboarding and security checks.

Real data

Apply contractual, privacy, healthcare and tenant access controls appropriate to the workload.

Operational controls

Use monitoring, audit trails, alerting, retry policies and documented support paths.

Base URLs

Environment	Base URL	Data
Sandbox	https://sandbox.api.mediloop.com	Synthetic/test only
Staging	Provided during approved onboarding	Controlled test data
Production	https://api.mediloop.com	Live authorized data

Data & credentials

Never reuse credentials across environments. Keep sandbox, staging and production secrets, webhooks, redirect URIs and tenant identifiers isolated. Never copy production patient data into lower environments unless an explicitly approved anonymization/test-data process exists.

Promotion checklist

Integration passes sandbox functional tests

Authentication and least-privilege scopes are reviewed

Tenant and membership authorization is validated

Webhook signatures/retries are tested where used

No production secrets are stored in source control

Monitoring, audit and incident contacts are ready

Production onboarding requirements are approved

Environment-specific URLs and credentials are configured