Test mode

Build and test integrations without sending real emails or burning plan caps.

Two completely separate worlds

Every key carries a mode in its prefix:

prearrive_live_sk_…      → live data, real emails
prearrive_test_sk_…      → test data, no real emails

The two are isolated end-to-end:

A live key never sees test reservations (404).
A test key never sees live reservations (404).
Test-mode reservations don't count against your plan caps (free-tier overlap rule, future property cap math).
Test-mode webhooks fire with livemode: false in the event payload, so your receiver can branch on it.

What happens when you call `POST /v1/reservations/{id}/send` with a test key

No real email goes to the guest. Instead:

The reservation row is marked sent_at = now, status = "sent".
The rendered email body (subject + HTML + text) is stashed in a short-lived KV slot (24h TTL).
The response includes email_preview_url on the reservation.
The reservation.sent webhook fires with livemode: false.

Reading the preview

GET https://api.prearrive.com/v1/reservations/res_…/email_preview
Authorization: Bearer prearrive_test_sk_…

{
  "object": "email_preview",
  "reservation_id": "res_…",
  "rendered_at":  "2026-05-20T05:30:00Z",
  "would_send_to": "guest@example.com",
  "from":          "host@example.com",
  "subject": "Your Beachside Loft check-in packet — please review",
  "html":    "<!doctype html>…full body…",
  "text":    "Hi Avery, …"
}

The preview disappears after 24 hours. Use it to:

Snapshot-test the rendered HTML in CI.
Verify branding (logo, color) before flipping to a live key.
Confirm the right host email is set as the From identity.

Creating a test key

Sign in to /app/settings/api.
Switch to the Test tab.
Create a new key — same scope picker as live. Copy the plaintext (shown once).

You get the same 3-keys-per-mode cap and the same rotation flow. Test and live keys are fully independent.

What's the same as live

Same OpenAPI spec.
Same rate limits (100 read / 30 write per minute).
Same idempotency, ETag, error envelope, webhook signing.
Same per-request audit row in /app/settings/api → Usage.